Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 58MfjvDa5eTjUHr1FAKxYLlTnQ9bpxQ+1XxJKTmqCLI=
Subject key identifier: 50:19:E5:98:36:41:88:7E:26:F7:56:59:A6:07:9E:B4:DC:A9:E3:AB
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 0199FBEBBE18DB8E471A126B0B5E5283FAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 0617
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: mct2Jnuurc7i4WXyyf+dTt1MM/H3BX8i9Uoqmi+KYn0=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:be:18:db:8e:47:1a:12:6b:0b:5e:52:83:fa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=5019e5983641887e26f75659a6079eb4dca9e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:a3:08:4d:32:0a:b8:34:18:00:72:25:3a:
97:70:a2:3a:f9:08:16:93:94:48:70:88:1a:b3:97:
54:6e:02:0d:44:69:20:c7:d6:9e:ea:c6:44:29:cd:
62:36:a1:a1:5d:1f:a5:bb:3f:a6:3e:fc:a6:78:ce:
1a:b2:d9:0c:9e:6b:21:dc:70:14:cd:ad:72:b6:e8:
06:dc:69:ea:e2:c3:46:e8:d0:a5:8d:55:23:43:74:
58:b2:18:f2:f4:10:c5:fd:b3:41:46:06:39:a4:4d:
38:c3:4c:38:58:78:e9:30:ba:f8:dc:44:8c:8e:e0:
7a:9e:f7:61:b3:f9:ac:1b:55:2f:c9:e9:8b:3d:4b:
54:e2:34:ac:12:30:63:6e:a5:68:a3:db:21:89:de:
43:bb:b3:52:f2:6b:ad:24:0f:dd:07:b4:ed:fd:b8:
82:4b:6d:91:92:9e:cd:78:cd:73:d2:32:1f:05:2e:
1c:57:8c:8e:4b:58:54:da:59:6c:f6:78:42:48:dc:
b8:c4:8b:87:92:3b:90:59:8f:4b:ed:21:5f:ff:50:
03:a1:f7:ba:28:78:74:69:d6:6a:2a:82:a1:bc:28:
9a:48:23:56:84:b3:7a:36:2d:8f:7d:05:70:e2:68:
b8:73:58:2f:60:52:42:a9:c0:e1:81:b0:1d:17:60:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:E5:98:36:41:88:7E:26:F7:56:59:A6:07:9E:B4:DC:A9:E3:AB
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:39:fe:45:30:b1:e9:26:47:45:a1:88:ec:63:43:f5:02:15:
9b:ce:67:2e:ac:07:2c:24:7c:b6:4b:92:49:8d:0d:82:b7:96:
93:2e:ef:cf:3e:2c:87:0b:ec:a3:95:90:b9:9a:39:5b:b4:2e:
06:85:30:8a:71:86:83:c9:36:88:12:dd:b8:c3:92:4a:59:31:
99:c8:4f:70:aa:6d:d6:92:4e:34:cb:d6:7e:64:e4:57:71:ce:
76:71:61:f5:c5:bf:6d:5d:39:ee:bb:28:26:8f:11:65:69:cc:
4e:e0:7e:c1:15:cb:bd:0b:75:ec:23:4c:38:0a:9b:4e:08:27:
5c:60:31:74:2d:3c:0e:22:17:b6:db:10:cd:ca:53:fe:7a:0e:
31:58:4b:b3:b0:8a:e1:64:be:d4:18:1a:46:35:f7:59:83:22:
83:b9:47:52:31:23:fa:4e:b2:72:4d:d3:0f:cf:fc:18:33:24:
ba:9b:42:34:26:7a:6e:69:fb:67:c2:a4:66:29:2f:50:a1:1e:
80:65:5b:55:fd:fe:cf:40:cb:f0:8b:62:8b:64:a4:66:00:c8:
8c:c3:83:e0:32:82:c7:1a:71:37:a2:4e:95:59:9a:e5:4e:cb:
e7:22:f5:8b:ab:95:67:65:d2:a6:c1:46:08:c9:56:5a:37:b9:
aa:ba:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:56 2025 by rpki-client