Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: rPJnXRDR17CjI+AsTIXn052rIoVh5wbACZVNWzaa2ac=
Subject key identifier: 92:C2:A0:3B:B2:D9:70:A0:21:12:E6:43:7C:84:B4:F3:38:77:2B:E6
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019A4FD044D918A577647AF61500112B66DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 17:00:40 +0000
Manifest this update: Tue 04 Nov 2025 17:00:40 +0000
Manifest next update: Wed 05 Nov 2025 17:00:40 +0000
Files and hashes: 1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=)
2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=)
3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: jlhelA9IHFVRz4lxtd/qN91rzaPPn8HGc7qgl4AVFOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:44:d9:18:a5:77:64:7a:f6:15:00:11:2b:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Nov 4 17:00:40 2025 GMT
Not After : Nov 5 17:00:40 2025 GMT
Subject: CN=92c2a03bb2d970a02112e6437c84b4f338772be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:ba:9a:6b:85:ed:3c:b1:b2:b0:51:ca:63:
6f:04:48:e5:76:41:c8:ee:20:dd:1c:e7:5b:29:d7:
1d:42:39:09:62:06:2d:e2:1d:07:62:ac:f9:3d:69:
4b:dc:8f:7b:57:51:72:06:93:33:87:de:11:e3:a8:
f2:8c:6c:3f:f9:d5:05:3b:2f:73:9a:06:25:1a:b9:
f9:30:e8:d9:14:90:23:9a:e1:f4:7f:5a:01:b1:61:
86:0c:74:e4:6a:b6:91:d6:c2:79:53:3d:cb:0d:d3:
c1:c0:12:a6:0e:36:63:6c:12:08:78:da:c9:13:a1:
2f:b2:31:de:b4:9f:4b:29:16:2c:5a:69:7e:a1:c6:
5b:28:d4:cb:0f:33:a9:97:bf:31:4f:f9:6a:35:af:
ed:77:ec:f8:0e:b0:af:30:bf:79:ba:85:52:4c:22:
cf:4d:4b:6f:ae:b7:28:6b:7c:ca:fc:e7:1e:fd:c6:
ec:96:3c:ec:93:dc:03:ed:a1:8c:98:cf:c3:ba:80:
7d:ce:47:41:98:f4:d9:0f:eb:11:19:03:3e:86:4b:
23:f2:c7:ba:2f:f3:1f:10:ae:c5:d8:96:8f:48:4b:
5e:a9:de:b2:26:20:78:a4:0f:a5:ae:b7:4b:1e:98:
de:27:b4:93:70:2a:db:d8:53:20:df:52:5d:bf:3d:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:A0:3B:B2:D9:70:A0:21:12:E6:43:7C:84:B4:F3:38:77:2B:E6
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:7d:f0:ef:bd:de:6c:30:fa:98:dd:67:3e:d3:06:27:47:
99:97:d3:a9:3d:61:94:b6:03:27:63:7f:23:85:63:15:d0:61:
f9:32:21:87:41:ee:ce:85:25:4f:a5:35:74:1a:e6:a8:97:81:
73:1c:e8:1a:95:9d:d6:1e:ac:14:59:0d:f1:d5:97:27:cc:59:
4b:8e:90:28:57:c0:ff:94:9b:50:0d:c0:e2:d1:4b:69:94:8d:
93:3f:89:7a:e7:d9:fd:93:2e:b2:04:35:53:2f:ec:ac:3a:05:
37:d7:5d:56:bf:01:16:9c:f4:cd:f4:09:68:ed:7e:a9:9c:a5:
e0:73:5d:39:80:35:bf:6d:48:f6:8c:d9:51:e1:e1:eb:2d:16:
15:c3:a1:d6:ac:2b:b1:3f:b7:b8:5a:31:16:f5:0c:10:4a:23:
50:21:83:b8:cf:9a:1c:87:68:3d:08:fd:fb:e4:27:e8:e0:78:
37:cb:1b:a7:a0:df:79:e7:d7:57:94:b6:ed:ac:05:dd:b9:97:
cf:01:65:f2:de:c5:cb:4b:cc:5a:2a:d6:53:1e:8e:a5:0f:af:
4f:f2:72:c9:ca:3e:63:21:1e:f8:4b:96:c7:97:36:3d:91:e7:
86:43:6f:4f:9f:45:59:aa:38:f2:c1:fa:ed:48:4d:86:d7:e3:
ca:34:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:26 2025 by rpki-client