Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: R2RGtTTkkRIOY/dHbZWyUM3/ttu9bKtgdq18JLvOz4w=
Subject key identifier: 6D:5A:3F:1C:6B:D5:EC:61:2A:9B:86:66:B5:80:99:95:92:0E:34:2C
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019881678AD28D5AF45D7274EDAA6FAC8AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 03CC
Signing time: Wed 06 Aug 2025 22:01:43 +0000
Manifest this update: Wed 06 Aug 2025 22:01:43 +0000
Manifest next update: Thu 07 Aug 2025 22:01:43 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: VXLc/G3KBF4EZ7IUE78GmpzyBdO+5nThIS1tTFl+m3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:8a:d2:8d:5a:f4:5d:72:74:ed:aa:6f:ac:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Aug 6 22:01:43 2025 GMT
Not After : Aug 7 22:01:43 2025 GMT
Subject: CN=6d5a3f1c6bd5ec612a9b8666b5809995920e342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3b:3e:a7:2d:3e:5f:84:d0:34:a8:c0:aa:71:
99:3d:90:f9:c8:51:ed:b9:a5:0a:b0:b4:d7:95:c8:
6e:1c:04:ec:84:f6:35:e7:07:39:a0:9f:0e:cc:34:
0c:e0:6f:07:22:82:fb:f8:ed:3d:fb:60:2a:24:d5:
e8:5e:fc:95:aa:7c:e1:d6:72:cc:bb:67:b5:9f:52:
52:83:3f:f8:d5:a3:5d:8c:a3:e4:6a:f8:59:ef:5d:
0e:c3:8f:d1:1b:50:e6:a7:a2:70:8b:75:c3:f5:3e:
7e:38:b7:17:b1:42:55:81:f5:e9:ba:8f:72:38:ff:
de:1c:da:43:5e:10:fa:6b:52:61:78:3d:09:71:f4:
cb:ea:d1:69:a3:e8:55:98:92:40:62:32:1d:a9:91:
ab:83:aa:76:9f:39:0e:2a:d0:07:76:2f:20:c1:a0:
8d:73:13:55:cd:3f:ab:82:a6:ca:30:e4:2c:94:ed:
21:1d:1a:32:c6:d6:bc:c1:30:a1:ce:e2:32:96:5f:
5c:cb:e5:4c:f7:cb:33:11:fc:98:e3:77:d6:39:b9:
6c:ee:a1:85:a8:eb:de:fb:82:c4:05:75:a9:2a:34:
60:19:cf:ba:71:6e:fa:b6:f8:a5:50:78:94:69:07:
df:28:e8:d2:3a:05:82:17:b7:93:d1:65:21:d4:7d:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:3F:1C:6B:D5:EC:61:2A:9B:86:66:B5:80:99:95:92:0E:34:2C
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:86:56:0d:81:44:a4:82:f1:70:4c:b2:61:ec:8e:41:c5:c4:
ec:c3:2f:ed:e3:a9:5d:b3:b3:7b:61:74:92:f8:c4:94:20:4a:
b1:89:3b:f4:f1:66:65:16:65:67:2a:d0:09:7f:bc:d9:52:70:
62:44:8a:5d:9b:53:da:08:5a:ee:d9:b8:e7:b9:42:ca:7e:48:
2d:58:30:df:68:ed:a9:69:64:92:e6:83:0a:35:12:79:c0:46:
f9:bd:5e:12:3f:30:96:63:0a:75:36:1f:01:b9:2f:30:14:8f:
fd:b1:f0:3d:90:f5:24:f5:0b:74:8f:b4:e5:a1:5f:e5:e0:86:
96:70:1f:72:66:b0:54:ca:35:39:7f:7e:90:60:09:89:c1:59:
c2:89:7c:ec:59:c9:f4:26:a9:0a:fa:c9:2a:bf:7e:5f:ec:e8:
0d:8d:e7:06:38:69:95:fe:bb:3d:36:28:e1:a6:17:a5:f7:53:
41:07:80:a1:39:32:2b:43:0c:07:0f:e2:4f:dd:2e:0f:8e:dd:
ff:0c:51:bf:01:1c:72:75:5a:b5:5f:d6:17:da:2d:59:52:37:
13:97:32:8e:92:19:b7:a5:97:75:fc:83:66:c9:1e:3b:af:e3:
12:f3:92:86:54:f2:79:c4:18:ca:48:da:29:bc:50:07:3c:86:
c1:dd:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:35 2025 by rpki-client