Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: jHYfVK56s+BejaFpsckTvn7mLJ9RNaGr+b8FrPUB/sE=
Subject key identifier: 2E:99:08:83:14:BF:5D:60:EA:9F:20:F7:1B:B8:D2:A5:64:84:24:B0
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 019934926E8E8901C0922ABB069134DE9653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 01FA
Signing time: Wed 10 Sep 2025 17:00:35 +0000
Manifest this update: Wed 10 Sep 2025 17:00:35 +0000
Manifest next update: Thu 11 Sep 2025 17:00:35 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: AShIc7aAv+/R/TOGBMz99t+egsqkCr/m5SKhV/YS0sw=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:6e:8e:89:01:c0:92:2a:bb:06:91:34:de:96:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Sep 10 17:00:35 2025 GMT
Not After : Sep 11 17:00:35 2025 GMT
Subject: CN=2e99088314bf5d60ea9f20f71bb8d2a5648424b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:57:b3:1e:6a:2e:0a:36:bd:c8:45:99:1a:
a0:c4:8b:0f:5e:60:28:c4:66:d6:80:31:23:9c:e4:
19:2a:ad:36:0e:fc:5e:34:ec:32:8d:f4:07:eb:9c:
df:f1:f6:f5:2f:05:1a:ed:fc:3d:9d:a8:f6:cb:95:
7a:fb:76:63:00:0e:cc:fc:d1:cc:8f:cc:21:33:f3:
f8:dc:2c:eb:d3:df:2b:d5:6b:08:a5:fa:2f:e1:d2:
c5:20:c3:c2:28:2f:0e:bb:41:7f:a8:72:cb:8a:79:
91:d1:8f:ad:61:b8:56:ea:e6:83:42:51:d3:32:5d:
54:65:2e:96:1c:7e:cf:84:1b:3c:10:11:b0:08:d4:
7f:ad:05:70:a9:48:7b:7f:79:87:64:5d:60:90:84:
f4:10:a7:7d:8d:83:93:4e:cd:00:d9:86:ba:f6:75:
7c:1f:82:dd:77:09:6a:e4:01:5d:7c:20:94:45:bb:
84:28:c7:b7:e6:95:f8:85:f3:9d:13:16:00:aa:9e:
2a:45:cc:61:cd:4e:74:90:4b:25:c2:c0:c3:16:c4:
d7:03:9b:0f:29:a2:f0:20:92:f9:5e:1e:77:1a:51:
5f:2c:82:de:cd:f7:28:94:11:2e:f1:45:90:77:21:
86:e4:d9:93:2e:d4:aa:72:c1:06:a0:6a:60:5f:49:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:08:83:14:BF:5D:60:EA:9F:20:F7:1B:B8:D2:A5:64:84:24:B0
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:8e:78:6b:15:72:0e:e0:09:cf:fa:4d:b4:ee:98:c1:67:
4d:16:29:24:bc:55:98:17:0e:ce:3c:c1:14:96:43:25:7b:b2:
76:cd:12:65:a2:59:32:2d:3e:25:cf:72:ac:e2:0f:66:b6:1a:
c3:74:93:d7:57:8a:b6:45:75:a6:eb:3f:96:86:3c:3f:7a:ce:
a6:51:f3:5c:ad:08:9e:6d:97:1c:5e:9c:f4:eb:f7:2c:37:53:
b5:9f:73:b7:23:f2:5c:35:ad:54:c7:66:52:3a:8a:63:0a:72:
0b:02:20:29:b6:d7:9e:57:90:8c:f8:f2:30:b4:2a:07:c7:c4:
07:de:77:9b:fe:e8:48:e0:0c:0d:6d:6c:b1:fe:be:8a:32:53:
c9:a2:70:6e:5e:80:ec:ef:88:c5:9e:fa:31:d2:9e:ff:d0:cb:
0f:4b:89:10:2d:0c:30:78:f9:9c:dd:08:e0:db:bb:84:0c:d6:
41:7f:e3:23:62:25:dd:78:9b:37:33:69:ff:67:81:84:f1:26:
37:b5:7f:59:1e:3b:9c:e4:c2:db:43:3e:47:80:3d:6a:5b:30:
4a:5f:9a:9f:8f:77:e8:51:cd:a6:e0:3b:2f:8a:4a:4e:67:cf:
32:0e:0d:29:89:d2:ea:bc:39:6d:7f:22:27:f2:f1:af:38:28:
8a:03:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:28:29 2025 by rpki-client