Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: eWXv67IGxkMccbvhuhvLt/6QLYWZvBNVl9ZArx6UVXo=
Subject key identifier: B3:B9:5E:AA:F7:CD:41:1D:25:53:E3:71:81:8A:FE:18:F3:15:D4:BF
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019A4F99574B603295DE3AE78D01DFDE3DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0665
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: JYYNmTSCoxJXCg1mHzX+uWj8IGPyiQijul27HnAN6w8=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:57:4b:60:32:95:de:3a:e7:8d:01:df:de:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=b3b95eaaf7cd411d2553e371818afe18f315d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:66:57:20:d3:a3:ba:ac:59:04:a4:2e:21:
6c:14:a2:29:79:83:8a:71:21:2b:14:ab:bb:50:05:
a8:b1:27:7c:a3:3e:37:32:ae:3a:c7:6f:c7:23:9d:
5e:96:4d:7f:c7:a2:67:ab:76:69:7a:e0:e1:2c:a5:
d0:31:be:e6:cf:35:78:aa:15:e8:9c:14:de:c2:7c:
9f:fe:81:ec:b9:02:cd:78:46:8e:20:7f:3a:16:dc:
20:c0:2b:2a:5c:98:ad:8d:09:e3:11:6e:d7:f3:55:
4b:d3:1a:d2:8a:52:e4:f7:ce:f9:29:a4:a4:8b:04:
59:2d:b1:42:08:0b:86:81:99:16:d9:35:a7:1c:3e:
9f:cc:42:6d:9d:11:6c:88:dc:8f:a7:60:4c:e0:d3:
9c:90:52:9e:2b:9b:01:56:d7:16:37:8c:4c:f3:d6:
0e:90:19:a2:e6:c8:b6:ec:da:fb:7b:d0:e4:04:58:
4a:6f:69:7e:bf:2b:e6:82:05:ca:e5:54:c2:b2:30:
87:b0:8a:d7:04:df:de:aa:ef:df:cc:99:03:5c:db:
22:45:31:6b:d2:95:fc:99:75:34:2d:ae:9b:b3:97:
02:65:e2:25:04:0f:69:d2:cd:b7:8d:84:04:71:26:
86:03:07:67:5f:8a:24:50:29:4c:4b:53:31:94:f6:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:5E:AA:F7:CD:41:1D:25:53:E3:71:81:8A:FE:18:F3:15:D4:BF
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:8e:5f:21:59:68:10:f0:96:64:d9:ce:36:7e:0c:87:2d:
c1:26:39:05:c8:54:0e:cd:9b:ef:65:24:8e:c2:c9:11:37:05:
6a:f3:3b:3f:dc:fe:b0:dc:27:74:0d:84:1f:48:e9:b7:5a:26:
79:20:d1:72:03:19:39:36:d0:74:4b:8e:24:70:14:e8:60:19:
06:5f:82:3b:a5:38:19:2a:a1:5f:15:9a:a4:ec:ed:f3:9b:17:
b5:16:26:38:c3:13:5c:c4:62:78:9f:cb:d7:78:47:21:ea:5b:
7e:93:99:66:69:1e:2c:f9:04:78:16:8e:49:78:76:a6:5b:b6:
a9:b3:de:12:42:bd:78:e7:fe:d9:c4:02:a9:b1:59:90:ce:96:
2c:13:2b:91:38:90:cf:e8:41:a6:c4:10:bd:49:e2:96:bb:44:
ab:2b:80:0e:b0:48:a4:a9:c9:e0:e8:a9:0e:4c:b0:91:f9:85:
3d:03:01:22:3f:1e:28:64:ea:82:43:d5:47:df:90:5f:3d:61:
a6:88:fe:b4:3a:e5:2f:80:36:ca:b5:7f:72:46:39:7f:ce:e9:
b0:f1:ae:ef:5b:d1:f9:cb:21:9b:cb:98:53:ae:12:d2:4c:c2:
df:97:4f:0d:96:6f:01:8c:3a:27:52:9e:1c:1e:a0:b5:43:6f:
a3:d3:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:58 2025 by rpki-client