Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: EYYUv72+6AzO9fExYK4dTd/UDH4sU13XqZOsCD5CiOA=
Subject key identifier: 2C:CB:C6:C4:6B:67:3E:D1:3F:06:D8:05:B0:A2:6C:B4:14:19:05:9C
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0199FE474EDF7CE640B9EF9341034422BA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1238
Signing time: Sun 19 Oct 2025 21:01:50 +0000
Manifest this update: Sun 19 Oct 2025 21:01:50 +0000
Manifest next update: Mon 20 Oct 2025 21:01:50 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 16vhd6Pvl1xLF1RJL+yIC5MKJcunFIunwwwStEh7u2g=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:4e:df:7c:e6:40:b9:ef:93:41:03:44:22:ba:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Oct 19 21:01:50 2025 GMT
Not After : Oct 20 21:01:50 2025 GMT
Subject: CN=2ccbc6c46b673ed13f06d805b0a26cb41419059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:38:63:25:16:39:e5:99:82:bd:79:27:57:
dc:23:b2:1a:ec:0d:f1:88:90:d0:e0:1b:ae:ae:c1:
55:58:7b:b1:d7:e3:ca:86:39:00:bc:e2:51:b0:c8:
bc:4b:f8:2e:87:a5:ba:d0:87:51:e3:33:f6:c6:c4:
2f:f4:86:5c:3e:87:3c:84:5a:6e:72:ea:e6:9d:e7:
3c:99:7d:55:d0:58:01:db:59:64:b5:a2:3e:55:45:
84:71:17:5a:ec:d1:47:c6:64:cb:cf:05:41:71:b9:
d0:7a:fd:08:e1:62:1d:29:33:d3:ee:40:a2:47:7c:
d6:94:64:aa:34:bb:72:93:d2:93:54:e3:ee:d5:9a:
0d:e6:a7:e5:5d:2f:91:42:0f:80:48:02:05:99:2f:
82:b1:aa:3e:dd:7b:f5:f9:1d:6c:d5:b0:95:9b:1b:
83:81:d9:e6:aa:d2:a6:8d:90:55:10:4f:e7:f1:94:
e4:37:14:34:e3:45:5d:aa:e4:02:bc:e8:51:2b:4a:
b3:72:f4:9a:b7:f4:32:ed:37:1d:f4:9f:f0:c6:cd:
d8:8e:5b:8c:32:c0:91:63:1c:78:46:52:ac:45:48:
b9:33:b8:66:c5:08:e9:2f:68:90:e9:16:c9:88:be:
a3:4b:e2:88:65:de:40:b6:75:f5:ec:a8:91:fa:61:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:C6:C4:6B:67:3E:D1:3F:06:D8:05:B0:A2:6C:B4:14:19:05:9C
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:af:be:95:61:5e:7f:9d:a2:a8:3f:0b:d5:48:bb:b0:72:b0:
92:3e:29:6f:f0:13:73:05:43:ec:b9:7c:e8:ab:b8:7e:fe:2d:
54:a6:37:3b:f1:5f:1c:98:cb:2c:ca:d9:ec:8a:da:25:80:94:
48:19:22:81:cf:c2:13:96:96:af:be:49:be:16:c2:3a:89:8a:
35:58:37:14:68:35:2b:d2:cb:8a:fe:5d:63:55:a6:92:4e:1a:
d5:7b:2a:ce:c3:d4:f4:06:57:ad:89:3f:9a:96:e4:70:c8:62:
f7:d9:4e:64:6d:08:fd:de:53:52:43:29:1a:4e:cf:7a:c7:03:
4b:71:85:63:42:75:b0:ba:f0:26:af:5f:de:67:8c:e5:f0:01:
1d:f2:22:bc:a9:95:19:fb:00:0e:90:8b:e6:fc:01:35:81:a7:
13:b9:06:fb:db:9d:f9:46:09:f1:46:7b:5d:e9:66:e8:98:7f:
28:bc:76:e6:ac:f0:ae:56:81:04:76:e2:4f:f1:b1:af:3b:d0:
98:c3:35:6e:82:d0:a6:d9:e9:6d:c5:51:13:a9:32:d2:9a:f8:
3e:92:b6:0b:77:22:40:c6:ab:ae:f2:8c:88:60:3d:6e:85:2d:
a6:7a:92:aa:76:72:5f:63:82:25:25:76:ad:10:09:53:7d:af:
d5:4e:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:34 2025 by rpki-client