Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: wC/6Nh4igqriUqEQ3logd3vKe/q/5Bix04uDUZCS4gg=
Subject key identifier: EC:9C:3F:A2:56:4B:D6:55:B7:4F:9A:52:8F:15:F8:58:52:25:B1:29
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0199C4201529503B5BEDEB02F876EC3B9536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0C9E
Signing time: Wed 08 Oct 2025 14:01:00 +0000
Manifest this update: Wed 08 Oct 2025 14:01:00 +0000
Manifest next update: Thu 09 Oct 2025 14:01:00 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: 3hKwaq6LDcHOAvy91/0BVS6+co6rdF1zOvEr5pI487w=)
2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=)
3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:15:29:50:3b:5b:ed:eb:02:f8:76:ec:3b:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Oct 8 14:01:00 2025 GMT
Not After : Oct 9 14:01:00 2025 GMT
Subject: CN=ec9c3fa2564bd655b74f9a528f15f8585225b129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:63:7e:26:5b:36:d7:e2:14:d1:9a:d8:f6:
41:7c:c6:80:12:98:a3:45:1e:fe:35:98:eb:e2:04:
62:05:dd:42:31:01:7d:88:3c:da:cc:57:59:d5:72:
44:d1:1e:01:c6:07:94:ee:a5:4a:68:7a:6c:ab:ec:
5a:6b:36:c7:4f:62:bc:e4:92:3f:92:3a:f2:41:a5:
c1:48:3c:45:46:fe:1c:b8:65:39:96:2b:1d:02:2f:
d1:f7:b2:6d:82:72:31:9e:f2:2a:46:dc:15:f2:c0:
0e:36:b5:a2:ca:e4:9a:50:a4:69:d0:9b:5b:ea:97:
97:de:27:fb:ea:00:eb:2b:50:55:12:64:f6:0e:d6:
ad:fa:43:51:79:63:93:7f:c6:01:03:67:36:2f:8e:
39:14:09:a9:29:85:ee:b2:98:1f:31:0e:e9:d1:f3:
6c:a3:1a:99:95:91:9e:7e:46:19:e9:57:19:37:a1:
77:44:5f:e6:54:de:60:b6:04:88:45:62:0d:d8:56:
26:c0:48:e7:ba:ce:7a:d8:ef:7f:6d:f1:12:dc:fd:
37:29:b5:23:93:76:17:48:cb:c7:a9:a4:84:a7:1d:
81:66:92:e4:40:b2:5a:2e:02:56:af:c0:90:08:9f:
d9:3d:93:a7:84:d6:0c:80:ef:4b:d3:da:27:16:a8:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:3F:A2:56:4B:D6:55:B7:4F:9A:52:8F:15:F8:58:52:25:B1:29
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:61:ee:fb:c6:6e:c4:96:f2:bd:0b:e7:92:b2:c1:49:e1:
9a:3d:c2:07:91:d6:75:90:78:8b:89:80:01:5c:ff:2d:0e:aa:
53:13:f9:b8:ac:72:bc:67:ca:a9:6f:6c:0e:09:e5:41:5c:2c:
f0:ab:db:9c:b2:cd:da:c9:2a:b5:b5:e1:7b:3a:72:c5:5a:d3:
5f:12:b8:05:4e:d2:fd:e3:33:8b:cd:27:62:63:41:c7:80:0b:
c6:76:be:10:90:bc:83:8f:f1:b4:ea:8b:df:b7:3c:c4:28:b6:
34:24:54:9d:40:e3:ae:91:d9:90:48:9b:43:7d:87:62:27:7c:
7d:51:3c:60:a6:8c:91:73:f1:19:7e:67:4f:5f:f3:5e:8d:a1:
51:d3:ae:c1:c5:6a:69:6b:b1:aa:9a:42:f4:20:0e:5b:53:f7:
99:84:ff:81:5f:a1:c3:19:54:d9:6f:d6:08:be:fb:27:bf:08:
a1:c5:9e:85:bc:18:be:ef:70:65:4a:5d:ea:d6:22:15:ea:20:
63:d0:85:bc:34:1b:5b:ed:b8:54:a9:ce:2a:7e:80:2f:28:b7:
84:35:4b:2e:e5:05:e4:69:9a:3f:4a:26:8f:6e:75:ca:86:16:
5a:4d:5b:bc:ff:f7:87:d9:53:91:70:8a:c5:cf:34:32:bb:cf:
58:e9:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:49 2025 by rpki-client