Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: wa6Jbc+RD0Py2t/HtG98O9ZMQKSFfl8DwNok4JDjpZo=
Subject key identifier: DD:86:60:A8:FB:AC:31:A5:34:65:A7:D1:4D:56:4C:71:50:99:DB:29
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0199FCFD7854D27973E3DF20397E4F755408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 02C6
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 7LvsmpuwRSZ9Pw4IRzcIH0MGmO0gK/U0xeWU9Ah0ijQ=)
3: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:78:54:d2:79:73:e3:df:20:39:7e:4f:75:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=dd8660a8fbac31a53465a7d14d564c715099db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:b5:70:f3:ed:59:2b:a4:e8:4f:24:6c:fc:
e9:7c:c5:ef:f2:db:d7:c6:96:20:56:df:05:53:7e:
dd:51:60:d2:fa:a1:9c:0d:ef:15:22:60:67:54:88:
2a:dc:21:18:3b:dd:cb:54:53:d1:70:c6:2c:30:fb:
1b:29:64:2d:22:a9:fb:b8:57:e2:36:87:fb:ac:0d:
d9:84:f9:d1:f1:61:5b:47:fa:ef:6f:b6:aa:fc:bb:
69:4c:ae:cc:37:78:12:24:7d:4e:1d:ef:ff:e1:aa:
db:e3:5b:d9:44:e8:6c:59:37:1c:f0:f6:92:0d:52:
97:0e:59:55:5f:18:91:2b:a7:1c:8d:b0:19:6a:c4:
a3:30:ea:35:e2:7e:f5:14:08:90:26:6b:c0:46:b3:
cb:3a:17:d5:04:fd:f7:25:2d:f2:24:e5:af:d6:c6:
4b:61:4e:24:9b:bc:97:cd:4e:29:9d:ad:cb:43:9b:
e5:3e:4f:48:8c:d2:ac:23:e9:0e:d6:76:64:a9:1c:
08:32:af:57:b7:6c:e5:f4:36:f1:8f:26:94:27:9c:
2c:be:e6:84:bc:7c:33:ef:77:33:b7:27:16:55:04:
8d:e8:e4:de:ee:14:d1:53:39:49:2d:26:47:9c:53:
2f:39:36:91:ee:44:cd:f4:0f:aa:dc:62:94:58:23:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:60:A8:FB:AC:31:A5:34:65:A7:D1:4D:56:4C:71:50:99:DB:29
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:55:79:53:a4:8e:20:ae:7a:d1:60:26:22:26:95:26:bc:
ef:ae:47:2c:5e:2c:08:6a:81:cb:99:56:2b:c6:84:5b:67:70:
4e:60:ea:b4:99:8b:00:71:8d:12:ea:a0:21:1d:1f:03:0b:5a:
b8:9a:a8:c0:bd:91:83:b6:ab:39:35:72:ba:78:dc:6c:91:ac:
ce:ff:bb:1f:a3:35:32:8c:08:c6:4e:9c:ab:27:9d:df:0e:65:
95:60:b1:9b:95:42:00:42:45:75:e1:44:10:be:d3:7d:c4:b6:
89:65:d8:a7:76:dc:d4:19:03:ad:26:03:2e:57:02:b0:14:a8:
17:7c:ef:2f:29:65:e4:8b:4d:78:b9:91:71:27:eb:5c:37:59:
c4:70:01:20:76:6e:3b:1e:7c:b8:01:10:ff:27:4b:36:7b:99:
b9:71:5e:b1:b2:cd:19:0c:69:b2:f3:5c:6c:23:56:ed:4a:5a:
88:44:10:8e:c2:1e:21:7e:67:f8:f9:e9:19:8f:8a:df:21:16:
16:58:de:d2:a6:0c:7e:01:c3:5d:aa:60:35:d3:66:fd:c9:ba:
1b:d3:d7:73:db:d4:e0:da:4f:df:6c:df:d2:67:af:48:16:1b:
6a:1a:ae:8f:60:5d:43:21:22:3e:59:8f:62:69:b0:1d:14:29:
18:4e:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:43 2025 by rpki-client