Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: Agqohx+Z0ho97pyzkdMGtPprrXRDuJJXFZCbXStVVBQ=
Subject key identifier: A2:41:8D:ED:EB:FE:CE:FC:20:A7:BB:13:BB:01:FB:5C:18:E1:D9:B3
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0199225550BB5D920EEB3AB5BE00F5DFE575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 13DC
Signing time: Sun 07 Sep 2025 04:00:40 +0000
Manifest this update: Sun 07 Sep 2025 04:00:40 +0000
Manifest next update: Mon 08 Sep 2025 04:00:40 +0000
Files and hashes: 1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: NxgUgkDWYlu3nqSVKuSKYmHYEz9g2teE25hJWMNqsOE=)
3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:50:bb:5d:92:0e:eb:3a:b5:be:00:f5:df:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Sep 7 04:00:40 2025 GMT
Not After : Sep 8 04:00:40 2025 GMT
Subject: CN=a2418dedebfecefc20a7bb13bb01fb5c18e1d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:45:c7:8c:1d:b7:ef:0d:16:0f:22:07:d2:
6d:0a:54:f9:7b:56:96:cc:07:ec:65:dc:d0:0e:a3:
a9:c3:10:05:93:7f:9a:66:f3:dc:71:fb:02:31:1e:
e3:6c:ca:8a:fc:d3:86:16:d3:8c:70:16:2c:18:49:
f9:47:93:fe:41:ee:13:d2:1d:f6:7e:69:a5:52:20:
1f:b1:5f:92:d7:91:2c:bd:f9:e4:b5:d6:5d:6f:64:
78:ca:bc:57:35:fc:ea:ba:a9:c8:65:e0:a1:b7:d7:
db:f5:65:87:54:95:94:91:3a:02:cd:81:a6:7c:27:
85:fb:25:f0:02:fe:ad:f0:43:a0:85:53:60:f8:80:
8c:5d:57:02:60:57:ec:c7:a7:dc:66:b3:32:af:06:
99:a5:2e:7e:d8:9d:62:eb:43:b4:d0:c1:f8:63:6c:
31:79:6d:4a:7b:5d:e4:2f:06:49:c9:52:55:75:7d:
67:fe:8f:ac:ac:20:a6:b1:38:2f:cc:26:c5:ee:2e:
ad:1e:0f:43:21:36:23:7f:dd:27:6f:b1:46:6b:1f:
96:9e:b5:fb:cf:c5:29:92:f2:cb:62:82:1a:a9:55:
7f:d8:df:8c:e9:dc:1d:06:b1:6a:69:b4:ad:33:44:
d0:1a:e5:36:6c:5b:26:78:10:3d:c5:cc:3f:72:b5:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:8D:ED:EB:FE:CE:FC:20:A7:BB:13:BB:01:FB:5C:18:E1:D9:B3
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:71:17:54:c3:c7:a2:82:24:52:b9:a3:9e:d6:7a:56:4c:
3f:21:a5:80:cb:43:e3:59:d9:94:0b:5f:93:ee:70:37:84:0e:
38:ed:f6:ba:8c:4f:18:d4:a6:64:18:f1:10:4d:81:6f:d6:e9:
1c:02:73:86:34:5c:cb:65:63:75:2e:5c:4c:aa:47:cd:60:12:
4a:5a:8e:cd:8e:4b:37:60:a0:4e:08:ab:56:bd:66:73:55:31:
a9:7f:e3:7c:00:93:cb:1e:00:19:96:2a:24:3a:1f:49:e7:db:
25:42:7d:b0:da:35:05:f9:32:17:9f:24:ea:36:33:70:8d:91:
e9:24:bc:06:f3:41:df:76:0c:a3:8b:06:65:1f:4b:7b:7f:24:
cf:b2:c8:7e:44:7b:71:56:45:15:45:18:4b:06:70:25:5a:e4:
f9:38:e7:7e:7f:87:a1:f4:59:58:07:4e:68:8f:59:23:26:f3:
90:96:a2:7f:7a:26:76:10:c9:ba:0f:e8:df:78:ae:e6:76:c0:
cb:6f:68:58:00:d4:7d:5c:2d:30:1a:30:ae:9f:52:68:50:25:
a2:b1:b8:c0:6a:92:6e:f0:49:f8:81:bb:4e:58:2a:2c:54:33:
b6:e8:4b:c7:12:db:86:f8:31:ba:15:63:4e:c9:d5:3c:81:5f:
50:c1:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:21 2025 by rpki-client