Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: GpIGM8+4jt4HNS8MuMREeOJloB+eMD05IKODBucqmAc=
Subject key identifier: 8B:8C:50:60:A2:4D:3C:B7:0C:91:19:65:2D:D8:9E:0D:08:86:CA:A2
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 0199FC8F40CB16D56CD43FEC9A03D2E7560A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 063A
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: z6z0zM5BT83yJ2IIgjBe+DriVWpHPLGvgjws3sEhiZQ=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:40:cb:16:d5:6c:d4:3f:ec:9a:03:d2:e7:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=8b8c5060a24d3cb70c9119652dd89e0d0886caa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:1c:2b:4f:b4:1d:29:6a:fb:3f:bd:ce:d1:
a9:48:f8:88:05:2b:ec:e6:28:a4:7c:fc:c2:f8:cb:
3f:4f:d2:75:77:a5:94:d7:d9:0c:42:94:81:ab:80:
1f:03:15:93:d2:d6:00:ea:f5:7b:3f:8b:9c:29:28:
3d:7a:64:09:c0:3c:4b:12:89:a3:4a:b4:92:49:25:
0c:a8:93:89:2b:e6:db:72:66:ab:50:df:0e:6d:fb:
78:c6:dd:a9:4c:ef:3b:48:20:22:12:2f:eb:3f:b2:
67:bc:41:9b:6f:72:8b:16:d9:9d:5a:a2:1b:a3:75:
d5:6d:54:d1:34:ce:4a:3d:4c:40:97:34:30:9e:26:
8b:09:aa:ff:e3:cb:c7:b4:4d:f6:16:fe:3f:2c:67:
7b:ef:9c:80:d4:3a:05:56:0b:69:7e:98:7a:b4:82:
29:3f:2f:c7:5a:13:7c:31:56:14:d3:7e:ca:e3:41:
a0:ff:40:df:b8:c1:c5:24:df:34:a0:e8:e4:d8:35:
e2:04:a8:bd:b3:e5:54:84:a1:39:27:81:f1:85:51:
56:59:b2:35:9d:ed:4b:e4:fd:00:7c:0a:77:f3:fa:
1b:8c:97:c8:f8:77:2c:6d:1c:f0:72:80:4f:19:8e:
3c:2f:fb:4c:66:66:db:0b:4e:57:7a:44:6b:5a:a6:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8C:50:60:A2:4D:3C:B7:0C:91:19:65:2D:D8:9E:0D:08:86:CA:A2
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f2:02:94:6a:f0:04:45:9a:7b:73:a6:7b:bb:41:42:09:57:
27:5d:92:4c:f1:6f:7d:70:b6:d0:28:51:af:52:53:41:88:b3:
2f:2b:21:c4:5e:ea:0d:2c:a4:34:42:4e:84:71:d8:82:8b:1a:
4b:0c:6f:cb:bd:31:bd:67:b5:e3:c6:bf:3b:13:92:cf:9a:4d:
c4:92:d3:4f:4c:76:95:eb:c6:78:16:67:3d:f5:57:95:53:67:
01:3d:f6:08:7a:da:91:eb:25:4e:9a:29:7e:f4:03:92:08:49:
4c:18:f5:b4:77:d9:16:61:77:72:62:6c:e7:15:53:f0:04:c9:
7d:87:dd:fc:26:8b:81:ea:11:c3:1f:20:43:7d:c6:fc:8f:93:
3e:46:96:83:55:c0:8f:48:e9:8b:06:08:b5:58:28:a5:3c:b8:
28:a1:2f:dd:26:8c:d7:2e:20:78:56:45:e1:90:ae:f6:a5:7b:
d7:ea:0c:51:77:57:5d:55:40:68:00:39:05:f2:e7:e0:5e:1d:
c2:de:d8:ac:1b:6d:1e:1a:6f:8d:ba:62:9f:5f:0f:52:35:ea:
f8:8f:3f:89:25:10:df:3f:1c:73:cd:ad:12:51:86:f4:bc:93:
90:e3:e5:a1:d4:3e:2d:dc:59:94:8b:f9:34:3c:31:13:28:6a:
d9:d9:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:27 2025 by rpki-client