Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: iokk+Jc3qhmwY9PfsRupWOlUxRJZn2O3reqhdi5WfKc=
Subject key identifier: 7C:8C:B2:99:8B:60:55:88:AE:75:C7:CB:6C:B1:8E:FE:81:88:32:20
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 0198733D50413DE2C2AA8A8BBC2AC746C227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 0455
Signing time: Mon 04 Aug 2025 04:00:54 +0000
Manifest this update: Mon 04 Aug 2025 04:00:54 +0000
Manifest next update: Tue 05 Aug 2025 04:00:54 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: lbelJtUlYzmMg4gtPXr6QVsFKbTdG2MAouzC+1reLDk=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:50:41:3d:e2:c2:aa:8a:8b:bc:2a:c7:46:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Aug 4 04:00:54 2025 GMT
Not After : Aug 5 04:00:54 2025 GMT
Subject: CN=7c8cb2998b605588ae75c7cb6cb18efe81883220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:41:69:13:c4:4c:e0:4c:7b:b0:51:59:71:
8d:86:8e:34:c4:29:98:85:c9:69:43:8d:ac:e6:3d:
aa:d4:e5:cb:66:62:b1:79:82:35:15:f3:66:75:3a:
0e:55:7b:70:46:42:32:e7:04:51:69:67:34:f1:0d:
50:0c:37:34:7f:7d:09:77:f8:33:c2:4a:28:fc:ec:
13:ea:f3:b2:cf:45:b1:03:58:0f:fb:bd:78:7e:58:
7b:a0:56:f0:85:90:9e:43:eb:1b:33:26:a8:90:e5:
7b:7d:4e:1b:1e:93:c4:21:1d:6c:7a:d9:fa:71:0c:
d3:23:11:32:00:d3:22:d2:64:c8:4f:f4:5c:14:12:
f3:3d:3a:4a:6e:9b:ad:9f:59:92:2e:de:ee:a2:f5:
ec:18:f1:09:1c:95:8e:97:0e:0f:23:39:86:8f:42:
dc:21:d7:21:3c:cf:e4:20:df:60:5f:5a:1e:19:29:
9d:91:32:93:43:b1:ed:ba:e8:87:50:e0:25:2e:40:
0e:2d:24:e9:61:1f:6f:a7:ca:4c:6f:b9:81:60:dc:
4d:f0:56:45:06:c7:d1:e5:e4:96:3d:5f:67:28:68:
b8:ec:0e:45:9c:ca:90:9b:60:69:99:ce:49:4c:1d:
25:d1:d7:1a:95:91:fa:3e:a8:26:49:c8:83:0c:6f:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:B2:99:8B:60:55:88:AE:75:C7:CB:6C:B1:8E:FE:81:88:32:20
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:fc:5b:6a:04:c5:75:74:70:a1:af:7a:5e:12:62:94:79:
29:1d:3d:08:c5:82:43:69:f4:f1:ed:1f:71:a2:a7:8a:c9:b7:
d1:8b:96:87:10:ea:de:23:04:c2:78:bd:bb:19:9e:ae:9d:84:
b5:31:f6:9e:1d:e2:35:c5:f6:0a:5e:48:fb:0e:93:00:75:31:
b8:dc:e8:3e:63:3a:91:5b:a9:f4:ab:05:de:6b:99:6c:3b:1f:
6a:6a:73:28:cd:b7:fe:df:6b:b2:db:3b:b7:ea:a8:35:a5:10:
94:b9:21:e7:3e:9f:18:67:7c:22:1b:99:3f:3a:b7:77:47:72:
17:ba:a9:73:6c:ea:30:da:55:63:97:b9:6d:dd:49:26:ca:c9:
42:00:18:34:3f:4d:d5:b0:8b:3d:8f:17:b7:62:2f:19:79:03:
d6:61:d6:a2:20:8a:eb:c1:09:e5:b7:ec:b2:9f:4c:5b:a2:db:
16:58:67:a6:cd:09:cc:92:2c:77:65:63:8c:d4:6c:b4:c0:31:
9c:8b:a6:a9:2f:ab:ae:05:cd:e8:1d:69:54:d5:fa:fb:d3:94:
64:26:e4:9b:4e:00:30:ee:8a:92:8d:dd:eb:17:fd:ce:50:b3:
be:83:9a:66:bf:4d:49:cd:b1:b4:94:66:47:25:67:3a:38:98:
d0:fc:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:42 2025 by rpki-client