Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 8NtmXfjGcDG3236Lhk+JBMKl9AJVzwSSP7QEaOlFBtw=
Subject key identifier: 33:28:54:00:6A:65:E4:16:A6:ED:F9:D6:2B:84:DE:40:6C:31:CE:60
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019A4EF598D00F1892ADC1CB8F36DABE60D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 0642
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: mwyA3Jsh/WrwzyORzfCOLyY3d2elvjTWWaJ9PlZ92Ao=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:98:d0:0f:18:92:ad:c1:cb:8f:36:da:be:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=332854006a65e416a6edf9d62b84de406c31ce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:0b:d6:44:e5:dd:d7:f8:00:76:f0:a6:0d:
ce:f4:f7:1f:ea:c5:c2:85:b4:3d:c0:a3:0b:73:f8:
28:5d:71:a7:f2:9d:13:d0:dc:45:fa:41:d8:49:e4:
eb:de:2b:09:17:d2:85:d5:68:71:ca:99:ee:28:d0:
f7:4d:f5:6c:a7:74:69:8d:55:e8:fd:21:f6:aa:52:
86:07:28:2e:5e:31:ef:43:a8:4b:1c:f3:c5:eb:0b:
93:05:6b:d8:19:01:d7:96:96:98:a2:c2:84:36:52:
a3:1e:74:f1:4e:90:20:32:d8:85:fe:7b:33:49:1f:
69:70:6e:8d:d8:20:35:3a:c6:ae:1b:79:6c:e9:d5:
8b:95:66:10:2d:2f:6b:03:85:42:a7:74:7c:93:bc:
65:54:ab:12:8c:b4:ad:00:bf:24:bd:f6:1e:fd:29:
b1:09:57:9e:13:0e:df:a5:f8:a2:7e:10:51:dd:fe:
f2:c2:a6:7c:1c:f4:da:15:f6:b9:d0:f3:22:59:03:
bb:60:17:4d:5c:6f:00:07:3b:2b:ff:e9:40:02:a6:
49:68:b6:1a:17:74:75:37:b9:ef:35:6a:fb:e1:d4:
39:ea:fe:f3:64:0c:50:a8:83:5d:6a:87:9c:b9:e8:
74:d7:6f:9a:32:0c:0c:be:6c:41:32:5e:5f:53:0e:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:54:00:6A:65:E4:16:A6:ED:F9:D6:2B:84:DE:40:6C:31:CE:60
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:94:c2:54:b1:a3:26:dd:47:ab:8f:df:88:70:47:ad:4e:3b:
11:a0:50:b0:5b:5b:77:7e:fc:1b:8d:ad:20:13:c7:cf:98:9b:
6c:b4:08:76:7f:a8:68:52:ca:6a:e1:8c:a7:a7:16:2f:20:98:
69:1d:0f:63:43:72:ec:d7:cc:d9:35:f0:d8:95:57:87:c5:32:
50:35:ae:3c:b5:0d:11:e5:f6:31:9b:d5:1d:54:76:7b:d9:f6:
69:19:14:68:f8:b8:de:d0:53:dc:6b:78:65:13:aa:6c:e1:e3:
4c:e7:59:62:0b:59:e7:1c:ec:64:5c:53:9e:44:b2:c4:1c:f6:
3d:dc:f1:0f:95:a8:0a:65:70:f5:ea:76:5b:25:aa:bd:8c:b7:
8d:80:08:c3:1c:bb:3a:55:ac:b1:71:8c:d7:fa:a2:bf:ee:89:
99:84:5d:02:ef:76:fa:c7:72:72:b5:05:af:68:29:29:37:f9:
57:a0:1a:a7:59:1c:f9:50:38:c5:f9:fc:ec:1b:ef:58:d5:c9:
d1:d4:12:57:5f:ba:fa:d3:24:4e:34:fb:6c:b1:b1:23:08:ca:
ae:b2:5b:87:9a:2d:08:ae:9b:07:65:ea:ae:54:0c:84:b3:d3:
e5:91:e9:97:65:ad:1f:77:bb:dc:83:e6:2f:1a:51:67:80:86:
f3:84:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:52 2025 by rpki-client