Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: tMdIOZDg5o9RS9OVX73BsS/Rx7pBs+Zah3NGqClt8Ww=
Subject key identifier: 88:E6:F9:83:98:DD:19:76:75:2B:6E:7A:A6:A0:C6:DA:EB:11:A0:83
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 0199FAD80118419920CC5F1A97F0CF0A3AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 0640
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: avf0y8wdbr5QC4r8O6o/McB4IF2OBNk9RUVQuCLnY1g=)
2: CNIEoZIziaoslXjxziyj4Mdy2Eo.roa (hash: 4PTTm5j22xd4jPqtcvlATSikSzXljAnxaAWrrtmpJlA=)
3: FlnzfKEWQXvyzPbJunTOYgt_UAw.roa (hash: gO1Tnf/OgaAMr5cFfmPztpDAe1LPXtrDbGch2EErAao=)
4: eSQariLNcOVONXIRBttHL2zmsmA.roa (hash: BSF3F1gyfF9aY0clzhNrKkylzybNRIfIIJkR0Co2kv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:01:18:41:99:20:cc:5f:1a:97:f0:cf:0a:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=88e6f98398dd1976752b6e7aa6a0c6daeb11a083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:1e:f4:6f:3d:bd:86:d9:f3:56:42:6f:bd:
dd:bf:60:cf:bb:1a:f3:e9:f2:05:e3:30:ec:4e:ec:
6a:e4:26:69:23:d4:e3:05:74:7f:fe:02:ed:43:e7:
23:a4:9a:06:cf:db:56:29:45:d5:0e:ee:5a:02:82:
57:27:89:67:bc:08:d5:89:41:d0:e9:8f:ee:26:09:
33:a0:8e:11:05:0d:0c:77:f4:22:a8:58:32:15:c7:
6f:8f:3c:53:15:3e:55:1e:86:c8:38:9d:99:41:13:
36:b2:c1:19:ff:a5:a1:2a:63:ba:5e:bc:b6:aa:f0:
b0:1d:df:c4:c7:c5:4b:33:c4:c5:34:7c:4a:bb:2d:
1f:7a:e5:3d:3a:a8:3d:64:9e:53:23:b0:cd:20:40:
f0:ce:41:84:7b:a3:12:3b:66:ab:88:e2:a2:dc:50:
d6:7f:b6:a0:3c:31:95:48:7f:8a:68:dc:00:d2:56:
ab:5c:9f:ae:a7:0a:ce:09:12:b0:de:1c:f1:01:b3:
5a:88:81:08:79:c9:32:c3:e2:79:ff:52:66:f1:04:
8a:bb:06:9b:82:cc:4b:23:6c:9e:95:9a:9b:b5:3d:
cd:ad:84:2c:ac:bf:84:e2:66:b1:e0:e0:9b:bf:c5:
c6:51:4b:94:d1:39:fa:12:80:62:ff:16:11:41:89:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:F9:83:98:DD:19:76:75:2B:6E:7A:A6:A0:C6:DA:EB:11:A0:83
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:43:de:53:c3:6e:28:c6:4a:83:61:a6:a5:52:c6:12:05:
72:fd:24:ff:b1:f3:a1:df:e4:7d:6f:be:19:0a:07:bf:17:dd:
85:75:0a:7a:0e:69:9f:22:a3:ea:5a:bb:87:73:c7:d7:6f:ca:
29:c3:fe:2b:46:e0:08:6b:11:00:c5:3c:4d:f9:f4:ad:96:c6:
12:4c:d8:88:bc:0f:e3:97:73:8a:63:f4:cf:0e:c5:7d:72:63:
d0:36:5a:b7:34:3a:b6:93:fc:60:34:ae:f9:f5:f9:ed:0a:aa:
82:79:fa:f4:35:a1:8f:80:0e:01:0f:3a:e6:b8:22:4d:26:1c:
87:f8:39:91:40:49:f1:8a:37:73:a8:4f:85:15:82:94:a1:2b:
4d:bb:b8:99:d7:bb:db:e6:5e:c2:7e:75:79:b4:ae:41:8a:e2:
94:46:af:1e:43:9d:f9:2d:49:aa:71:f9:50:31:02:ac:3b:82:
ef:58:2f:56:61:cb:94:b8:07:01:88:79:67:d8:af:44:13:fd:
1f:72:92:3d:be:a7:d5:36:58:f7:fa:15:55:fb:a7:d8:88:c7:
30:51:cd:6f:a3:42:c7:fc:a9:29:96:7a:c6:03:6b:87:33:00:
23:bf:02:60:ea:a5:e8:a7:59:b9:03:32:cd:35:4d:cc:63:9b:
e4:5c:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:09 2025 by rpki-client