Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: G5S/rHiM3lAIdJiJ26jpkxmAvND+p3aUF3KMq9dGp2g=
Subject key identifier: 50:F7:98:AE:10:61:FA:F3:22:94:5C:A6:AD:3E:A0:26:C5:08:4A:B3
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019A006C286B8C9631C0D96F67F358874CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 063C
Signing time: Mon 20 Oct 2025 07:01:19 +0000
Manifest this update: Mon 20 Oct 2025 07:01:19 +0000
Manifest next update: Tue 21 Oct 2025 07:01:19 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: ThEoCWP08XWesxleIR2umvmibKencp1fiwyPTr3QHbY=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:28:6b:8c:96:31:c0:d9:6f:67:f3:58:87:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Oct 20 07:01:19 2025 GMT
Not After : Oct 21 07:01:19 2025 GMT
Subject: CN=50f798ae1061faf322945ca6ad3ea026c5084ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:a8:0d:03:20:dd:88:46:e1:cc:cb:32:3c:
e2:80:59:31:63:98:41:95:77:11:bf:5d:8f:82:42:
97:95:c1:d6:dc:ea:40:b7:d3:7b:5a:d5:28:2b:2f:
02:62:0e:37:3e:f0:b9:cd:dd:a1:75:4e:d1:62:20:
f8:88:0d:64:70:b5:4e:1f:db:1c:41:11:88:6c:c5:
eb:c0:5c:c0:5a:c0:3f:f3:13:71:93:33:b0:47:4b:
1b:76:28:59:e7:0a:8b:63:8b:64:f6:0e:8e:1a:58:
fb:5e:4e:bf:82:9f:49:10:c4:6b:2f:d8:d0:e5:a7:
93:ff:2e:ab:5c:9d:6f:89:5a:4e:4b:fc:c0:cc:89:
db:40:8a:1c:4f:37:ea:b9:07:b1:ab:82:24:72:be:
a4:62:6a:ef:bc:cf:ad:8c:de:98:70:8d:61:98:d0:
1e:b0:37:5e:2d:79:d3:54:cb:31:34:67:6f:ec:d5:
9c:56:8c:3c:46:b4:4e:be:b4:b3:22:47:35:5f:09:
2f:65:ae:7b:5b:1a:96:c3:61:44:82:ac:36:7b:13:
5a:90:6e:28:4b:08:03:51:1e:ae:de:e3:01:1c:6c:
15:10:99:83:08:82:9c:ff:fd:c9:aa:9e:35:11:f8:
3c:c1:8e:55:a4:74:2c:e1:b4:90:89:8d:5d:27:f8:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:98:AE:10:61:FA:F3:22:94:5C:A6:AD:3E:A0:26:C5:08:4A:B3
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:c8:1c:d5:71:e6:63:17:36:5e:42:b9:22:24:5e:b8:8d:
c3:2a:bb:85:9c:d1:46:4c:ff:b6:82:d3:da:8b:99:5d:5b:41:
1b:bd:1f:28:d5:86:67:31:0f:90:d1:87:f8:b4:cc:11:d4:ab:
2d:ba:a0:99:02:cb:c9:d2:e2:34:ad:e4:67:65:e9:84:00:b4:
cd:69:e4:72:8e:18:7e:42:98:8b:65:ff:6e:06:18:d6:00:90:
33:43:4b:60:04:cb:46:08:19:01:f0:55:87:cc:e9:c1:a1:96:
b1:e7:23:04:70:fa:f6:47:92:84:11:df:a2:c3:c9:a3:26:ec:
00:05:dd:f4:f1:80:2f:01:d2:1d:62:1b:c4:7f:4d:95:e4:38:
b2:16:d3:81:9d:c3:44:3b:5d:80:19:0e:65:38:5a:41:bb:bf:
97:80:21:bc:43:85:36:80:f4:24:3a:2d:53:0a:3c:4b:3f:9c:
ba:d8:14:7a:ec:a6:c3:6b:f4:8d:ed:3f:3f:bc:d7:c4:8c:82:
24:dc:a4:19:d4:e0:95:15:bc:8d:4a:af:8a:92:5a:8c:79:41:
72:1b:90:81:e2:d1:1c:1f:5a:b8:57:a8:26:a2:06:7d:dc:dd:
5d:04:0a:01:c5:18:7c:6f:7c:44:27:78:c4:47:2d:35:73:49:
49:0b:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:23 2025 by rpki-client