Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: FHJ1PNPYG3QK7J++ic96Mq81FTR2ek+nc4ROUaHwqEc=
Subject key identifier: C5:A5:31:78:94:07:7F:D5:E3:37:C0:01:BE:C5:AB:C4:0C:8B:92:6F
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019A71B8ED51032D13DBC42458DB752E889A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 0654
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: U26KQv1DkQeQlPMkD/+hr9ltn5ddh//tB+4p+0zA+ko=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ed:51:03:2d:13:db:c4:24:58:db:75:2e:88:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=c5a5317894077fd5e337c001bec5abc40c8b926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:e0:59:5b:ab:73:ca:5b:8e:bc:27:fb:de:
5d:6e:5d:93:9e:ab:c7:75:ae:63:9f:ed:31:f5:9d:
27:36:3b:7d:01:1c:d0:cf:ee:5f:65:36:55:4c:ae:
1b:1c:19:1a:c3:d9:77:d7:e2:2d:10:27:41:97:e3:
e0:7e:e7:7b:ac:af:ba:d0:fc:f1:cf:f0:4e:d7:65:
0a:9b:36:de:a6:1f:47:c5:80:d5:46:50:6e:90:cc:
1f:6c:47:2a:ce:9f:a7:b0:16:ee:ae:b7:a3:4d:46:
fa:4b:d5:19:09:73:15:2f:c1:68:7c:69:7a:98:25:
1e:c8:80:63:00:e1:ad:70:bf:64:ff:9f:d9:e0:c3:
65:10:1e:df:7f:ef:0a:98:2d:88:ae:e2:3b:95:09:
ca:66:2b:1a:37:b2:f5:7d:0c:54:9c:eb:29:57:85:
e8:3e:eb:18:a2:b9:f0:d7:40:9d:f4:97:d7:32:09:
e5:7d:59:d0:2b:d9:ea:f7:8e:b4:a8:35:d1:a3:85:
12:5e:07:8e:37:e1:48:a0:0c:e1:a6:4c:78:44:cf:
19:50:ef:bc:0c:a3:64:00:5f:18:67:7c:49:4b:04:
c1:ca:e0:7d:80:5d:19:d9:60:1b:0f:bb:d1:cf:c3:
f9:a6:4c:32:a4:52:91:a5:6d:ad:14:50:0c:65:e2:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A5:31:78:94:07:7F:D5:E3:37:C0:01:BE:C5:AB:C4:0C:8B:92:6F
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:48:79:bc:c3:1d:f2:db:9c:98:f5:7b:d4:29:5b:54:e3:
e8:03:e7:38:10:d6:c8:11:1b:b9:65:11:db:b0:f5:23:ff:61:
38:22:01:b0:8e:fb:1d:d9:06:7f:c6:1d:a7:43:76:69:55:ec:
db:2a:ce:e5:45:dd:ea:ee:fb:73:dc:85:ff:e2:c9:af:33:08:
d5:f8:7b:9c:b1:02:a1:fb:2a:be:82:89:6e:ed:1f:cc:ff:12:
ec:07:15:67:bf:cb:d1:81:d6:63:aa:f5:16:7a:5b:42:b9:a9:
dc:af:61:77:75:ad:02:67:ce:0a:8e:43:89:09:66:3b:89:7f:
70:47:94:58:b8:2f:cf:dc:49:66:c8:06:02:5b:fe:ed:24:57:
e3:fe:cf:89:11:49:fc:f4:ae:32:40:08:63:90:8c:e3:95:98:
0c:e7:a4:a2:76:91:b4:9e:a9:b3:f1:2e:e8:07:0e:e9:3d:b3:
ac:c0:7b:04:5b:55:16:bf:66:42:9a:16:74:a6:55:db:0b:84:
96:3b:99:0c:19:26:6b:6b:a6:7a:5d:43:16:d5:a2:88:dc:c9:
20:0b:37:50:0b:09:76:4b:50:b1:bb:87:d7:60:d0:02:b4:34:
6c:9d:fd:25:40:24:3c:a5:5f:49:94:c3:09:eb:f6:ec:5f:f3:
33:4d:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:23 2025 by rpki-client