Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: 5fsSeHK2+V5bZGYcm+SwAlPKKpIVMxPRsg7bTD7Hc6Q=
Subject key identifier: 9E:F2:DD:D0:9D:2E:4C:7D:D0:66:A3:DA:67:0C:FD:57:19:14:07:D2
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0198D4737597B73C1BE14F5B1B9EB4889C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 03F7
Signing time: Sat 23 Aug 2025 01:03:13 +0000
Manifest this update: Sat 23 Aug 2025 01:03:13 +0000
Manifest next update: Sun 24 Aug 2025 01:03:13 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: RLulHs3WZ45ud4EJZSp5n1dsG2Rd1Aa3X+z0bcbrrK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:75:97:b7:3c:1b:e1:4f:5b:1b:9e:b4:88:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Aug 23 01:03:13 2025 GMT
Not After : Aug 24 01:03:13 2025 GMT
Subject: CN=9ef2ddd09d2e4c7dd066a3da670cfd57191407d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:05:c7:d0:22:fa:96:a2:34:ab:b1:9d:aa:
51:a6:b3:7c:28:40:69:6d:f4:14:70:9b:a9:63:9d:
1b:7d:f5:75:d7:7a:fa:ac:42:b3:8f:8d:a9:bc:37:
8e:f9:fd:31:96:d7:4c:52:e7:f7:bf:d5:ef:ea:4a:
db:89:81:c3:db:42:96:f8:35:a6:52:55:12:0c:62:
e6:18:62:6e:a0:4b:a5:7e:b9:13:aa:e9:80:7a:b5:
d5:bc:ae:03:e8:d2:17:b4:9d:ee:35:e1:3b:86:49:
0b:fe:49:fb:eb:01:7f:a4:09:da:11:80:d8:2c:38:
27:52:9d:c2:79:10:e1:54:51:73:7a:f2:38:f2:2f:
1c:87:54:9c:c2:50:2c:ce:49:e2:36:21:4e:8d:45:
27:c3:97:7f:61:2d:7b:bb:0c:04:2f:0d:d3:be:9c:
89:08:54:f5:3a:38:8f:15:a0:97:d2:3c:75:40:e0:
ca:1f:d9:4b:98:bb:a1:a1:ed:03:f2:e2:f5:25:aa:
ac:0e:f0:92:f7:70:b6:0c:0f:dc:bd:81:68:1d:4e:
8f:63:71:dd:d1:fb:79:aa:98:34:b9:54:7e:80:f6:
43:b4:8a:c4:26:d2:00:5c:aa:2a:30:eb:b7:3a:20:
ca:0c:ad:90:8f:e2:f7:2b:b4:30:00:65:69:f9:84:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:DD:D0:9D:2E:4C:7D:D0:66:A3:DA:67:0C:FD:57:19:14:07:D2
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ff:4b:f5:0e:1a:40:09:ff:1a:63:57:46:7e:2a:51:54:5a:
67:42:86:d7:1a:4b:d2:d1:7a:df:94:55:a3:39:a4:bf:38:7e:
92:64:c3:1d:58:cb:7b:f0:31:9b:dc:d5:5e:4e:7f:d8:ea:ac:
0d:39:3a:ca:5e:20:8f:c8:59:b0:44:01:75:9e:0a:1b:3e:95:
aa:aa:59:26:a7:3c:af:90:d9:c8:e1:13:b5:f7:97:13:d8:63:
95:c9:50:ff:e7:f1:f5:8e:54:5e:6a:9f:c3:1a:4d:e3:e7:c0:
9a:74:25:e3:fb:57:f0:23:41:d8:6d:e9:fb:1b:34:b4:de:1d:
46:af:ee:6a:d2:78:34:68:bd:71:3a:8f:d2:f7:a2:66:e3:78:
6e:f4:be:01:fd:ba:c8:f4:89:85:85:76:5d:5a:2b:65:bc:50:
80:36:31:cc:e9:d3:bb:47:41:c4:0d:15:e4:a4:26:47:b0:40:
0b:ff:44:52:3f:c3:b5:ed:ca:cf:83:0f:15:4f:b1:6c:8b:02:
0d:ef:29:66:4f:28:ad:dd:26:08:bb:04:d4:c6:88:de:25:09:
d3:1e:b7:75:c8:75:56:5d:72:9e:34:20:97:47:76:df:7e:df:
f1:3b:b6:9b:43:39:40:f6:37:83:dc:e1:79:76:c8:a9:7a:66:
e3:78:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:36 2025 by rpki-client