Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: LBufoXHWIHdzA/fmNBvu3xd2qk7JmftELaExyPyfSt8=
Subject key identifier: 4B:73:34:8A:30:4A:EF:D5:52:2F:27:0E:48:16:DA:25:BD:DF:AC:B8
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 0198D54E915E0C45F7CD44A132E3537D3617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 0232
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: vkSpvCnD5hvsXUgMDkLWRMxjxosZjpXJAG3WK5S1lkE=)
2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:91:5e:0c:45:f7:cd:44:a1:32:e3:53:7d:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=4b73348a304aefd5522f270e4816da25bddfacb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:1c:84:b5:9c:ae:dd:ab:9d:a0:3f:d9:1f:
d7:eb:47:51:85:cc:3c:14:f4:f1:03:4d:83:18:54:
cd:f6:b8:0e:dd:9b:8f:f7:c9:55:44:e9:bc:67:b4:
de:fc:84:f6:8b:4e:82:aa:10:2f:e8:e1:a2:85:de:
23:d1:38:3b:62:43:b8:a6:71:0b:fe:a5:fa:cd:4e:
11:96:09:9f:1c:94:2f:b0:ad:60:9f:de:e9:af:fa:
96:2e:63:2a:67:80:6e:8f:28:d1:e7:47:98:5d:93:
33:7b:a0:87:fa:c3:56:91:34:31:e2:06:60:0e:be:
bd:9b:10:c1:94:a3:73:14:bb:99:bb:30:c1:16:83:
e0:b9:57:45:37:f0:3b:88:a9:b2:b0:c2:71:c2:b6:
fa:8a:ff:76:c3:b4:9e:5f:da:cb:4a:e7:65:97:4c:
c1:74:9d:4c:54:e6:03:00:5a:52:a9:c3:67:a7:e4:
53:88:f9:c7:d7:e7:b0:c9:7a:1c:ce:85:7d:9e:85:
ef:f5:a3:bb:20:90:f0:9d:9f:55:ea:fb:81:5b:bc:
43:c9:6c:a4:4c:3f:ae:a8:6b:2f:87:d4:3b:ef:e0:
be:a4:69:a8:73:6b:94:1c:b7:01:f8:97:2c:28:5c:
32:19:dd:39:c2:55:a8:b9:c9:7f:bd:50:47:cc:bf:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:34:8A:30:4A:EF:D5:52:2F:27:0E:48:16:DA:25:BD:DF:AC:B8
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:6e:96:9b:19:04:3f:50:1a:6b:23:f8:0f:7e:c9:63:08:
99:e7:d8:3f:5b:36:87:43:c4:c6:df:dc:83:1c:f8:08:42:fe:
d8:9c:1e:24:43:90:15:09:6b:86:d1:5a:8f:fd:5f:b6:4d:f4:
bf:cf:85:36:30:62:27:0c:cb:61:3b:d1:fa:f5:0f:b7:57:c0:
23:f9:7d:ac:c0:dd:98:f9:b5:cb:e1:90:2f:75:ff:ca:a3:0f:
c9:0f:0f:e4:76:80:bc:b6:37:7d:00:46:6e:13:48:e1:f6:bb:
26:bf:b2:a5:9a:dd:0b:5e:3b:15:8f:ae:33:aa:35:7e:48:ac:
74:30:81:ea:1b:9d:ad:05:88:5d:0d:0b:d8:13:1c:7d:1e:f9:
fa:2c:40:dd:b6:18:51:15:c5:43:be:b7:c4:a5:bb:c6:33:2c:
b7:a0:66:dd:26:fa:e4:21:dc:b0:4a:62:79:8e:68:bd:26:5a:
98:c8:ca:3a:17:e1:0a:a8:bb:94:89:bf:bb:5f:fb:64:37:b2:
aa:0e:82:d5:d7:3a:c4:a7:31:49:cb:b7:34:a4:b8:3e:8f:2d:
c2:cb:da:dc:62:57:63:76:9a:ab:0b:69:c7:dc:70:f0:8d:46:
da:1b:47:1d:7c:69:f9:f7:c0:4e:56:0d:4d:11:72:6a:cc:1c:
a7:cf:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:54 2025 by rpki-client