Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: gD62VKxy65OiNtsCjbFAwe0ik039+EwnvY+GsVsnwJo=
Subject key identifier: 11:C3:EB:02:10:0A:68:C0:F8:6B:13:59:78:B7:8F:79:89:EC:94:90
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0199FBEAA4B8EABF16773B83D6E5BD0773E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0490
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: /Nm1Y/W+uim+7P+ILW9U4+IyDduU56pChs5RvvojhMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a4:b8:ea:bf:16:77:3b:83:d6:e5:bd:07:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=11c3eb02100a68c0f86b135978b78f7989ec9490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:48:5c:a7:96:17:bf:c8:ac:d3:54:4b:69:
b7:32:88:52:2e:b0:6d:07:6c:a9:78:1b:3b:2d:88:
89:f5:92:4d:f2:9e:24:41:b0:f7:dc:b7:f0:bb:37:
10:e7:f1:a0:96:27:4a:24:3e:25:bc:c9:8e:77:6e:
2f:1d:84:44:eb:79:44:57:f1:fa:b7:22:d9:5e:e7:
a1:e2:93:0e:cb:2d:29:ea:41:94:61:91:ad:0b:96:
9a:2a:f3:b9:ab:e4:23:0d:dc:c6:80:70:be:bf:68:
9e:b3:9f:06:98:e1:a6:0a:28:68:85:25:19:49:dc:
94:87:ee:e4:a5:08:63:a9:fd:5c:e1:74:47:a4:b8:
a4:44:fa:42:b6:e6:d8:01:a3:2f:00:d9:37:52:9d:
88:69:74:d0:d5:50:fe:3c:b8:93:61:3b:84:27:59:
24:18:47:12:20:6f:6d:7e:ad:6d:51:16:77:85:7e:
45:37:6a:d4:c5:8f:07:a0:94:0a:a2:da:1d:74:3c:
a0:cd:d2:c2:a6:1d:93:35:41:85:71:99:43:c6:99:
1d:0e:c9:5a:c1:24:c9:bf:82:4c:ba:b6:58:11:19:
6f:34:ab:4a:e9:31:73:de:f8:ec:bb:cc:53:f0:d6:
c7:f6:b7:82:6e:04:53:8c:80:d9:62:26:66:fa:d6:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:EB:02:10:0A:68:C0:F8:6B:13:59:78:B7:8F:79:89:EC:94:90
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9f:79:d0:3d:ae:11:b2:7a:2b:1b:8e:1a:4a:c0:9a:2c:fa:
a5:39:a1:9e:a3:1b:6e:95:6e:d5:de:87:f1:d4:11:1a:0c:0a:
64:a9:2f:bd:ad:ef:58:6c:a2:84:58:ae:05:6e:16:d6:a3:bb:
16:b0:51:de:9c:1f:7d:04:b5:09:93:6f:b7:a4:e1:c8:b2:05:
40:9a:b3:a7:60:20:a4:db:60:84:74:7c:86:62:35:6b:20:3e:
48:4b:28:5d:d7:89:8b:47:f9:2a:65:eb:cb:6f:f1:f9:08:50:
e4:c6:c7:d4:fc:ab:c3:85:4f:bf:18:b7:07:ae:db:5f:ff:1c:
6d:82:2c:2c:60:57:57:4f:04:be:02:59:ce:e9:19:f6:57:7e:
5a:10:aa:64:88:b6:47:98:4e:13:b2:d5:c6:d1:5a:06:75:5e:
f4:2e:cd:ff:4a:3c:53:4d:4a:7d:c5:de:59:11:ac:58:2a:f3:
0e:35:2c:df:4d:42:19:55:7d:a2:81:f7:46:b4:2c:d8:1e:33:
c3:bc:b3:83:b4:64:b1:d3:45:0b:94:06:bd:1b:29:b7:15:7d:
dd:90:5a:3d:5a:03:bd:cd:e2:bd:1e:28:5c:e2:4e:52:31:ac:
1f:22:ed:55:2d:94:3b:ba:30:12:54:83:6a:f2:1e:ff:56:57:
01:d8:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:26 2025 by rpki-client