Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: eYTSGK6kYDLsnHFU+I/ZsBj3Cun1Rim+rP0zx1WXWzc=
Subject key identifier: B3:94:59:0C:DC:D6:11:2A:6C:FD:69:DB:79:62:16:7F:C5:32:F1:9E
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 019922FA579966D33D9E300F5E6528D089B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: DC
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: 2YgjK1Gkeyn12PfpKbXKeyzpCU9trzylQ3/HsANSHO4=)
2: KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa (hash: h7WOd3FoOyE3z3s6Su64D7SfxJalvzda0YokBEiVb1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:57:99:66:d3:3d:9e:30:0f:5e:65:28:d0:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=b394590cdcd6112a6cfd69db7962167fc532f19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:c8:14:df:1d:8e:db:ed:32:e8:30:ae:8d:
41:52:a7:b3:71:46:86:24:f4:29:88:9d:e8:17:7a:
1f:6c:fd:99:57:79:5d:e5:d7:de:d6:f1:b9:09:f5:
70:0e:8e:42:12:30:9e:a6:5f:01:38:7f:35:ac:d0:
d7:a3:72:c5:39:f5:d9:57:15:f6:07:41:25:53:d9:
a2:b3:0b:ce:0d:9e:1e:c0:58:6c:21:bd:74:0d:95:
85:7b:ad:a1:45:e8:5d:32:f1:8b:5b:18:00:0d:35:
99:8f:32:e9:83:cd:74:2d:dd:07:e5:7e:2e:ec:ac:
22:bb:12:2b:4a:32:2f:cf:1e:49:29:29:c6:12:40:
62:6d:cf:44:c1:0d:7c:de:30:ec:94:72:2a:2b:93:
85:bc:ea:5d:cf:01:55:b0:45:a0:73:28:e6:7b:d1:
b4:a3:91:58:3c:89:c3:d6:6e:6c:96:fe:8f:82:1d:
8f:27:51:54:30:66:9f:3b:4e:8b:96:b4:5f:33:6d:
26:c5:bb:57:3f:06:29:5a:12:6e:c4:73:32:2c:4b:
6e:1d:12:89:59:05:4e:5e:c9:f6:cd:d1:f2:e3:1a:
55:42:09:7f:93:9e:59:df:c0:8d:74:c4:c2:bd:52:
21:40:3a:af:b1:d2:53:93:5a:a5:f5:b0:80:4c:c9:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:59:0C:DC:D6:11:2A:6C:FD:69:DB:79:62:16:7F:C5:32:F1:9E
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bb:7d:c1:0e:7e:7f:b5:0f:fd:d5:54:91:30:a0:7b:36:93:
72:48:7c:4f:dd:5b:56:d8:d7:45:21:15:de:da:e4:0f:3d:c5:
a6:8b:44:14:03:7a:ff:7b:46:22:0a:a9:af:ff:b8:47:10:1f:
d4:d9:b7:b9:56:21:f6:cc:e1:6f:d6:71:9d:21:b4:ba:02:46:
57:24:44:f7:92:76:c5:9e:9e:a6:06:07:aa:31:37:de:01:aa:
2c:87:5a:84:b6:de:14:cc:06:d6:b9:d4:63:ac:a5:f8:12:ba:
ca:ab:42:82:fd:fc:1c:f5:a5:87:a0:fe:53:60:2b:1f:64:31:
e6:10:b3:5f:66:4a:10:24:a8:74:a5:b5:94:80:23:38:05:81:
93:45:df:fa:7b:0a:10:0e:89:95:8f:c2:2b:d2:80:1e:1e:18:
96:e4:cc:0c:32:3e:50:e5:bd:95:f5:8d:69:94:17:dd:d5:9a:
51:1b:20:14:be:24:b0:50:fd:30:42:1a:86:e8:a0:98:27:fc:
a1:83:91:89:67:ea:7a:b0:df:45:72:16:09:03:17:4e:78:a9:
33:ab:7a:b5:b2:75:34:e7:55:14:ac:59:28:a5:50:3d:80:a7:
b7:f2:28:62:03:48:57:e6:b6:d6:0d:21:ba:b1:6d:5f:51:02:
ba:32:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:57 2025 by rpki-client