Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: 9W0/8kXZ/kIXUhpSC3n+gkxP/8u2aaaS5yqu0xWEC7U=
Subject key identifier: 25:38:83:63:7E:04:80:62:65:76:83:EE:74:12:A6:F0:B7:5A:43:8B
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019A4EF5D0DA80DFC13D6F6D9BAB41194C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 098E
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: p+pevyReOSDlQPFPbk6iy2vghPA/13elxr53dlOhiDA=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d0:da:80:df:c1:3d:6f:6d:9b:ab:41:19:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=253883637e048062657683ee7412a6f0b75a438b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:36:39:dd:be:ca:37:4d:06:e6:e6:fc:3e:
8f:6f:61:1e:f6:a8:24:e2:19:e9:e3:1b:a4:84:66:
cf:e4:9b:fd:22:ba:d1:2e:60:69:c6:ca:cb:82:2b:
c6:c2:ce:21:86:40:85:e4:b6:38:03:d6:a1:ce:e4:
56:7a:26:52:3a:7f:97:f4:bc:d3:82:d1:f0:e2:97:
b6:94:26:b7:7d:70:e9:5c:4c:94:ab:4f:44:e3:a1:
e9:11:2d:76:b0:30:cc:91:7c:67:b5:34:e8:6a:2b:
2a:ba:87:93:38:2a:e6:2d:b3:40:5c:e8:7f:bf:7f:
80:af:f8:fc:94:54:01:9f:f0:ee:ec:71:9e:7e:96:
36:79:ca:ec:de:06:98:aa:d8:76:a0:70:ed:54:a8:
04:cd:b0:a8:1c:19:82:eb:66:3b:aa:7d:63:1e:68:
57:f1:95:98:ae:b9:6a:2f:af:13:8c:93:b3:e8:31:
1f:d1:d5:2f:9b:da:e8:f4:7e:6b:dd:83:16:4e:d1:
91:99:43:76:87:fe:a1:80:56:22:69:51:df:2a:43:
6d:55:f4:14:52:3c:cb:fe:6f:3e:85:e2:ac:d7:45:
5b:7b:ea:52:4e:bb:8e:b0:37:6f:9d:cd:4a:28:c9:
e9:12:f7:6d:3a:a4:f5:df:3e:f8:e4:2a:c3:e9:a9:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:83:63:7E:04:80:62:65:76:83:EE:74:12:A6:F0:B7:5A:43:8B
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:0d:d1:a8:b4:25:5f:c7:26:3c:98:02:d7:7d:64:ee:fb:
ac:10:d3:f9:74:99:f4:79:e8:9f:d4:48:3c:4a:50:4e:e6:b7:
34:b3:48:39:bb:7c:77:e9:cd:e0:d2:1b:96:55:31:61:23:fd:
47:aa:c7:90:b5:3e:56:de:18:f6:2f:bb:41:ad:23:53:5b:e7:
f8:8c:09:4d:6d:fc:a3:a5:c9:1c:cf:ea:d9:b0:a1:55:b7:1d:
a0:8b:17:17:3a:38:be:1b:bf:8f:74:9c:fb:9d:20:51:59:27:
56:0e:12:e2:d4:8b:44:ac:21:8f:33:5d:ae:7b:31:52:0f:95:
7b:d3:69:e0:43:2b:a8:90:7c:31:ac:a7:c7:ed:9e:6c:5e:1f:
11:a0:cb:75:d1:6a:d3:c4:d4:b9:b5:f5:3c:36:54:44:16:37:
97:ce:d0:7b:e9:51:77:66:4b:48:47:d6:ae:f0:4e:6b:dc:f4:
57:a9:5b:fc:50:05:e5:2f:2b:91:e4:6b:95:3c:db:f4:6c:43:
c8:85:18:4d:5c:1f:09:e0:48:62:bb:a0:c4:02:a7:98:08:e6:
1b:42:23:a1:b1:94:c0:ba:e9:c1:bb:1c:4c:7d:8b:35:a6:3f:
46:92:73:cd:fa:58:62:da:31:da:bd:5e:cf:6e:c0:70:16:78:
6a:24:27:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dDagN/BPW9tm6tBGUx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjUxMTA0MTMwMjAzWhcNMjUxMTA1MTMwMjAzWjAzMTEwLwYDVQQD
EygyNTM4ODM2MzdlMDQ4MDYyNjU3NjgzZWU3NDEyYTZmMGI3NWE0MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX82Od2+yjdNBubm/D6Pb2Ee9qgk
4hnp4xukhGbP5Jv9IrrRLmBpxsrLgivGws4hhkCF5LY4A9ahzuRWeiZSOn+X9LzT
gtHw4pe2lCa3fXDpXEyUq09E46HpES12sDDMkXxntTToaisquoeTOCrmLbNAXOh/
v3+Ar/j8lFQBn/Du7HGefpY2ecrs3gaYqth2oHDtVKgEzbCoHBmC62Y7qn1jHmhX
8ZWYrrlqL68TjJOz6DEf0dUvm9ro9H5r3YMWTtGRmUN2h/6hgFYiaVHfKkNtVfQU
UjzL/m8+heKs10Vbe+pSTruOsDdvnc1KKMnpEvdtOqT13z745CrD6an2RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU4g2N+BIBiZXaD7nQSpvC3WkOLMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs4N0ai0
JV/HJjyYAtd9ZO77rBDT+XSZ9Hnon9RIPEpQTua3NLNIObt8d+nN4NIbllUxYSP9
R6rHkLU+Vt4Y9i+7Qa0jU1vn+IwJTW38o6XJHM/q2bChVbcdoIsXFzo4vhu/j3Sc
+50gUVknVg4S4tSLRKwhjzNdrnsxUg+Ve9Np4EMrqJB8Maynx+2ebF4fEaDLddFq
08TUubX1PDZURBY3l87Qe+lRd2ZLSEfWrvBOa9z0V6lb/FAF5S8rkeRrlTzb9GxD
yIUYTVwfCeBIYrugxAKnmAjmG0IjobGUwLrpwbscTH2LNaY/RpJzzfpYYtox2r1e
z27AcBZ4aiQnLA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:30 2025 by rpki-client