Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: fgo5Wuv4i+7QSXN7pZUAw5KLkdvRTixcEhDyaLzm45U=
Subject key identifier: A5:E1:D6:5A:73:96:70:1C:73:BC:90:AC:A2:37:06:02:70:60:E8:12
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01987C40EAE23D8B7CACF91BB47EF887DA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0573
Signing time: Tue 05 Aug 2025 22:01:25 +0000
Manifest this update: Tue 05 Aug 2025 22:01:25 +0000
Manifest next update: Wed 06 Aug 2025 22:01:25 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: LpPIzhoaZrko+CK2vpGH9eu+7zcv9YZe+4labUtTzyc=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:ea:e2:3d:8b:7c:ac:f9:1b:b4:7e:f8:87:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Aug 5 22:01:25 2025 GMT
Not After : Aug 6 22:01:25 2025 GMT
Subject: CN=a5e1d65a7396701c73bc90aca23706027060e812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:92:77:d7:b7:ab:ac:78:e6:56:40:83:b9:
5d:94:47:50:cc:55:72:cc:66:dc:c9:de:5d:ee:28:
c3:70:9a:c2:f0:9d:f4:6d:87:c0:d3:71:3d:b4:c2:
c1:d5:5f:6b:74:36:a2:11:f3:61:de:bb:bd:e2:e0:
fe:77:a8:a9:2a:eb:e7:6e:3c:c5:f5:99:a7:31:0a:
6e:a8:86:22:91:43:bd:52:77:c0:80:1b:6f:fe:06:
84:ae:29:e6:8a:e5:f3:a0:9d:9a:01:7f:a1:50:03:
be:43:bb:fe:75:fc:b5:09:e5:e7:83:8f:cf:c6:bf:
92:41:20:8c:0c:f9:25:a6:55:4a:30:21:ae:89:fe:
3f:41:e0:65:ed:fb:22:9b:b1:09:11:d4:56:2b:d5:
b5:b9:b3:0f:e5:cb:c8:c0:9f:32:49:0c:61:db:a3:
88:b1:41:c4:5e:0c:4d:24:bc:09:c3:72:4b:66:df:
5f:96:44:f8:ef:da:d9:f5:a4:0f:c1:4e:17:78:88:
59:54:f2:b6:1f:50:6f:49:47:09:34:6a:b6:fc:dc:
42:91:b3:59:3c:5e:db:13:26:94:8c:ac:f5:bb:09:
91:31:c4:6c:36:a0:cb:49:d8:4f:30:93:95:7a:d2:
75:3b:01:ce:af:04:25:2d:fd:93:fd:cb:a8:40:2b:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:D6:5A:73:96:70:1C:73:BC:90:AC:A2:37:06:02:70:60:E8:12
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:47:cb:58:b1:5d:1c:ac:99:87:90:e8:68:84:ef:93:fa:
81:fe:7d:83:59:1b:bb:ae:f0:9f:ee:9c:f9:28:6b:72:17:95:
db:ca:b1:53:48:09:ab:d5:c9:83:e6:3d:6b:46:28:ff:d1:88:
e3:f3:7c:77:6a:f8:a1:ca:be:32:12:d2:5e:b4:fa:3a:3f:cb:
54:1c:02:ff:2d:41:5e:26:c6:da:d6:a7:ef:d6:f8:98:20:e8:
c7:13:a9:66:a6:14:54:ec:82:6d:cc:2f:74:3a:ac:bc:07:18:
6c:57:ca:ba:54:e6:2d:4c:00:cd:0c:b7:ca:8a:0b:cb:20:3d:
a0:97:9d:9c:b7:0c:a8:8c:b2:e4:25:6e:da:c0:cc:a1:4e:18:
bd:17:a7:62:36:4d:2f:64:02:0f:82:11:40:6d:f9:e3:1f:1e:
2c:ef:49:ca:b4:2a:8c:af:86:5c:2b:2d:3b:1e:83:57:d9:87:
de:79:39:02:ce:70:ad:a6:29:b2:ed:2c:72:59:3c:4c:94:2e:
5a:c1:16:23:11:47:09:0e:41:44:0c:9b:40:85:6e:47:22:5f:
05:98:f9:da:88:bf:11:47:fe:3f:55:90:6e:40:3d:8f:65:40:
24:f8:7c:9d:df:b0:04:c3:b8:b7:42:3d:f3:79:03:4f:3d:e4:
3d:e9:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:53 2025 by rpki-client