Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: S6ibn5w/c5IW8ow8muQ7x0Ue00HzCnJQ7w/q7bokDiE=
Subject key identifier: 39:B0:29:47:D9:AC:E1:F7:FC:FC:FE:A0:15:0E:93:72:21:28:F7:8B
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0198D583F3116ACC18B62157381F8C0B0C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 022D
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: cx3yYWx+2Sogv07ORre474mPQwKfmELUZpRsttf6EQY=)
3: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f3:11:6a:cc:18:b6:21:57:38:1f:8c:0b:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=39b02947d9ace1f7fcfcfea0150e93722128f78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:94:eb:c0:3c:64:b1:8a:43:f1:07:dd:d9:
51:47:0a:a7:73:65:91:c8:fb:81:d0:71:b0:75:7a:
73:81:e6:03:02:b4:5d:c4:da:8f:35:e6:21:b4:87:
4d:5e:c0:80:32:30:7f:ac:36:28:50:1b:03:14:91:
f3:6d:62:a5:22:36:f7:c4:41:63:ee:bb:0f:b9:f7:
2f:91:19:db:d5:09:2e:24:fb:63:ec:17:f2:5f:10:
5f:d1:d8:97:ad:0a:09:a9:7b:80:8f:c9:2b:ed:0a:
a3:a5:a9:3f:d7:ac:a4:26:d4:18:4d:97:67:5b:fd:
31:0e:a6:92:41:70:c2:7f:8f:c8:44:0b:15:3d:a8:
52:52:1a:ba:59:8d:e3:4c:24:5f:2f:ca:54:44:02:
2c:c5:d5:c4:a3:cf:d2:93:a7:22:6b:e1:7c:57:2b:
5e:ea:fe:35:7c:04:79:65:b0:4a:c6:12:00:b2:c6:
7c:d3:45:ec:d8:0c:a2:0b:8b:32:e0:0c:04:20:97:
b5:0f:b8:99:e0:fe:75:30:2a:c3:86:1b:55:87:22:
48:69:16:e5:c8:8a:62:41:36:cf:9c:fd:38:2f:67:
4f:3f:80:55:0c:2b:7b:a0:09:d4:5f:36:2e:07:67:
d6:09:9f:20:6a:bd:9e:f9:ab:74:54:3a:d3:20:a5:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:29:47:D9:AC:E1:F7:FC:FC:FE:A0:15:0E:93:72:21:28:F7:8B
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:15:a8:e6:37:00:88:ba:32:50:ff:f5:a4:d6:eb:70:5e:
2e:9c:ba:58:6e:a9:cc:91:69:aa:39:44:f7:d2:2f:0d:8d:ff:
c9:2d:d8:b9:7b:82:32:98:13:e4:0f:e6:56:57:ad:31:f5:da:
ee:90:ff:ad:34:53:97:6e:0a:23:a1:87:c9:ca:84:fc:c1:bc:
69:b1:75:86:84:7c:c2:52:d3:92:41:ef:e8:4e:9a:d7:ae:24:
31:58:14:4e:5a:7a:12:a1:57:97:89:ed:ae:90:78:c9:0f:99:
d9:14:d4:7b:bf:1b:95:6e:61:32:3a:a9:28:e7:f6:2c:cd:eb:
69:a6:4d:a2:d8:52:aa:7a:bd:9c:2f:f5:22:bf:d0:69:2b:6a:
17:48:f3:c0:7c:f8:76:2e:4e:e2:69:e9:47:07:c6:f1:10:1b:
17:13:e3:91:fe:5a:2a:e4:e0:9d:52:37:50:46:23:2f:3e:df:
04:69:6a:be:b9:02:ab:bd:3a:b1:fa:03:bf:1c:d8:4b:23:3a:
0a:68:56:04:30:87:6b:55:c3:29:3d:9b:e9:1d:18:e1:85:de:
f6:f4:a2:5a:1b:56:84:5e:c9:8a:c5:97:af:d7:69:c9:de:59:
f6:cd:0c:e7:aa:4d:26:1b:b3:f6:7e:79:99:b2:e9:d3:ad:85:
ff:c7:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:52 2025 by rpki-client