Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: osj56OgeutmkzlkPNtpDwr+mq2d+qCkK0lmmFIH2yzY=
Subject key identifier: 3B:6C:06:84:82:61:6D:B8:20:21:BF:BF:B0:00:B4:4D:8E:D9:30:04
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 0199225519FE111872C6E270E84635272908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: o94X3PtmDdiM62eJCdr4wvIRYB3TOX7DTusl3iYQJuk=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:19:fe:11:18:72:c6:e2:70:e8:46:35:27:29:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=3b6c068482616db82021bfbfb000b44d8ed93004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:fd:c3:f0:80:12:ab:b5:1c:5c:6a:5d:1b:
a5:53:ec:d4:b1:4f:93:68:f0:30:da:9e:7a:52:26:
76:20:89:88:83:2a:49:89:26:9f:fb:b7:43:c3:bf:
2c:99:c9:53:43:36:4f:96:d0:71:4b:7f:fb:8f:37:
a7:27:c4:8c:ea:f5:e6:cf:9a:70:85:c7:bd:65:dd:
83:a1:90:f3:07:43:8b:ee:9a:44:2a:14:15:35:41:
11:d3:28:a4:da:aa:98:0e:21:4e:5c:bc:c9:73:24:
50:b8:e9:4f:ce:24:98:84:38:da:7a:5c:63:c4:ee:
92:7e:ea:7c:59:2f:d3:4b:3c:fc:5e:4e:d2:a8:e9:
f2:11:c5:6e:f0:6e:db:8b:83:4e:9f:56:40:9e:93:
5a:3f:b9:aa:35:7b:f4:8e:5c:76:3a:b4:c6:1c:e9:
49:86:0a:43:69:ac:d8:57:f7:34:d4:38:9a:c0:0e:
b7:a9:04:c1:21:c4:15:6c:ca:69:36:a2:bd:61:87:
3c:4e:44:57:70:91:f4:6b:8b:39:e8:0f:2b:a4:66:
7d:a5:52:0b:bd:2b:64:f3:d7:49:9d:49:be:a5:83:
6e:a9:fb:18:cd:2a:c5:50:77:da:be:f7:51:1e:aa:
29:62:6e:71:a6:49:eb:49:68:3a:8c:bd:5b:bf:30:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:06:84:82:61:6D:B8:20:21:BF:BF:B0:00:B4:4D:8E:D9:30:04
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:44:66:5a:02:7e:ce:39:fa:1b:9f:b4:9a:04:14:49:2e:72:
50:25:0f:80:d1:f7:6b:08:7e:64:b3:41:ad:1f:52:f6:e8:8b:
c2:6a:bf:97:9e:76:40:62:2f:ad:53:19:df:b0:64:fd:d6:67:
f4:f4:0a:de:48:58:99:c3:9c:f8:a5:5b:4b:b0:97:3f:db:fb:
6b:06:b0:6f:39:f4:e2:c8:90:bf:0d:07:4c:90:ce:5b:c2:38:
c1:95:0c:85:f3:c4:f4:51:e0:29:82:3f:94:c0:01:38:56:59:
86:aa:26:44:8c:87:ed:de:a7:0a:33:dd:b7:1d:8f:8e:4d:f2:
e1:9d:14:df:c0:e8:6e:bf:bc:51:4b:67:03:97:5d:fa:91:f0:
d2:5e:b6:de:62:cc:94:e0:ec:a7:2f:2f:8a:2c:cb:ee:71:6e:
c1:29:09:86:27:7b:93:93:d1:28:a4:e4:ee:bf:f3:ed:1c:fe:
5c:11:b7:bc:53:c0:c5:be:bb:de:8f:0f:d4:59:f2:2c:b3:1a:
03:0d:7e:8b:b4:3e:47:8e:25:9b:17:65:b7:36:b9:20:5e:b1:
ec:1f:dd:16:c6:8f:8c:9b:39:88:d3:f6:4e:33:01:44:44:f0:
7a:a6:0c:73:17:91:22:ad:61:d5:e7:81:2c:3b:07:07:01:d6:
38:69:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client