Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: jXH0xD+XYEA/bEMjded8g38ai9ogxOxVfqJC9ATsVrw=
Subject key identifier: 0B:2E:E9:84:1A:C0:96:67:66:FF:F2:E1:F0:C7:CA:76:0E:91:C0:3B
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 019A0291275C3E61639CE4859C7E80188CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 02CE
Signing time: Mon 20 Oct 2025 17:00:58 +0000
Manifest this update: Mon 20 Oct 2025 17:00:58 +0000
Manifest next update: Tue 21 Oct 2025 17:00:58 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: 9VBj5zhcXrYFvbZk9N0KYw9C3puHpl4v5hcjDI6w9g0=)
2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:27:5c:3e:61:63:9c:e4:85:9c:7e:80:18:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Oct 20 17:00:58 2025 GMT
Not After : Oct 21 17:00:58 2025 GMT
Subject: CN=0b2ee9841ac0966766fff2e1f0c7ca760e91c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:f6:9a:b6:08:93:56:b3:a3:90:be:91:ec:
2c:be:18:2f:c1:d1:c3:89:a4:d6:ec:b5:08:6f:07:
23:d5:8d:a7:ef:63:84:32:1e:b4:73:ba:54:52:81:
b0:99:d9:51:ed:29:ac:c0:ae:f9:f6:15:c8:c6:84:
62:1b:36:3e:83:67:d9:b6:cf:fb:99:f2:aa:f4:df:
37:d0:4b:38:fb:70:49:4c:bb:78:6c:25:3f:08:d6:
69:d1:5e:08:d1:bd:b7:fa:0f:31:e8:17:a6:4b:47:
e5:4c:77:ae:f0:75:18:48:78:37:35:38:7e:65:41:
dc:c8:43:e9:d0:42:92:0d:12:dd:29:62:d3:26:99:
78:26:24:db:31:62:40:01:7a:f4:08:3d:f0:71:fe:
95:67:f5:e4:3d:eb:30:32:a7:50:28:48:e2:50:c1:
02:41:64:b1:df:4d:10:69:61:f7:80:15:dd:5e:4f:
69:51:8f:32:82:6a:e3:fa:5c:96:b1:1b:d7:62:0f:
00:e2:6d:59:db:fa:01:83:fe:15:11:63:b4:a1:c9:
bc:5e:06:00:1e:b7:c5:e0:f7:eb:0d:a1:45:b3:ff:
20:a1:c7:1d:ba:1d:65:85:11:86:43:00:f4:ff:2e:
8b:60:30:6c:d0:98:3b:49:40:6a:58:25:29:9e:ba:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:E9:84:1A:C0:96:67:66:FF:F2:E1:F0:C7:CA:76:0E:91:C0:3B
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:29:b0:bb:73:46:ca:18:33:23:00:47:44:76:7a:5e:7c:
92:4d:f3:f5:ac:a6:fb:f2:bf:bd:86:2a:19:9e:5b:47:ad:ab:
f1:ec:7e:f0:f1:28:e6:62:2f:a9:81:da:52:05:23:b9:65:e5:
38:87:55:42:bd:02:98:00:16:00:81:1f:ba:0d:38:5e:11:dd:
3f:4c:e7:1c:ef:59:fc:88:20:de:49:92:b2:d6:5f:bc:93:dc:
23:c7:ba:13:ec:a2:8a:32:c5:24:36:71:91:86:15:ac:23:85:
43:cd:50:51:54:68:a7:a5:6a:0f:86:89:d1:4d:4c:99:b8:e3:
aa:85:39:82:d7:99:fb:ed:15:7b:10:b0:cd:c4:c8:7b:8f:9d:
a3:ce:77:04:83:4c:52:5a:33:d6:d1:fa:85:31:72:64:32:7a:
1f:a8:a5:f1:f2:93:9f:ce:84:34:a2:fe:d7:96:98:6c:82:30:
0e:47:2f:42:da:9e:7a:7c:50:43:ee:ef:66:5e:e8:38:96:9b:
03:9f:59:63:66:db:bf:d0:d7:15:51:4e:35:6d:03:71:4d:cf:
3f:01:f0:99:a1:5b:af:4f:9f:88:18:b8:fd:05:c6:d9:4c:05:
85:84:58:31:0a:06:c4:3f:8b:f5:99:3e:87:6e:75:32:98:5e:
ba:3c:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:46:56 2025 by rpki-client