Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: Dw9ANafuO3zNRr4wQ/2UhgLAWdm8F1KKLvrUDA3Z2y4=
Subject key identifier: 06:14:5C:DF:63:7F:42:ED:95:97:2A:C5:68:0F:5B:E2:5C:B8:9F:74
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019921B0CC831797BD875FF336D2A4A5680E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 05A6
Signing time: Sun 07 Sep 2025 01:00:58 +0000
Manifest this update: Sun 07 Sep 2025 01:00:58 +0000
Manifest next update: Mon 08 Sep 2025 01:00:58 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: sOM/+8pCdLle+psvvhFwC5zs0D5GyFV5HrLibEYynOw=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:cc:83:17:97:bd:87:5f:f3:36:d2:a4:a5:68:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Sep 7 01:00:58 2025 GMT
Not After : Sep 8 01:00:58 2025 GMT
Subject: CN=06145cdf637f42ed95972ac5680f5be25cb89f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:aa:1f:4c:78:a3:18:0b:d9:10:80:74:58:
54:dc:c1:21:f0:e1:2e:6e:db:ab:bb:3a:31:e8:ce:
69:a7:80:78:84:07:f8:39:ad:ad:db:68:81:16:24:
88:4c:f5:ea:b3:47:df:fe:61:11:52:31:24:e3:4e:
6f:49:85:78:89:bb:6e:df:39:98:10:a1:45:77:66:
03:e8:f4:e0:7c:05:ca:ab:02:7d:b8:2b:04:92:78:
51:4f:c1:08:66:0c:a2:59:07:13:9a:ed:72:7c:59:
4d:61:99:83:53:a7:83:de:53:1f:f1:d4:71:4c:18:
c5:54:f0:a3:ca:ff:82:c1:5c:9e:98:2d:58:d3:f7:
89:f0:0a:49:0f:98:50:f3:c7:d4:94:37:d4:ac:2f:
bb:52:b0:e3:df:2b:aa:4d:99:24:2c:dc:c9:28:7b:
8d:55:aa:29:5a:53:41:aa:df:a8:de:68:f4:eb:67:
89:f1:6e:24:4a:df:d3:ea:ea:8e:38:19:18:7c:ce:
62:6e:41:fc:19:4c:24:af:32:e8:7d:f0:e6:12:58:
ca:df:93:99:c0:d9:7f:ab:f1:ac:5a:37:41:f1:b7:
ad:2c:ba:81:30:f0:47:a0:f3:01:c2:cd:5e:7a:32:
33:e0:e5:53:97:e9:d4:4d:b8:1e:7f:02:65:9b:fc:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:14:5C:DF:63:7F:42:ED:95:97:2A:C5:68:0F:5B:E2:5C:B8:9F:74
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:19:c0:ab:ca:bd:bc:e6:74:4a:5d:a2:af:69:6f:22:e4:b7:
47:7d:9e:e5:da:74:21:46:df:90:28:80:53:72:d9:82:68:78:
90:6c:54:16:30:c5:e4:3e:c4:9e:af:3c:02:0a:54:fb:f4:ee:
6c:03:9d:5b:b0:09:91:6c:ce:c0:f0:cf:e8:9f:c2:cf:23:cd:
5f:55:cb:a3:3b:ac:85:b4:81:8a:44:da:74:f2:45:4e:f4:9a:
fc:cb:50:22:9d:3f:f3:38:e3:de:fc:52:ab:b6:60:05:57:0f:
2f:10:45:e9:ce:45:bc:33:82:8e:8c:a5:87:2f:bf:cd:dd:34:
6f:d0:86:77:be:95:fd:df:0e:b1:78:3c:58:97:c7:ad:90:95:
56:04:bc:12:76:9d:6b:93:33:97:c8:1f:c0:4d:b9:77:95:f6:
ad:47:95:60:6a:50:5e:14:e2:4a:3a:9a:98:19:60:1a:8c:56:
e5:44:6d:b7:24:95:45:40:e6:3a:39:c9:a7:48:ab:a0:bf:97:
1b:6b:29:77:56:73:73:03:35:12:29:13:76:7c:77:b1:86:ed:
ce:52:41:d6:19:28:9e:de:fd:4e:8c:19:91:ef:7b:ee:86:29:
d5:55:3d:94:25:ee:0d:ad:95:22:b1:f9:78:10:b4:3f:67:72:
9b:c1:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:29 2025 by rpki-client