Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: wvaqihAgUNgpcEwZEX798mUs/yUf30Jf2uPu7GJKauU=
Subject key identifier: 74:82:31:FF:B8:96:07:8E:E6:72:99:BD:31:A9:E0:CD:67:80:6E:9F
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 019843D118CD021C7F305556289FA697E498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 23:00:33 +0000
Manifest this update: Fri 25 Jul 2025 23:00:33 +0000
Manifest next update: Sat 26 Jul 2025 23:00:33 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: 3fTYmztEQ7GOZ8cmw5w30fvIZrOBfBfs7i8VGq9dyDI=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d1:18:cd:02:1c:7f:30:55:56:28:9f:a6:97:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Jul 25 23:00:33 2025 GMT
Not After : Jul 26 23:00:33 2025 GMT
Subject: CN=748231ffb896078ee67299bd31a9e0cd67806e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:53:96:9d:45:cd:43:f6:2f:6d:d5:fa:f6:
60:fd:53:2c:19:b5:b8:44:cb:59:93:09:b3:64:28:
eb:b8:28:35:27:85:e2:49:60:7c:0f:da:0e:7d:fd:
4e:ff:64:32:d2:ae:1e:8a:44:c2:1c:80:02:2d:83:
b8:34:1b:4a:29:6d:5f:5d:79:2c:24:cb:c5:bd:cc:
58:63:a2:30:ba:40:d2:8b:fb:d9:8b:b1:b3:29:0e:
3c:83:93:98:d8:b7:dc:22:66:51:ae:8e:9f:ca:b8:
08:c4:0d:af:65:0c:07:05:fa:02:08:e6:2d:52:13:
b2:30:76:8a:e2:27:23:75:29:94:e4:a9:ea:1f:7f:
95:5b:cc:54:b1:c8:01:66:9c:36:67:91:c9:79:62:
1b:d1:09:ac:04:bf:63:e1:0d:6f:83:e3:9f:46:13:
47:4a:81:59:4a:d4:f2:7a:59:4e:fc:17:ec:58:cf:
da:ef:73:9e:3d:38:3e:dd:bd:6f:05:6e:e1:be:9b:
0c:49:2a:d3:b4:5f:6f:58:c0:ba:f9:01:59:80:1f:
ca:48:07:ca:73:13:77:4f:ca:61:7c:10:0c:66:6e:
36:f6:ac:5f:e6:9d:33:70:8c:ad:b6:35:60:b8:e4:
5e:1f:9a:a3:c9:07:c4:cc:e4:35:05:2a:24:38:b7:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:31:FF:B8:96:07:8E:E6:72:99:BD:31:A9:E0:CD:67:80:6E:9F
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:39:2d:1f:bd:64:bd:b2:08:0b:9b:e5:9f:51:00:8d:e5:
60:8c:60:c3:65:60:d4:e2:0c:b4:6b:48:64:fe:ff:90:d8:b5:
0c:9e:a1:1a:ac:da:77:ea:d9:22:6c:00:65:4a:ab:2f:b7:8d:
b1:84:2c:60:c3:47:b6:76:0c:17:cc:15:30:de:5f:8d:a0:9a:
4c:5a:2a:a9:86:0a:2d:3c:a3:ab:65:a7:3b:e8:de:f4:1b:5c:
c4:1f:01:24:c4:ce:80:d9:a2:e4:c8:8d:1d:ba:fb:00:27:af:
8f:b5:3b:ec:ef:7b:c1:a3:4b:95:4e:5b:f7:87:73:91:76:71:
60:2c:90:bf:64:32:66:b1:4f:0f:b7:ea:62:b1:a0:30:56:a1:
f3:cf:2b:f9:e7:df:71:35:42:54:3b:6d:95:e6:49:dd:59:91:
88:20:ae:e0:bc:e0:30:2c:f1:ef:6b:01:c9:85:58:36:b2:b7:
f1:15:3c:be:f8:6e:f6:fe:00:96:18:ed:bb:a5:74:85:8e:d6:
5b:24:39:80:27:91:e3:c2:71:f0:30:50:41:cd:ff:43:58:49:
52:dc:00:7d:f8:7a:61:7f:d4:09:b1:3f:40:f5:40:d6:f7:d9:
c4:b4:74:82:69:30:8e:f7:71:e6:ac:9d:ad:90:1a:d8:e7:b8:
67:d5:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:33:11 2025 by rpki-client