Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: K8vQA2fqx2x7uhFefd7gXTrZeu+bO7IfEX11yyeg528=
Subject key identifier: 0A:C9:16:F8:8C:0A:D6:7F:C3:8A:E2:C6:44:8A:CE:1B:9A:33:72:AF
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019A0CDD7512BBB393676D4145BE09A7026C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 1456
Signing time: Wed 22 Oct 2025 17:00:31 +0000
Manifest this update: Wed 22 Oct 2025 17:00:31 +0000
Manifest next update: Thu 23 Oct 2025 17:00:31 +0000
Files and hashes: 1: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: uZ+MUA3eJZwdG3OnDwX4sMaJIQDPN/O2QVyZp3FBdg4=)
2: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
3: DTFwzq2g65Dq-1Vdc_lPETGChPI.roa (hash: vSxLCXuhhkqZVNd7lpT8hCgMyR9Cz5KGCKvVphrxEVI=)
4: LZoTpPM2VkILReCwMFeJVUb0VAo.roa (hash: ID8ZXpUjQ9jwywDgmAXCourXR8hKniMNfDnHcEORfgE=)
5: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
9: yl2_YgC-tBVxL8RhU8L2adT98-I.roa (hash: AMuPFgWghyfaBGHNj/l+7jY+wwAmCTQqhQ3xsaE8j4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:75:12:bb:b3:93:67:6d:41:45:be:09:a7:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Oct 22 17:00:31 2025 GMT
Not After : Oct 23 17:00:31 2025 GMT
Subject: CN=0ac916f88c0ad67fc38ae2c6448ace1b9a3372af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:ef:35:6e:de:c2:4c:30:d1:f6:3d:d4:ee:
9e:9c:c7:8c:a0:50:07:84:3c:8e:bd:46:61:64:af:
45:8f:83:6d:b7:bd:21:00:f2:50:ff:a7:ba:f8:b3:
e5:70:71:f1:fd:2e:d3:ca:e4:d7:33:ff:ea:32:d9:
b8:dd:df:1d:bc:42:8c:4c:ec:99:d1:fb:88:95:4d:
42:a7:0c:4e:fc:58:fd:77:3f:f0:dc:5d:e6:e6:27:
08:6a:9d:04:71:3b:17:0d:c7:7b:5b:25:92:21:61:
ec:f3:57:df:df:ef:21:55:89:ec:78:50:f4:39:7d:
b5:af:c5:45:d0:3e:0e:04:37:b9:9a:58:14:9a:f0:
5f:7c:1a:87:06:82:bd:65:ba:82:47:45:ff:39:77:
bb:fe:f8:c1:d3:26:99:88:aa:0b:c5:8b:8a:b7:c0:
40:15:ff:3c:b9:fa:8f:99:76:5d:66:5a:24:47:78:
66:ef:48:8f:e1:6d:de:cd:14:f3:42:1b:83:fb:9c:
46:cd:6f:ea:4c:21:ca:07:28:e7:2f:20:17:80:60:
5d:d2:fb:85:16:98:40:46:9a:bc:94:34:c8:b3:b6:
05:4e:aa:fe:75:78:97:10:68:43:91:8a:68:29:33:
b9:4a:bf:f7:fe:cb:41:fe:50:5a:bc:0e:6f:f7:dc:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:16:F8:8C:0A:D6:7F:C3:8A:E2:C6:44:8A:CE:1B:9A:33:72:AF
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:db:fe:b7:3e:29:6e:35:42:3d:30:ac:2e:cf:4a:26:2a:
03:14:6a:8c:1e:d7:1d:c7:b9:c7:fb:d2:16:53:4e:b7:36:2c:
49:8f:71:6e:e6:c0:55:84:2e:9f:27:3b:08:db:78:9f:64:0b:
8b:3b:16:23:cb:38:00:a3:06:c4:50:7c:a2:ed:dc:f5:77:14:
ce:e4:b9:e7:59:cf:76:b0:47:39:49:41:59:e9:b6:7b:42:de:
6f:24:ff:33:09:02:6c:e4:24:11:cf:84:63:fa:0f:de:aa:8e:
c9:e8:12:34:ce:47:e3:83:da:1b:1d:d7:e2:b5:32:f5:46:60:
29:39:6f:c5:c0:ad:68:48:2d:93:28:62:3b:f7:3c:26:b3:e7:
89:f5:8e:c9:89:81:fb:40:00:2a:d7:8d:c3:7a:a5:2b:45:de:
b9:9a:3b:0d:e6:b4:98:59:6d:9e:3a:1b:a9:5c:c0:9d:db:0a:
0b:44:07:87:f0:f3:23:b0:90:6c:f0:91:34:03:1c:ae:9f:c6:
91:6d:aa:02:e5:7e:eb:4c:9d:70:b5:83:24:e3:a1:a3:c2:9b:
38:c4:8f:45:b6:ee:94:ba:41:4d:f3:37:5c:10:bc:5a:e7:3f:
03:f2:85:95:bd:a4:12:03:b8:62:66:9c:fc:b2:28:15:8c:5b:
aa:4a:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 01:06:32 2025 by rpki-client