Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: v4TrO6z3VCRUJDc80i2YfqqnZG8F+2eMNZ9BHKRQVkM=
Subject key identifier: F4:1F:9D:3E:D9:0B:3F:6F:BE:38:3F:3A:F0:75:99:B1:0A:6F:C3:79
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 0198D92B2E94D1B9FEB994EB83499A37E3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 23:02:22 +0000
Manifest this update: Sat 23 Aug 2025 23:02:22 +0000
Manifest next update: Sun 24 Aug 2025 23:02:22 +0000
Files and hashes: 1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=)
2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=)
3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: 2ZShisK4xIWlH9gBm1cpgVMM9LcFr6MuyOA1c8OB+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:2e:94:d1:b9:fe:b9:94:eb:83:49:9a:37:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Aug 23 23:02:22 2025 GMT
Not After : Aug 24 23:02:22 2025 GMT
Subject: CN=f41f9d3ed90b3f6fbe383f3af07599b10a6fc379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:9b:34:31:fd:34:19:e8:2c:79:cb:53:1e:
e2:3a:e8:01:2e:40:9e:b7:07:64:f1:9f:b4:fe:82:
d1:91:f5:41:93:b4:ff:7f:95:fc:b3:1d:fe:f6:83:
07:b8:de:67:84:07:80:a8:03:f4:2c:ff:95:b0:fa:
55:7d:e2:6a:99:c6:d0:1d:6a:9b:eb:5f:06:89:d8:
5e:8e:47:d8:77:36:6c:3c:9d:be:1d:07:aa:30:a7:
b3:35:46:4f:e2:66:a1:c1:d7:b1:64:6b:05:7b:96:
cf:70:d0:3d:d4:f6:2f:b9:19:a8:a6:d9:62:15:6f:
e8:1c:21:2e:04:7e:fe:be:67:a7:a4:8a:8a:00:76:
6a:8a:35:ef:83:74:0a:04:a6:9e:f6:d0:bf:06:d7:
dd:82:b2:95:83:95:de:21:ab:d3:bd:7a:df:cc:43:
29:46:c8:d4:13:5f:d6:f8:c1:e6:23:30:94:35:5d:
29:b9:53:79:b2:cd:de:7b:d4:30:94:c1:60:e9:31:
a7:26:a8:bb:ec:fc:db:b6:8d:50:08:8f:b5:63:2e:
76:c8:23:94:d5:e6:39:0f:83:09:82:e8:ea:da:18:
33:d7:90:48:7a:ba:3d:ad:2f:37:89:2d:fd:ff:37:
83:60:3d:34:4f:e4:23:71:20:6c:08:7e:4e:80:33:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:9D:3E:D9:0B:3F:6F:BE:38:3F:3A:F0:75:99:B1:0A:6F:C3:79
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3d:10:dc:25:0a:7c:b5:e8:b1:9e:8d:4e:16:2b:b7:7b:cf:
f6:23:f1:cd:4b:8a:ec:05:14:ba:38:28:c8:f0:6c:91:30:aa:
50:d9:32:bb:d6:90:74:27:26:58:fc:d7:e9:9d:a1:c6:c9:e9:
91:b1:54:16:5e:6b:1a:fc:9f:e9:ad:7e:39:52:29:20:d2:14:
30:a4:92:b3:14:b0:a8:3a:6b:e0:7b:08:35:ed:6d:eb:76:b1:
0c:51:49:d7:0b:f0:c7:32:89:2d:14:f4:78:1d:9a:e6:6d:c1:
64:08:38:94:83:b5:7b:5c:21:56:c6:6b:65:75:13:c6:26:9f:
d3:41:29:86:71:4f:e2:16:6f:7f:94:54:43:8f:46:43:b6:9b:
bd:de:92:0e:5d:96:0c:b1:68:92:68:b6:da:87:93:43:31:a5:
e1:0c:21:52:53:5d:2e:e6:ad:4c:fd:c4:e4:4d:66:ca:33:ed:
f6:02:c7:62:01:26:13:a4:4f:09:ca:01:9c:f7:dc:43:a4:6d:
0e:66:14:69:80:3d:57:71:b6:64:95:8a:e3:f6:64:3c:ec:ef:
81:a6:d8:be:c7:45:17:7c:84:86:52:8b:40:e5:57:0f:ff:9d:
42:fa:d5:27:f4:e3:bb:09:5e:66:c1:a9:09:eb:04:56:b5:e1:
c2:c6:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:21 2025 by rpki-client