Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier: 7ll4PhOD+srzIbQsA+c6DbYm3iFbCBpkG518Lje4zhY=
Subject key identifier: BE:87:0F:95:86:68:96:5E:D2:0C:FA:44:42:89:18:B2:F4:20:AE:87
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 0198D4049AC189995DAA123986ACEC802FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number: 15DA
Signing time: Fri 22 Aug 2025 23:02:08 +0000
Manifest this update: Fri 22 Aug 2025 23:02:08 +0000
Manifest next update: Sat 23 Aug 2025 23:02:08 +0000
Files and hashes: 1: 9llKTYz55e1x1N79z5XQiF3dT4g.roa (hash: PS5GRedQdCJlh0VR0C24dd32hYgK4alJsCFo2wKdfTY=)
2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: /elnbVuFihbNTIFKwMtS1EM4oXf2vHaWfaRKujoiTd4=)
3: pfTZ88SRK7BJ1bWmmJVB35dV26A.roa (hash: TVV4m/AajwnJi7L7QdoUgaL2HibNFWxDJ80dMIKyPdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9a:c1:89:99:5d:aa:12:39:86:ac:ec:80:2f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Aug 22 23:02:08 2025 GMT
Not After : Aug 23 23:02:08 2025 GMT
Subject: CN=be870f958668965ed20cfa44428918b2f420ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:0c:c0:66:a2:84:47:ba:19:1f:47:ff:92:
ee:29:5c:3e:3b:ed:af:65:f4:c4:6c:30:88:f4:90:
02:b0:33:ef:7d:43:8e:b3:65:43:e8:fd:01:96:50:
35:0c:9a:a7:67:e2:b6:59:35:22:31:dc:ae:ac:2e:
fa:93:0c:00:11:be:7f:fe:31:7e:3c:7f:4d:3a:bf:
31:78:e2:18:bc:4e:b2:78:51:e3:5d:36:d2:83:ad:
ae:1c:90:98:51:a5:e2:2d:1e:11:7e:48:79:50:21:
40:f7:5d:95:a5:95:8b:5e:a5:25:63:bd:39:95:e7:
9b:c9:57:e9:1b:00:5e:37:99:bb:3a:03:53:8b:09:
c8:6f:47:eb:9a:d3:1a:24:66:4e:f1:fa:26:ef:76:
2e:49:f6:22:be:b9:b1:b9:11:64:a4:f5:3d:80:65:
12:14:8c:e8:b1:47:31:d3:21:c9:81:b7:a6:7d:61:
0d:47:4a:0f:f0:50:d1:51:03:da:d8:86:29:66:d6:
34:e8:ad:f1:73:7f:a0:03:82:fd:c9:5a:ed:44:c0:
a4:fc:b8:19:78:bd:61:e7:d5:cd:61:05:98:c4:7f:
0d:d3:41:13:46:82:17:44:4a:06:a4:0b:bd:e8:2b:
51:30:09:bb:8a:6b:be:83:cb:de:95:50:c5:dd:d5:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:0F:95:86:68:96:5E:D2:0C:FA:44:42:89:18:B2:F4:20:AE:87
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:04:bf:38:71:98:c7:16:c0:be:58:8d:02:03:fb:96:e9:36:
ef:9f:19:5a:fc:d0:aa:f5:0c:f6:cf:c0:e8:c9:da:b9:11:fb:
01:3f:32:7a:11:87:90:62:f3:47:bc:5d:9b:d0:d9:d1:ba:5a:
a8:04:a0:4f:53:ac:15:f3:11:99:f9:51:db:9d:59:fa:4a:22:
7f:3a:a6:0b:81:f1:78:0d:4e:45:bb:37:a2:31:96:3b:08:33:
2c:6b:4c:6d:a5:12:48:f6:bd:8f:af:bd:74:2f:d2:a9:25:17:
46:9d:86:ab:11:a7:3b:bb:a8:cf:96:13:1e:a6:c6:29:b9:8f:
25:be:c2:06:eb:e5:d7:ec:9c:a8:e1:e0:f3:ff:0b:97:b9:90:
d7:e6:7d:ca:cc:b8:e3:52:70:3e:6b:45:93:82:0b:88:ce:1c:
c4:bd:88:e4:1f:4f:30:bd:77:51:52:53:97:24:da:6a:ef:13:
92:63:72:72:01:c3:5a:61:c9:0b:b5:d8:cc:ef:8c:65:ee:b2:
d6:2b:8a:c3:3f:81:d0:40:47:52:9f:cf:e2:4a:9a:d0:11:22:
c9:f4:e1:54:3b:23:1f:c4:1a:5a:0f:18:90:ba:e2:98:12:68:
fc:14:34:a4:48:b3:fd:a8:cd:1d:0f:6b:80:6a:06:a0:38:96:
6e:0d:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:07 2025 by rpki-client