Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: nwmqfg+gFQl4GZp1FiSbpDWD7tbrZjD9/AG45WsVA9M=
Subject key identifier: BD:46:BD:9E:0C:2E:66:38:0F:94:0D:EB:53:0E:61:2F:36:3A:6E:E7
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 019A4E18EC30CF8CE7D7B35552C32A299521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 07BF
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: M2-x0b6h_vGkWR8MeQS23lu97CU.roa (hash: 3mmEcfVqYQ+5prex0V/rqUj30uad1M5q1mUqvz+8XW8=)
2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: R6F49IwTFl3J1U+y0E0cp+OS21k63Mph5TWTNIyR4W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:30:cf:8c:e7:d7:b3:55:52:c3:2a:29:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=bd46bd9e0c2e66380f940deb530e612f363a6ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:b0:7b:c9:9d:a9:d9:6e:fc:d8:9b:bd:4c:
97:9e:1f:2b:c9:d8:5b:af:5c:f4:ba:31:c2:b7:e1:
63:18:7a:82:e5:72:72:e3:90:8b:7a:c4:cc:f9:d3:
65:82:6f:e9:aa:50:11:e6:b5:c6:a2:6c:2e:56:29:
da:72:6c:74:7c:28:b7:81:42:a3:f3:96:10:b7:ef:
32:ce:c4:a1:1d:30:4a:35:60:e6:df:a7:00:b5:4b:
b8:7b:57:1d:2b:ae:d5:f2:af:34:d0:43:37:36:b4:
9e:5c:85:e7:a0:63:c5:d4:38:bf:c3:1e:ff:fc:d1:
94:37:11:73:3e:53:1c:0c:ed:a3:69:e5:67:c7:de:
f9:44:fc:46:d8:b1:7d:3f:06:43:80:6b:82:ee:00:
ac:fd:8b:ef:b2:7c:6f:63:c7:6c:ef:65:9a:96:72:
89:cf:7c:a9:a6:8c:b4:2a:51:6c:28:cf:82:d6:b5:
6c:a1:1e:c4:a7:c9:15:ea:ed:31:f2:9c:ee:73:2d:
6d:4c:a7:1a:ed:56:95:1d:e7:18:a2:d0:b9:02:5b:
33:d5:ca:4d:d2:9a:8e:64:0a:7a:45:d6:51:24:1e:
4e:0b:35:37:44:bf:74:1e:c5:83:d5:f8:0d:a8:40:
79:db:b0:e6:99:2f:47:bd:d4:bc:dc:09:f7:47:5c:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:BD:9E:0C:2E:66:38:0F:94:0D:EB:53:0E:61:2F:36:3A:6E:E7
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:a2:73:ba:31:40:ea:a3:c3:ed:22:98:ef:2e:78:5f:43:
fc:8a:20:03:8b:7e:27:a5:65:59:29:57:e7:2f:55:9c:2f:88:
ec:71:e9:30:85:f9:e7:78:c3:78:87:53:25:4f:b1:c7:e8:50:
9b:0d:1d:46:fb:4e:0e:01:40:65:cb:46:21:24:fa:03:77:d8:
36:85:3e:a3:3c:01:70:a0:9c:b6:27:ea:50:46:8f:95:1c:1e:
a7:0f:ce:97:06:d3:89:b5:53:da:b2:65:9e:3a:84:ea:0d:07:
fa:13:c5:3d:0e:b1:e8:cb:7b:2c:01:8c:fe:0e:e6:ea:49:12:
da:f1:1c:71:1f:a0:14:72:a5:06:a8:20:8f:2a:c3:5b:ac:48:
8f:05:91:a0:01:f8:e6:6b:55:76:31:28:d5:be:89:95:7a:47:
64:2d:81:77:0f:72:1f:9f:4c:e9:21:ab:32:f4:36:a7:69:cd:
a3:89:15:fc:65:7d:05:e2:be:6c:c3:7f:f0:27:82:13:d2:9d:
0e:20:73:56:d1:ce:e9:7f:8f:9c:3b:06:02:3a:21:cc:c1:58:
44:1e:bc:9c:73:83:ad:76:d3:e9:66:7e:e1:20:63:48:01:bb:
17:34:66:1b:66:b8:1b:2e:7d:0e:ca:ca:bc:da:e4:54:b6:a7:
04:b7:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:33 2025 by rpki-client