Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: V9pKBmASDKa2XuRlR1s7p7qCILIzK/PGq5S6WWbADV8=
Subject key identifier: 33:73:0A:E6:D1:47:9E:C5:EB:22:5E:01:7F:2F:BD:4E:D5:96:7E:D8
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 019A0523BD276484923DD1CA2A965F6B7BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 0266
Signing time: Tue 21 Oct 2025 05:00:19 +0000
Manifest this update: Tue 21 Oct 2025 05:00:19 +0000
Manifest next update: Wed 22 Oct 2025 05:00:19 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: BOjf+X/y/AQ7mOAxZXU1JRMpOq6v5jW4MYOTKIvclzQ=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:bd:27:64:84:92:3d:d1:ca:2a:96:5f:6b:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Oct 21 05:00:19 2025 GMT
Not After : Oct 22 05:00:19 2025 GMT
Subject: CN=33730ae6d1479ec5eb225e017f2fbd4ed5967ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:b9:b7:01:a8:18:f2:9a:57:89:e5:08:d0:
e6:77:fc:2e:e4:8f:bb:d9:aa:26:70:a0:7f:fb:74:
a2:d3:63:1b:92:1b:8a:f4:08:fd:bd:8d:ee:7a:39:
1e:d3:de:07:da:fa:d5:30:05:d4:59:e2:f9:5c:1d:
75:c0:61:74:54:e7:11:23:f4:2b:a0:ab:ce:51:cd:
c3:96:b7:1c:15:31:be:d9:54:bf:a6:17:18:82:e1:
93:04:de:ff:75:3c:1e:0b:43:f1:00:1d:34:6c:30:
f8:87:10:a8:fe:b4:b6:14:4b:a6:bd:46:2e:2e:ba:
2f:25:0d:28:68:45:50:41:4e:c9:f1:02:28:48:67:
5d:27:85:6f:70:d6:16:57:85:99:63:57:4e:e1:86:
f5:1c:4d:fe:d8:77:6d:90:6a:3b:73:54:25:48:4a:
7e:63:66:da:10:3f:e7:9f:ce:dd:60:4f:d2:ac:fa:
2d:76:9e:2b:5c:97:b5:32:6d:f5:8a:97:c0:77:20:
ca:5b:27:da:5f:06:6f:d0:ca:67:df:35:84:88:6e:
5e:bb:11:05:fe:77:3e:bd:e1:49:c1:90:a1:55:14:
a4:5e:5b:6d:0d:7a:aa:54:48:98:83:a4:e5:be:d2:
54:49:30:f3:b4:e5:4e:81:b2:0b:a6:f2:91:56:ff:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:73:0A:E6:D1:47:9E:C5:EB:22:5E:01:7F:2F:BD:4E:D5:96:7E:D8
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:b7:fb:4f:e6:7a:ce:3a:7c:21:45:3e:3c:45:14:af:43:
71:5c:94:07:fe:cf:cd:72:ae:c8:f2:8b:e4:2d:51:44:03:bc:
e7:31:d5:ca:6b:de:1d:7a:00:c7:be:01:b6:19:04:f7:6a:23:
7c:ff:46:58:ae:35:a1:96:df:81:d0:06:fe:44:03:03:71:ca:
72:b0:c1:7a:7a:b6:61:33:a0:f1:70:69:04:f7:48:95:ea:7c:
6e:54:4b:d6:85:ad:2b:9a:46:12:1f:c3:cc:15:d8:9d:e6:67:
92:0b:59:13:81:dc:cb:55:36:c5:3c:9a:e6:69:a6:69:5a:a2:
0e:be:0e:35:c3:62:3d:d0:03:7f:e3:cb:39:82:7d:39:05:3f:
3b:74:38:fa:36:66:bb:13:eb:cb:9c:3e:42:59:a2:47:2a:5e:
be:9c:82:59:c1:52:b3:99:6f:63:e7:c5:6c:a5:f6:23:df:25:
0c:24:af:7b:99:97:a1:c7:7d:4c:31:92:b9:ad:35:28:52:02:
95:2d:ba:2f:e2:0f:ce:ed:4f:b3:a0:50:eb:d4:3d:d2:7a:be:
f2:27:bf:3e:db:fa:3d:f5:d6:07:67:76:1f:c5:5d:90:ae:b3:
56:13:2c:e9:48:0b:5d:3d:59:71:f3:6c:31:65:27:a7:e0:b1:
af:be:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 15:46:39 2025 by rpki-client