Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: X8iVxtnkmWOLhEKkX+FNlEORbfZbD7DFR419V8KdVBo=
Subject key identifier: 8E:FE:80:9E:19:72:CF:E2:A9:67:55:52:83:26:D1:80:18:1F:C7:2E
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019873E37001BF11898733AC255C482BBF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 054C
Signing time: Mon 04 Aug 2025 07:02:21 +0000
Manifest this update: Mon 04 Aug 2025 07:02:21 +0000
Manifest next update: Tue 05 Aug 2025 07:02:21 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: ebM1RX69G6V0Uj3nF6YZJPLyovebJUTjhn55jV1dxFo=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:70:01:bf:11:89:87:33:ac:25:5c:48:2b:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Aug 4 07:02:21 2025 GMT
Not After : Aug 5 07:02:21 2025 GMT
Subject: CN=8efe809e1972cfe2a96755528326d180181fc72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:35:35:a2:7e:90:7e:37:76:fa:92:68:62:
97:3a:c9:0f:7b:4c:78:85:8c:f0:9a:46:af:13:7c:
98:2c:ac:dd:d6:8c:92:57:09:db:85:f3:ec:9f:35:
b2:27:23:54:47:f0:b8:1b:34:e3:39:05:21:5a:56:
1b:5f:fc:44:a9:af:fc:d6:31:6a:da:47:27:83:06:
33:19:5e:56:02:5a:39:81:d3:a0:86:bb:23:25:6b:
89:08:6a:73:6c:86:c3:09:6b:41:d7:f2:a3:32:86:
dc:2a:14:ad:ac:2f:f1:5e:ae:e2:73:87:ad:06:4b:
99:6b:78:0e:e2:50:e7:0b:01:24:fe:63:ce:28:b9:
68:25:83:a4:24:c7:3a:5d:c4:f5:6f:9b:38:e7:2e:
16:3d:01:0a:dc:05:8e:c6:7d:e2:53:8a:77:f1:f6:
6a:43:56:a6:f0:4d:c4:fc:9f:5e:42:0f:57:d6:ce:
ac:6d:4d:2a:16:2a:86:ac:c7:a7:da:71:7b:51:26:
73:d3:d1:70:b1:9c:b9:42:39:3a:fc:9f:95:9c:b5:
7d:96:f9:9e:7a:b9:89:06:88:cb:b1:23:7f:4e:ed:
ad:10:4b:95:83:ea:d8:e8:71:80:7b:07:16:f9:b6:
55:a6:b2:06:08:ba:f4:c3:51:7a:84:89:2b:4e:c8:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:80:9E:19:72:CF:E2:A9:67:55:52:83:26:D1:80:18:1F:C7:2E
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:e2:b0:47:68:a1:99:4b:86:ac:c5:31:77:6d:bf:05:a8:
e7:ff:a0:ee:ed:59:58:a2:e0:92:0c:29:34:65:35:2a:b7:3a:
1c:49:a7:13:ae:7a:d0:37:be:35:46:1c:96:73:6c:8a:4d:7d:
d4:30:07:bd:3f:10:3c:87:e1:4b:62:f1:4c:89:a8:0b:c7:02:
b6:21:1a:c1:12:36:19:15:f0:05:dc:57:71:6c:25:a9:29:11:
2d:c5:02:4d:9c:a6:e4:0f:4e:c6:7c:0e:70:1f:7d:e5:b7:29:
74:5a:21:92:5b:d8:83:70:89:2e:00:1d:cc:d5:2f:7c:bc:92:
56:98:8e:0b:5b:dd:e3:f2:7c:93:01:ef:10:1b:cf:64:86:6e:
b3:88:70:3a:f5:91:8d:ea:5d:59:78:3a:d5:8f:67:e0:b9:ec:
b0:79:d1:49:b4:20:7b:60:49:af:21:1b:3a:b8:ec:bf:6b:d4:
79:4d:84:5c:2e:ed:b5:4c:ab:2c:e6:a1:c5:59:e8:e7:69:58:
97:85:ed:3c:3c:d9:02:a6:47:1f:aa:69:24:53:26:ac:52:b6:
03:45:b6:fb:ac:35:d6:88:d7:a1:51:3a:8a:1a:0c:52:9c:f0:
00:42:69:f1:22:2e:2f:9a:8b:90:fd:b6:d1:51:5b:6c:e2:50:
a8:82:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:20 2025 by rpki-client