Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: iSRrOoOFXP7uxPvFzlItHFPRLH7ZvKAc8HwfutHbB/I=
Subject key identifier: EF:D5:35:6D:DB:90:E4:6E:2D:12:27:56:16:22:B2:CE:B3:5A:7F:A0
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 0199FD346D15282ACBE35D004BAF5DC3A530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 14A6
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: Abu8AvOCJSOLzLu6xk+Rm6FvIQDuKXQxCWjy0lkm84w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6d:15:28:2a:cb:e3:5d:00:4b:af:5d:c3:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=efd5356ddb90e46e2d1227561622b2ceb35a7fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:ee:b8:62:06:e2:a6:a2:4f:32:53:e5:95:
4b:fa:32:a5:f3:d6:e8:3f:5a:b0:b2:56:ab:94:38:
57:2c:55:00:86:49:42:da:fb:4e:3c:fc:68:e9:26:
97:86:0f:55:d7:51:7d:7f:93:ea:d4:18:68:c0:c8:
54:e2:e5:5b:95:0e:6c:a5:1d:9a:8f:f9:01:e0:f8:
28:7d:a1:dd:99:6b:80:34:32:d5:ac:2b:fe:d9:13:
22:3b:18:a2:53:61:68:04:ef:87:17:22:94:e7:c7:
46:92:b2:d1:32:86:a7:34:63:62:a5:46:25:75:20:
2c:02:fd:c1:7b:41:c6:6f:a8:8e:ad:73:8a:2b:54:
43:05:51:bc:3f:52:44:96:5b:ed:d9:fa:4c:3c:5a:
68:87:52:77:b5:84:8c:5f:99:83:38:38:a3:e7:2f:
d5:d6:e4:88:f3:98:0e:b4:e3:44:99:50:73:a6:7d:
58:70:0d:a4:7c:7b:f6:27:f0:37:03:99:2c:70:0e:
bd:22:d7:7f:23:8e:96:8a:ef:86:6c:d9:ea:64:fe:
6c:15:dc:51:e6:ba:7b:3d:67:8e:5a:fa:24:60:ca:
bb:f7:9a:44:e4:8e:67:82:b1:c1:1f:5f:5d:73:48:
33:e4:0f:d5:1a:b2:b3:0f:87:cc:c0:fc:5e:ec:e2:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:35:6D:DB:90:E4:6E:2D:12:27:56:16:22:B2:CE:B3:5A:7F:A0
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ec:86:e1:d8:9c:6b:ad:99:4f:8c:11:16:9c:64:28:48:bd:
20:07:e5:f5:a8:44:9c:1f:8a:db:82:78:aa:e3:4d:19:4c:a9:
44:24:0a:aa:ca:57:15:b5:6c:45:54:f1:bf:74:63:40:7c:f3:
21:32:d1:d5:dc:2b:ff:c4:51:37:27:b2:79:11:3f:85:fa:3a:
a5:af:ec:b6:eb:43:3c:7f:51:21:d1:30:09:4e:0d:64:04:f3:
69:7e:80:c5:5f:e4:24:20:cc:1f:45:41:7e:26:70:08:37:21:
d4:ed:f7:e2:19:4f:79:f5:ff:8b:95:97:ac:36:a9:ba:4f:92:
61:86:b7:64:18:50:21:68:2c:b5:3e:13:87:60:8e:b0:73:6e:
09:50:26:19:44:f9:bb:06:7e:39:fd:3b:ec:df:3f:fc:b1:aa:
2f:a6:31:fb:92:c6:86:3b:94:73:08:89:fa:30:a0:6d:0e:a5:
dc:b0:ab:ac:ce:cc:70:5b:3a:d6:93:c9:28:97:c2:43:5c:e9:
16:59:52:d0:92:d3:d3:d0:ca:bc:f4:0e:8c:f6:23:0d:2b:ac:
46:58:7c:ce:25:af:6a:a4:07:9e:3b:c6:1c:3b:18:84:66:42:
97:21:7b:8f:8b:5e:42:7e:f9:ed:a8:95:93:2f:cd:b0:ad:77:
d1:53:77:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NG0VKCrL410AS69dw6UwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjdlMGM4NWEyZGViNTQ2NmVhYmRjOTA4NDYxNThhOTg3
Nzg0YTIwHhcNMjUxMDE5MTYwMTM1WhcNMjUxMDIwMTYwMTM1WjAzMTEwLwYDVQQD
EyhlZmQ1MzU2ZGRiOTBlNDZlMmQxMjI3NTYxNjIyYjJjZWIzNWE3ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWLuuGIG4qaiTzJT5ZVL+jKl89bo
P1qwslarlDhXLFUAhklC2vtOPPxo6SaXhg9V11F9f5Pq1BhowMhU4uVblQ5spR2a
j/kB4PgofaHdmWuANDLVrCv+2RMiOxiiU2FoBO+HFyKU58dGkrLRMoanNGNipUYl
dSAsAv3Be0HGb6iOrXOKK1RDBVG8P1JEllvt2fpMPFpoh1J3tYSMX5mDODij5y/V
1uSI85gOtONEmVBzpn1YcA2kfHv2J/A3A5kscA69Itd/I46Wiu+GbNnqZP5sFdxR
5rp7PWeOWvokYMq795pE5I5ngrHBH19dc0gz5A/VGrKzD4fMwPxe7OL5qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/VNW3bkORuLRInVhYiss6zWn+gMB8GA1UdIwQY
MBaAFJ9n4MhaLetUZuq9yQhGFYqYd4SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAt
ODRkYjM5NDAzNzY4LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAtODRkYjM5NDAzNzY4
LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeyG4dic
a62ZT4wRFpxkKEi9IAfl9ahEnB+K24J4quNNGUypRCQKqspXFbVsRVTxv3RjQHzz
ITLR1dwr/8RRNyeyeRE/hfo6pa/stutDPH9RIdEwCU4NZATzaX6AxV/kJCDMH0VB
fiZwCDch1O334hlPefX/i5WXrDapuk+SYYa3ZBhQIWgstT4Th2COsHNuCVAmGUT5
uwZ+Of077N8//LGqL6Yx+5LGhjuUcwiJ+jCgbQ6l3LCrrM7McFs61pPJKJfCQ1zp
FllS0JLT09DKvPQOjPYjDSusRlh8ziWvaqQHnjvGHDsYhGZClyF7j4teQn757aiV
ky/NsK130VN3kQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:25 2025 by rpki-client