Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: MzOdRRTwO1cr+W7B8mo8fKMNfZ75+Hog+vL7zBvJIL0=
Subject key identifier: 49:90:4F:2A:A4:B0:4D:67:EE:2E:DD:28:B8:29:11:B3:35:E0:D6:69
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 019873067F89A80F13EC57023DCE0CAD3B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 0F40
Signing time: Mon 04 Aug 2025 03:01:02 +0000
Manifest this update: Mon 04 Aug 2025 03:01:02 +0000
Manifest next update: Tue 05 Aug 2025 03:01:02 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: g2Eu5urOvE8DoAAsAq6MEx2Z4ywieOQTwrDHB2xmEXk=)
2: pGBMbGUVmfmMQKR1-BVF--sKK7U.roa (hash: ayj/a/EtllFNMGD1HzcA6KglHzS5bxHd+NVb8RRWcAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:7f:89:a8:0f:13:ec:57:02:3d:ce:0c:ad:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Aug 4 03:01:02 2025 GMT
Not After : Aug 5 03:01:02 2025 GMT
Subject: CN=49904f2aa4b04d67ee2edd28b82911b335e0d669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:17:97:2e:c2:af:24:a6:c1:cd:a2:d7:cd:
49:7c:9b:29:2d:17:0b:32:61:24:2b:fe:0c:b6:e0:
b6:42:f2:67:9f:0b:fc:9b:83:cc:23:d9:82:eb:06:
0b:97:ed:da:a0:60:3c:6b:ff:9e:e2:5e:a4:02:39:
58:81:f2:6b:1e:f9:c2:e7:6f:67:52:1c:46:21:1c:
f8:6d:34:74:2e:a7:7f:12:ac:4b:e8:62:e6:bf:59:
f3:19:60:b6:85:62:7e:42:64:a6:88:bd:9b:91:73:
b2:e6:0a:b9:bb:da:ee:d6:00:ab:6c:33:c6:eb:de:
40:c1:27:4c:57:e2:04:96:6a:8d:b5:95:ff:31:a2:
5c:35:e5:e0:19:0e:a6:87:2c:97:21:5d:0d:56:b1:
d2:a4:ba:85:18:3c:57:b0:4f:d8:c5:e6:ec:21:5d:
ed:be:27:cd:ca:b0:2f:d6:56:08:42:a4:e1:98:06:
97:a1:8b:f4:ae:53:23:f5:0a:9c:e6:91:df:6f:b8:
f6:0b:f7:74:d2:c9:46:65:d9:d7:73:1b:dd:63:e5:
ba:2c:24:d1:9c:22:86:1d:36:08:2e:ae:96:df:9f:
d6:a0:14:2c:18:76:9a:0a:a2:8d:50:21:51:73:13:
89:78:33:7a:4e:be:58:83:03:07:aa:99:3a:42:5d:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:4F:2A:A4:B0:4D:67:EE:2E:DD:28:B8:29:11:B3:35:E0:D6:69
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8e:16:22:25:c1:41:05:90:fc:5e:72:cb:6f:fa:28:e6:8a:
de:8a:72:cb:c6:95:de:9b:a3:cf:fe:9d:fa:90:98:cb:ed:fd:
9e:09:fb:41:2f:b5:ee:7c:be:a1:a4:5d:aa:2c:92:fe:10:30:
c6:36:0b:ac:bc:60:1a:5f:f1:c3:0e:d7:50:89:c1:18:02:ac:
f2:d4:a0:66:3b:7c:0e:4b:a5:b6:f2:8a:e7:fb:0a:b2:5e:53:
77:35:f6:4e:71:3b:17:1b:e0:0f:79:c2:a1:d6:5f:e1:cc:65:
3a:5e:53:e9:60:cd:11:11:49:d6:6e:1d:72:e4:55:b1:17:5a:
17:37:8c:50:8a:05:a2:83:7d:eb:6e:25:3e:6b:1e:60:20:a6:
0a:70:1e:b3:cb:32:6e:fa:af:e2:8a:d3:ed:45:7d:92:d5:37:
72:bc:72:2c:9d:be:e7:df:f9:43:9a:f3:2e:4f:03:5f:17:56:
a6:b6:26:25:31:b2:6d:d2:78:b1:cb:0f:db:c2:cd:bf:c2:a1:
f1:72:ff:c4:0f:98:b4:77:ee:91:b1:90:2c:c3:9c:ba:eb:9b:
b9:4a:e5:e4:ca:44:58:f0:3c:1d:f2:a1:f2:e8:e6:18:bc:fc:
e5:a5:b5:db:89:5b:b0:48:58:34:cc:8e:39:ed:f1:87:24:05:
1c:a6:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:09 2025 by rpki-client