Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: icVKxqiouNs9gDvBPZ/+pzOUJSJmet2MRiGOu93eTBo=
Subject key identifier: CE:B8:72:F0:11:59:86:99:38:C9:43:D0:97:36:99:7C:62:EB:9E:96
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01984A09B1C2645E0027F1618EA77CD59CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0559
Signing time: Sun 27 Jul 2025 04:00:05 +0000
Manifest this update: Sun 27 Jul 2025 04:00:05 +0000
Manifest next update: Mon 28 Jul 2025 04:00:05 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: afML70BwFGLxw3j4fabc3Jq2VJWCDAPRUpM0/DbXyOQ=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b1:c2:64:5e:00:27:f1:61:8e:a7:7c:d5:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jul 27 04:00:05 2025 GMT
Not After : Jul 28 04:00:05 2025 GMT
Subject: CN=ceb872f01159869938c943d09736997c62eb9e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:d8:31:5e:0b:de:6e:6b:e6:8c:a0:26:41:
8b:41:3e:fb:f8:b7:9d:a0:de:00:c5:e8:c2:af:fc:
07:57:4b:e3:c0:b7:05:1c:75:4b:50:6e:6d:d9:ef:
b5:05:aa:ec:7b:3a:a0:8a:ce:14:42:14:2d:37:cb:
5b:5e:45:8c:b7:d5:06:b5:6e:2d:57:84:aa:c9:c1:
fa:21:6a:08:df:af:46:b8:ae:a9:b3:22:c7:7a:36:
cd:5d:73:87:66:79:05:45:3b:43:5b:c7:0a:de:0f:
e3:3e:f9:d5:f8:a1:a9:aa:b3:b2:47:af:ce:8b:29:
9e:72:32:86:fd:21:b4:b1:12:f6:65:ed:3b:a3:29:
93:5c:5b:3a:d9:78:66:f8:ea:76:a6:9b:50:3b:92:
3f:ab:18:ef:3f:54:c2:20:0b:23:92:dd:ac:b3:d2:
07:20:f5:d8:e7:bb:26:78:ce:e6:cd:00:8f:fd:5d:
2d:fb:2d:a0:05:2a:f9:90:94:05:c2:f4:34:fc:12:
91:62:96:13:bb:f4:91:f9:c7:b9:6a:6e:d6:e9:af:
23:f9:5c:6e:1a:5d:90:28:e2:0d:50:c6:55:cc:fe:
22:07:6d:61:00:55:d2:5a:d6:13:b9:a8:91:b7:ed:
34:54:e3:7c:7b:4e:cc:fa:cb:63:62:7d:7b:07:a3:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:72:F0:11:59:86:99:38:C9:43:D0:97:36:99:7C:62:EB:9E:96
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:39:f3:ce:30:b7:0d:8b:a4:cd:00:07:fa:84:66:24:35:da:
4c:5d:40:9e:a9:ce:47:4f:26:1b:e8:ea:10:03:22:f0:39:cc:
c8:1a:f4:cb:eb:bb:cf:1e:cb:81:db:00:dd:39:dc:8b:18:b8:
32:8e:5b:58:b0:26:82:79:97:44:b7:9b:8e:46:eb:65:d2:a5:
be:31:09:5b:85:94:50:22:00:bf:94:9a:0a:d6:cf:cb:1a:e2:
af:66:85:30:51:39:47:84:93:ba:a5:d5:8f:5a:34:69:c5:f5:
45:9b:8d:a1:61:ea:bf:f5:62:40:5d:80:e1:93:98:e5:52:55:
0a:7b:9e:76:4f:c6:79:ef:96:f7:b5:6e:83:c8:59:e5:50:d9:
fa:9d:91:89:bd:3d:13:67:cc:2e:f3:5d:9a:53:cc:87:75:ee:
04:ed:82:46:45:70:3d:a5:c9:94:3c:9d:cf:58:6b:ce:9d:3f:
8a:c3:4a:5a:db:8f:39:4a:9d:63:5d:13:1a:9a:a1:2a:7b:f8:
7d:97:73:71:83:c9:17:ac:97:10:b3:81:2f:02:3d:fd:f5:10:
25:b2:1e:5d:bc:f3:76:8f:01:b2:de:71:a8:b8:6d:8c:f3:03:
f5:84:a4:96:15:98:09:c2:d9:d7:e7:b9:ae:fb:c3:2f:1d:45:
94:1a:2e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCbHCZF4AJ/Fhjqd81ZyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz
MjYwNjQwHhcNMjUwNzI3MDQwMDA1WhcNMjUwNzI4MDQwMDA1WjAzMTEwLwYDVQQD
EyhjZWI4NzJmMDExNTk4Njk5MzhjOTQzZDA5NzM2OTk3YzYyZWI5ZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXzYMV4L3m5r5oygJkGLQT77+Led
oN4AxejCr/wHV0vjwLcFHHVLUG5t2e+1Barsezqgis4UQhQtN8tbXkWMt9UGtW4t
V4SqycH6IWoI369GuK6psyLHejbNXXOHZnkFRTtDW8cK3g/jPvnV+KGpqrOyR6/O
iymecjKG/SG0sRL2Ze07oymTXFs62Xhm+Op2pptQO5I/qxjvP1TCIAsjkt2ss9IH
IPXY57smeM7mzQCP/V0t+y2gBSr5kJQFwvQ0/BKRYpYTu/SR+ce5am7W6a8j+Vxu
Gl2QKOINUMZVzP4iB21hAFXSWtYTuaiRt+00VON8e07M+stjYn17B6M0dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM64cvARWYaZOMlD0Jc2mXxi656WMB8GA1UdIwQY
MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt
OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3
LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYznzzjC3
DYukzQAH+oRmJDXaTF1AnqnOR08mG+jqEAMi8DnMyBr0y+u7zx7LgdsA3Tncixi4
Mo5bWLAmgnmXRLebjkbrZdKlvjEJW4WUUCIAv5SaCtbPyxrir2aFMFE5R4STuqXV
j1o0acX1RZuNoWHqv/ViQF2A4ZOY5VJVCnuedk/Gee+W97Vug8hZ5VDZ+p2Rib09
E2fMLvNdmlPMh3XuBO2CRkVwPaXJlDydz1hrzp0/isNKWtuPOUqdY10TGpqhKnv4
fZdzcYPJF6yXELOBLwI9/fUQJbIeXbzzdo8Bst5xqLhtjPMD9YSklhWYCcLZ1+e5
rvvDLx1FlBouNg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:25 2025 by rpki-client