Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: j1Cpzu9U3iKLjEPn4Tqx7jJf5s0pym1mddpykRD4MsA=
Subject key identifier: 23:FD:22:2B:D8:97:E5:8E:BF:68:35:32:BB:3D:BE:78:46:E1:CD:5B
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 01992330D18B7CE8831D690F837EFCC005AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0F55
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: D8Dt0ebDGy4bzSNT2v1y9aZLEuMbTbWBwzz4cjTYdzA=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d1:8b:7c:e8:83:1d:69:0f:83:7e:fc:c0:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=23fd222bd897e58ebf683532bb3dbe7846e1cd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:ac:a0:7a:cc:06:5c:99:03:06:2f:ef:e1:
a2:ca:21:98:bc:93:ac:02:8c:ff:3f:49:76:8a:3d:
7c:cb:50:3e:75:78:d8:3a:6b:df:5d:ab:d1:9d:9d:
bc:9a:e6:e0:ad:70:77:f8:d1:9d:29:65:95:75:9d:
41:55:fb:d6:be:cb:a9:ca:af:79:0a:58:ba:19:b1:
77:fd:d3:73:7e:8e:2d:6c:00:c3:65:39:86:e5:50:
fe:7e:dd:f1:e3:ef:41:3f:d5:c3:3a:1b:29:2e:bf:
73:6e:2d:c4:b6:c5:1e:9c:51:41:a9:be:df:9e:18:
c0:49:de:4b:32:60:9d:20:4f:1b:88:ee:ec:de:89:
21:51:da:21:50:b1:20:e1:a8:d1:b9:61:94:da:17:
84:c2:b7:40:d7:29:20:72:d1:90:eb:ad:50:83:70:
3a:93:ef:a8:8c:ba:3c:eb:a9:3d:a4:f6:bd:ae:73:
ef:7a:d0:98:47:e3:bb:9d:7e:b4:c9:6f:43:89:ce:
2c:81:b6:7c:ff:85:89:f3:46:7d:ed:95:f5:93:15:
27:e1:56:c5:4e:84:28:b4:ec:69:f7:c9:2f:6d:8e:
fe:97:f3:86:b1:ca:c9:20:4f:7f:94:9e:b5:10:76:
54:5a:2b:44:cd:02:88:80:7b:60:0b:5e:a7:25:d4:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:22:2B:D8:97:E5:8E:BF:68:35:32:BB:3D:BE:78:46:E1:CD:5B
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:9c:03:5b:a1:33:45:4c:e7:7b:ad:39:a5:46:66:57:d5:
92:57:c8:2e:cd:75:e0:18:a2:78:74:db:d4:cc:4d:b4:62:c2:
56:c8:f0:7a:be:89:15:78:b8:48:37:4f:3d:d6:36:fb:8d:1d:
14:03:f6:6a:60:5c:e5:dc:7f:94:f0:cf:3e:e3:02:db:61:ad:
26:25:4c:72:38:01:83:ec:9d:e4:d5:9f:9e:65:ab:d2:2b:75:
bf:90:e0:02:61:38:0c:4e:95:42:51:93:e3:48:84:d8:fe:32:
b4:58:0b:e9:9d:92:0d:67:6f:7f:8c:14:11:e6:87:99:42:01:
63:41:bf:13:54:c2:ec:56:26:2d:51:99:1e:32:93:9c:7c:ae:
31:60:70:a6:a2:32:ac:5e:fc:b8:d4:53:0f:d0:92:92:1f:6e:
e6:6f:ed:f1:18:8d:60:6d:21:de:1a:b6:0b:a3:ed:11:51:a7:
e2:dd:d4:2b:91:59:e3:0d:9e:ad:19:be:02:d8:32:bf:b1:9c:
47:88:ca:36:46:3a:d7:83:17:6e:36:ad:8e:8b:d5:71:a4:de:
e6:76:c4:b5:a5:a7:37:21:46:a7:92:1b:8a:30:85:5f:4d:1c:
54:19:48:ff:80:3c:b1:76:cd:47:dd:2c:25:6d:66:4f:70:04:
7f:0b:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client