Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: ms6eQ39X8zm3XN5GZJi7iVaGZmf6w4yp9InA01CLJ1I=
Subject key identifier: 0B:2F:16:C2:1E:58:57:B6:96:63:5F:4D:8F:B8:E1:4C:74:82:81:D7
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 0198D697E791B00EBA56E14768C0017FE702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:15 +0000
Manifest this update: Sat 23 Aug 2025 11:02:15 +0000
Manifest next update: Sun 24 Aug 2025 11:02:15 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: socf6jhSNlSvFBX2WS5heWGC15JCN+BkutwEd3j/pp4=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:e7:91:b0:0e:ba:56:e1:47:68:c0:01:7f:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Aug 23 11:02:15 2025 GMT
Not After : Aug 24 11:02:15 2025 GMT
Subject: CN=0b2f16c21e5857b696635f4d8fb8e14c748281d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:f8:c0:40:1b:53:e4:a8:3b:34:b6:21:a4:
68:28:b7:20:13:5d:d4:99:2e:26:4b:70:ad:7a:cb:
30:03:81:f3:0e:bc:a0:0a:c6:45:66:9b:4e:0b:20:
f2:35:79:74:0f:ff:ff:bf:c4:00:4d:84:d2:e8:6d:
8e:01:57:58:8b:1b:00:3c:9e:9f:71:4e:17:04:8f:
76:83:b9:0e:90:f5:0e:8a:48:8a:ee:a7:33:58:60:
3b:f5:46:1d:0c:f5:c5:32:e8:22:e0:3e:17:32:5f:
5b:b7:5c:d3:d1:c2:fa:7e:68:53:f8:10:31:5c:8c:
2d:3c:bd:7d:60:a7:65:83:29:8a:f0:c4:65:0a:cb:
49:7f:36:1f:a7:7a:02:8e:85:2c:88:88:78:91:40:
04:c3:ff:fb:63:3f:7d:2a:c1:11:94:cc:6e:e8:9d:
f9:e2:2e:6a:a3:8f:13:24:27:06:24:52:8f:a2:c0:
41:78:36:07:d4:0b:19:a2:44:5c:f4:6d:36:41:94:
bf:db:28:bc:10:89:d9:17:55:58:db:19:7c:91:cc:
e2:6a:58:35:e7:61:f2:d3:3c:a1:f7:12:ca:12:e0:
b6:12:b4:41:db:56:7b:87:fc:5c:03:71:ba:8f:05:
00:e6:f2:53:ac:57:ae:01:60:90:3c:c0:39:07:28:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:16:C2:1E:58:57:B6:96:63:5F:4D:8F:B8:E1:4C:74:82:81:D7
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:00:99:c9:a4:2e:8a:c3:85:0f:03:86:d5:54:42:ee:47:7e:
de:ad:4c:1c:9c:a1:97:e6:ba:bd:bd:e7:71:3b:df:ee:9c:7c:
58:4b:f7:1b:56:c4:92:3a:70:39:26:74:27:f7:5a:c8:14:0f:
88:51:7e:85:1b:9f:24:0d:5d:55:81:8d:cd:92:43:de:7d:13:
38:10:48:52:bd:60:f6:3b:44:77:dc:67:e9:bc:6b:98:02:6e:
ab:ab:4d:53:7a:1f:64:9e:e4:59:5d:99:1e:c5:a0:30:d7:76:
eb:28:47:04:ff:d0:e1:13:94:a0:a9:1e:77:c5:24:a2:69:af:
9d:bf:88:22:56:e9:d5:0f:2c:3f:70:e2:13:67:95:3b:56:0c:
3c:84:80:75:8f:3e:3b:de:24:ee:a6:8a:5d:24:de:b2:60:c8:
7b:aa:65:91:15:0b:33:85:28:25:d0:4f:e8:9d:e6:c4:4d:69:
c0:2c:ff:94:1d:02:c5:14:b4:27:94:13:fd:c0:d2:75:ce:06:
0d:b3:07:89:0b:af:69:25:8b:b5:ef:f8:bc:3c:e2:8a:36:9b:
e6:ca:30:17:00:53:4f:60:66:9c:d4:67:17:7c:e5:54:22:aa:
ef:cf:fe:c4:40:b9:4e:3a:98:3e:6d:4c:1b:fe:41:5a:d3:fc:
b4:f3:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:18 2025 by rpki-client