Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: BeU6uQmO4pfoNB3QfvVAuLitHBEPnlclopzyKL+5FY8=
Subject key identifier: 43:C3:57:40:0E:99:F7:F3:45:56:44:2D:78:22:2D:BE:59:8D:20:6E
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 0198D5F1A0D4F71B16B11B23B135E7A8DE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 01C9
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: ISYD0TkF5HjscBS5JAoNQ0JIa4MR1gSxwHZwjdDMu1w=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a0:d4:f7:1b:16:b1:1b:23:b1:35:e7:a8:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=43c357400e99f7f34556442d78222dbe598d206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:70:83:eb:ae:a3:eb:2a:56:0a:c8:9c:40:
34:6d:78:02:e6:f1:43:cf:bb:f8:3c:60:ef:ac:10:
66:b1:78:69:b1:bb:ad:0a:a7:68:de:0d:9e:2a:ec:
3a:5e:17:c0:a8:6c:af:44:ce:68:67:6a:0e:e3:ce:
17:61:74:81:36:a8:df:f4:64:5b:35:91:de:78:d0:
6d:46:bb:35:f6:35:fa:9e:42:6a:0f:ee:4b:7d:64:
ed:c6:61:fa:3f:d0:7b:36:d9:c8:35:0a:74:68:7a:
d5:77:38:9f:3d:9b:10:27:53:4f:54:ce:03:4c:e4:
72:9b:43:6c:ed:3d:59:8e:b2:7e:d8:ad:fc:5f:d8:
1a:b5:12:2a:fa:26:b1:5f:4e:fc:59:5f:5f:27:12:
4b:e0:89:0b:c6:f3:68:36:33:9d:e1:22:22:ca:14:
32:fe:8d:4f:a4:46:1e:89:38:11:d9:60:83:a6:04:
77:76:bd:90:cc:35:3e:fd:51:16:97:d6:d3:16:5d:
ab:27:0a:32:6e:f1:1c:3b:9e:80:c9:bc:ff:d0:b3:
8e:75:c6:ad:df:58:a3:f0:a6:9c:93:ff:b4:12:49:
a6:89:57:70:99:0b:2b:44:0b:a2:63:d7:77:3b:9b:
43:8d:a0:23:18:88:35:f4:79:06:47:f1:02:d3:66:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:57:40:0E:99:F7:F3:45:56:44:2D:78:22:2D:BE:59:8D:20:6E
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:64:74:bb:63:36:2f:cd:55:f5:63:18:4f:4f:ea:76:14:
f8:40:f5:fc:44:dd:23:b6:af:5a:31:63:a6:41:7d:34:9d:ff:
da:2f:04:06:f6:6d:bf:0b:c5:c9:06:a4:f2:76:a2:0f:c3:84:
6e:7c:b5:65:de:39:7a:4f:89:27:93:aa:b3:19:9e:5c:fc:68:
12:71:1d:36:f1:e1:f9:ac:b1:3e:a7:0c:93:3c:ee:cc:7f:66:
0c:02:18:4f:a2:5e:e2:61:3e:d0:a6:0a:79:53:61:fe:ab:52:
24:51:e6:36:eb:a0:c6:1e:ed:dc:c1:3d:c3:f1:0c:c1:a7:5f:
5d:c2:1b:4c:2f:dd:e0:d1:b8:a6:26:6a:e3:8a:70:1b:65:8b:
bd:c2:58:a3:a6:a0:c2:5d:6f:03:70:d3:b1:8f:a8:27:8e:40:
b4:3d:40:4c:59:d1:6f:df:31:0d:c4:a7:e7:9b:f4:f6:72:0f:
27:c0:06:18:8f:fe:99:3a:6c:b8:aa:4f:ca:f3:de:fd:3e:8e:
63:e4:0c:4e:4a:b6:a0:ff:2a:ed:47:57:2f:dc:a0:a1:4b:c5:
fa:31:63:1e:ba:e3:39:a8:e2:c5:1e:d9:af:3e:a1:1c:f9:e7:
78:1a:6e:96:f0:26:f6:f1:d1:3f:ed:c3:01:12:9e:7c:88:e2:
83:09:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:55 2025 by rpki-client