Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: je8Ns8iMx0PqdAjg6GyGQHafAwV4C/iW8dGQSXKMcdk=
Subject key identifier: 69:DD:27:1D:34:40:F6:FF:ED:C0:78:F5:CA:3A:DF:92:0D:AE:4D:90
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019849D367F022FFD431BA213550204EC17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 0DB5
Signing time: Sun 27 Jul 2025 03:00:48 +0000
Manifest this update: Sun 27 Jul 2025 03:00:48 +0000
Manifest next update: Mon 28 Jul 2025 03:00:48 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: NbkJ5WFzW4HvXr4uGrcwwhNkkIKE0aDfpT9koLuUgjI=)
2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:67:f0:22:ff:d4:31:ba:21:35:50:20:4e:c1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jul 27 03:00:48 2025 GMT
Not After : Jul 28 03:00:48 2025 GMT
Subject: CN=69dd271d3440f6ffedc078f5ca3adf920dae4d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:c3:57:c2:09:4e:49:a0:67:93:41:70:3a:
a1:4a:b1:60:17:a5:c6:fc:b2:68:f8:df:60:47:0c:
d2:d5:ed:2d:83:9d:20:5a:93:52:9c:c8:5e:b5:a4:
b5:dc:c1:38:f7:9b:0a:1c:ec:6c:31:33:1d:1c:60:
3c:a0:a3:ab:47:fa:ca:2d:fd:bd:48:8e:c8:f8:13:
ab:78:4a:ca:d6:cc:63:d4:f5:02:af:78:dd:32:93:
9b:cc:66:2f:79:26:86:ec:e2:8a:27:71:85:19:4c:
33:e2:f8:78:27:d4:1c:85:75:49:9c:de:c2:57:56:
28:eb:0e:94:3a:8e:9e:89:65:c1:02:65:3e:34:00:
76:0d:cf:ce:fa:94:e7:60:35:c6:a8:f2:ab:94:89:
33:13:05:db:37:de:74:39:02:16:4a:46:27:0a:27:
fe:d6:55:82:c8:48:27:b5:dc:36:da:eb:3f:ed:3d:
97:19:be:48:82:e1:6f:0a:97:00:62:d9:c0:94:ad:
c1:36:3b:ab:e5:f7:75:91:4b:7e:66:ff:46:c0:61:
49:b0:10:de:80:d7:9a:73:7e:a0:13:db:33:76:e2:
00:6d:89:1c:02:b0:99:42:43:48:05:68:c8:7e:64:
10:4c:01:23:64:6d:a5:d1:8d:b2:97:97:0d:33:4d:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:27:1D:34:40:F6:FF:ED:C0:78:F5:CA:3A:DF:92:0D:AE:4D:90
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e4:a1:5c:5e:b4:c6:02:4a:37:9c:1e:e8:f7:b5:c7:87:db:
3c:7c:e3:0d:4f:22:9a:23:63:ce:b5:fe:d7:32:0c:86:62:53:
db:ca:92:b4:46:ed:28:85:11:68:be:9b:de:6d:a7:f6:80:c0:
7f:62:17:b6:32:8d:7f:df:7c:7a:cd:4a:41:5c:58:40:18:91:
94:76:fd:ff:8e:17:37:9a:00:2c:5e:50:ce:5b:78:fc:81:8b:
ec:ff:c6:ac:61:47:dd:45:32:4a:18:5b:24:50:4f:bd:87:b6:
25:b2:73:fb:22:95:e1:46:0e:f6:0e:39:b4:fd:60:ab:9b:f2:
63:88:b6:a3:c9:e0:df:c0:39:7e:01:fd:f3:01:f4:8d:93:f9:
21:50:a0:71:4c:ee:fa:3c:79:f6:72:cb:86:f1:41:ca:f0:f3:
d1:4b:27:ff:4a:b3:58:a3:11:50:b3:9e:25:81:1d:89:ef:8d:
62:c2:eb:da:02:9d:88:fe:07:5b:45:8b:d9:99:34:13:10:e6:
92:87:8e:af:2a:81:65:6a:6e:33:d7:61:77:03:f8:97:bf:4e:
53:87:5a:11:69:aa:d6:8a:07:15:1f:5d:b6:1e:52:5c:96:56:
8d:66:b4:94:bd:5e:f3:7a:c5:ee:77:fe:b3:a0:11:97:2c:2f:
0c:5b:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:59 2025 by rpki-client