Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: YEW4DfYbPBkt6cAobNMTNu0fGg726uDFJci2Qn+2wZk=
Subject key identifier: F9:5C:DF:B8:BF:CF:32:12:51:2B:AE:96:DD:AC:77:3D:7A:C6:85:52
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019A52D122DD31F64989158BA96DC2A3157A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 04BD
Signing time: Wed 05 Nov 2025 07:00:28 +0000
Manifest this update: Wed 05 Nov 2025 07:00:28 +0000
Manifest next update: Thu 06 Nov 2025 07:00:28 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: 6K09aM5wk3xjB2q930BXfGsGyvLgax2PKcT0YTBG4Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:22:dd:31:f6:49:89:15:8b:a9:6d:c2:a3:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Nov 5 07:00:28 2025 GMT
Not After : Nov 6 07:00:28 2025 GMT
Subject: CN=f95cdfb8bfcf3212512bae96ddac773d7ac68552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:13:25:ea:ba:df:74:21:29:3f:21:6e:b6:
2d:6d:1d:03:53:82:58:c4:7a:59:c5:dc:87:e0:0a:
b5:3d:95:ed:ee:4b:f8:23:22:1b:92:cb:27:a4:2d:
1d:88:54:7e:81:53:75:ba:25:ec:00:bb:78:2a:28:
5d:ad:5a:fc:45:e7:3c:76:c3:b5:d0:61:c3:b7:83:
c2:77:68:35:41:d4:73:5f:5c:b3:80:ed:bf:2c:63:
16:d7:24:35:a9:11:6a:5d:d9:2c:28:7e:c8:d4:c1:
ae:ac:73:99:06:dc:cf:34:dd:51:be:bb:32:d9:bc:
ed:79:1a:52:b0:31:85:cf:d6:b2:80:9e:af:70:cf:
6f:3a:59:b1:02:0c:16:82:43:69:4d:b8:96:b5:a6:
88:52:26:a0:d6:30:fd:66:09:90:24:87:06:6d:1d:
19:83:d7:7a:60:59:41:f1:10:ac:db:b4:aa:af:0d:
40:d5:22:5c:55:b5:c4:d9:d1:90:29:ae:76:68:d3:
c3:17:30:58:b5:12:ce:b0:0b:df:a0:ed:fa:db:eb:
df:ed:ef:fb:92:1c:63:da:66:2f:0c:46:af:39:4c:
e5:f8:d0:c0:88:f6:f6:fd:81:29:0d:4c:00:7d:9d:
e9:46:47:de:54:02:93:fb:47:8b:f7:3d:b2:5b:08:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:DF:B8:BF:CF:32:12:51:2B:AE:96:DD:AC:77:3D:7A:C6:85:52
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:df:cc:1c:15:cc:93:53:db:65:b6:de:72:22:0b:d3:d8:dd:
71:3b:d5:e6:54:3f:4b:62:58:f6:29:74:9e:8e:d7:74:4c:d1:
7b:d8:4e:7f:1e:3c:ec:ed:46:c6:b5:2c:96:66:f7:3e:6c:ca:
0a:3c:68:14:5a:7b:c5:7d:7f:b1:eb:42:e2:61:d4:12:3c:db:
02:d6:06:a7:f0:47:87:ff:28:a9:eb:ae:ca:63:59:89:a6:fe:
22:3e:44:09:d7:cb:f1:87:93:95:46:61:33:07:2e:62:05:ca:
d9:6d:0a:07:99:98:8f:6b:6b:12:5b:45:ed:39:36:23:8e:07:
c6:d4:f6:2b:d8:04:4b:52:f4:9a:2b:c4:f6:97:52:91:49:f1:
30:7e:0a:29:39:fe:a3:24:a6:88:c5:db:53:04:77:24:68:3f:
68:21:49:c4:0b:a9:0b:cc:76:55:f7:35:1d:8a:bd:0d:1a:8d:
39:9f:83:4f:77:40:e3:16:89:93:1e:21:65:ad:85:58:d3:8d:
6e:f6:88:33:bb:b9:38:9c:6f:97:7a:72:60:9b:73:24:de:b5:
dc:2d:60:1b:4d:ac:ab:a5:c8:18:ce:1e:6b:f2:8d:48:c3:29:
c1:9a:63:9f:aa:ca:c0:b2:6b:a2:71:b1:aa:8d:8a:07:c5:10:
79:07:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:36 2025 by rpki-client