
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: oO7IlAp6kpOBfAFNZ1+K9mZHS5C1rYcSxDxEeDPW6N0=
Subject key identifier: 7B:D9:58:32:13:18:59:85:E5:0F:62:6A:80:04:34:7B:66:AF:9F:20
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 0198729898D9E37D949626E2D9B82715A399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:00:59 +0000
Manifest this update: Mon 04 Aug 2025 01:00:59 +0000
Manifest next update: Tue 05 Aug 2025 01:00:59 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: muVJhi7M0ok2YeCgscOqav8dHJR4XazXxoDewl2ENGY=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:98:d9:e3:7d:94:96:26:e2:d9:b8:27:15:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Aug 4 01:00:59 2025 GMT
Not After : Aug 5 01:00:59 2025 GMT
Subject: CN=7bd9583213185985e50f626a8004347b66af9f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:63:79:bd:41:36:81:0d:54:a1:85:70:b9:
63:27:3a:79:83:68:e0:7d:07:05:66:94:ee:29:0a:
e5:9f:93:04:71:3f:e6:d1:e5:13:30:1a:f0:56:67:
06:18:ec:1e:15:85:b5:26:df:05:b2:d3:5a:66:3d:
95:53:9a:db:42:18:1e:37:01:be:0b:28:89:b9:17:
d6:9d:2a:e5:31:ba:26:d2:81:66:d0:f6:6b:08:c5:
1d:08:2f:00:73:a9:82:12:86:28:1c:da:7d:7e:53:
5e:e0:2d:8c:6a:26:ca:f1:b3:22:e8:02:9d:5a:a0:
8b:10:b7:65:c9:19:c3:3b:91:8d:ce:58:63:bc:27:
79:22:0e:14:76:24:05:0a:04:29:7d:4e:30:70:68:
51:f9:51:b8:be:95:9f:6f:7d:0d:8f:18:17:7b:68:
8a:cb:b4:ca:62:65:75:38:02:2b:98:4a:07:b6:89:
36:2c:37:b6:25:1a:61:47:93:04:e9:b9:d6:e3:22:
a8:b8:fd:c3:73:82:9d:97:fe:76:0e:bf:f9:6d:da:
fb:88:3c:28:e6:46:54:b6:5f:bb:fb:65:db:2b:d7:
47:3d:b9:fe:0c:b2:08:b8:45:7c:45:57:3a:2d:c3:
13:78:fb:f1:8e:7e:94:b5:78:ef:7c:3d:f5:1e:b5:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:58:32:13:18:59:85:E5:0F:62:6A:80:04:34:7B:66:AF:9F:20
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:2e:b3:31:c6:a2:2b:c5:d5:fa:71:34:e6:2c:33:a8:a4:
69:d4:20:dd:2a:2f:86:d3:5b:60:30:c5:b0:17:02:34:bc:fb:
e6:44:39:46:dc:1a:02:0e:84:19:35:f8:69:16:2f:06:82:f3:
90:b7:14:b8:45:9b:bf:84:e2:20:55:67:dc:e0:ed:8e:31:ad:
7c:94:e9:23:43:d9:11:30:b4:f5:71:5e:fc:4b:8c:c8:d3:65:
cf:a4:61:05:28:51:c0:63:8d:77:87:65:9f:1c:01:c2:f7:ef:
72:50:be:65:36:9d:a9:97:da:0f:52:24:ad:6f:c5:34:70:79:
46:49:cb:21:a6:a0:24:d7:56:23:bb:b4:c1:5a:62:65:34:be:
69:3f:d6:34:db:a0:f9:30:a1:c8:ce:07:09:47:df:29:94:6a:
8d:d6:37:ac:89:57:85:97:31:0c:07:77:15:25:dc:aa:ef:94:
99:03:1b:62:7b:2d:45:c3:17:6f:0f:c1:04:03:1a:6b:5a:50:
b0:6f:57:49:0a:9b:74:44:56:d8:00:6b:7b:45:26:5d:4b:b6:
08:69:5c:51:d2:ac:0f:79:37:a9:86:4a:c3:ef:78:fe:56:ad:
b9:19:86:d2:ad:e5:54:96:87:0d:60:ca:51:11:77:9c:2b:00:
3e:15:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client