Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: xCmU1E4tWSxhVk/vOBxvAokOOd1XMs3klth77XT8SzI=
Subject key identifier: 3E:8A:44:A4:FD:DE:61:97:73:DC:8B:78:C1:56:1F:71:99:77:C3:44
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 0197B6A18384F878A9AA1EEF31F974CD7D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 04EA
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: QMgQ6OxytihwF3klU6S0jJVlZkE+Hfb6lKvQTWpT0ig=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:83:84:f8:78:a9:aa:1e:ef:31:f9:74:cd:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=3e8a44a4fdde619773dc8b78c1561f719977c344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:64:8a:11:4d:86:22:b5:5b:41:0a:b8:7d:
4b:81:db:6d:63:84:e2:2e:03:f8:8d:bf:3b:f4:d1:
66:fc:de:6d:ac:a4:04:96:2b:43:f7:df:15:64:fc:
69:7b:b8:56:f3:df:a6:85:68:a1:7c:52:16:eb:c7:
a0:4c:7d:f7:16:18:fb:0b:79:e1:d6:bb:46:73:ad:
b2:3b:ce:64:bb:c4:57:b8:43:b7:b6:88:a5:8c:12:
08:b5:98:a9:f7:d5:63:c5:56:b9:90:73:3a:42:96:
4c:92:ff:7a:23:c5:4d:0b:90:4f:67:a4:1a:48:14:
52:8f:12:f5:3b:41:dd:20:41:b7:65:6c:0b:a3:8f:
a7:d2:91:b7:e2:9b:53:ae:3e:1f:c5:c2:12:b7:17:
ed:d0:27:4d:1b:c7:5b:35:5d:3a:fb:65:77:d1:5e:
e0:b6:d4:59:29:d0:00:89:82:7d:96:c9:b4:b3:a8:
99:c2:8d:77:34:e8:89:61:98:9a:ec:63:61:2c:10:
57:d9:2e:71:1f:3e:36:60:53:fe:54:55:c7:b4:fe:
ba:59:ce:68:7f:99:69:1f:f3:ac:d9:20:44:31:0d:
49:a0:ed:4c:7b:d0:d0:93:3c:19:1c:67:6b:0b:60:
7f:e5:e0:47:74:09:dd:cc:23:39:bd:0e:f5:34:b3:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:44:A4:FD:DE:61:97:73:DC:8B:78:C1:56:1F:71:99:77:C3:44
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:a1:c1:e2:93:f3:49:e7:5d:b9:56:32:63:19:95:87:a2:
07:c7:bc:66:9c:b0:62:ba:b0:36:c1:46:dd:8f:6a:3d:d2:71:
77:38:13:40:e6:46:30:74:60:71:c8:a6:75:3d:08:f9:72:35:
d1:6f:ac:18:94:0e:49:52:a9:66:38:1c:6a:bd:94:bb:0b:5a:
6f:74:36:10:8c:52:8e:2c:4d:d3:30:23:3b:ae:e5:3d:3d:bf:
06:d6:77:06:58:ef:a2:72:f1:7f:75:17:33:fc:e3:32:ee:cd:
c9:b6:3e:db:45:96:aa:6e:a3:5e:fb:72:c6:a8:eb:35:d5:64:
31:d6:c2:91:73:8e:57:12:fa:7a:62:d6:8f:a6:94:c0:32:61:
2f:2a:e8:1f:20:d9:20:97:49:5e:61:c0:3d:04:1c:e6:b2:71:
2e:de:ff:85:f5:52:fa:37:57:77:9e:6e:8b:1e:31:92:c3:a9:
7d:99:0b:1c:18:67:ce:76:0b:91:a2:2c:1c:89:23:64:ec:76:
8e:e7:fd:52:cf:85:0b:c5:e5:1b:69:fa:17:ac:5c:0a:fa:69:
24:e9:df:a0:67:5e:8d:7e:cd:8c:4e:98:87:ee:53:37:d6:b5:
f7:3a:75:1e:97:e0:d5:1e:71:76:25:52:ed:ff:7c:48:fd:22:
4d:c5:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:52 2025 by rpki-client