Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: hi1hR6IA1nZjDflAhlEJMo4FR3/0RnHhWGyP9nS9uwU=
Subject key identifier: 15:AB:4A:9F:DB:C4:6E:50:D4:43:7E:D4:07:9F:74:C5:43:E5:BA:66
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019A0035038A0D05E7BF2EC61BFC41226405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 0E98
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: VsIu+PM0va8iryd306PgJZGSXdvHU4qeID/lg2XmxQk=)
2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:03:8a:0d:05:e7:bf:2e:c6:1b:fc:41:22:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=15ab4a9fdbc46e50d4437ed4079f74c543e5ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:0e:21:b1:02:05:c9:65:c8:67:b1:ef:3a:
ba:8e:a7:6d:e3:be:33:dc:81:ed:88:ed:db:c7:62:
e4:2e:82:c3:fb:f9:3f:9f:1a:fc:d1:c4:b5:11:1f:
98:31:a2:63:a4:44:2c:b5:8b:6e:45:2e:b4:9b:18:
7d:fc:43:77:e8:96:69:0c:48:7f:0f:d4:96:4d:d6:
90:4b:26:f4:41:60:13:08:f0:d2:da:62:08:77:38:
c5:fc:af:06:d5:83:d7:4d:4d:cd:2a:ba:4c:f2:ea:
f8:0e:bb:4b:b7:d1:81:59:81:04:ab:7a:d0:26:3c:
5a:d9:fa:20:4a:89:33:bc:df:fd:06:a0:ee:fb:94:
70:28:9a:e5:b9:94:2a:aa:4b:d3:d3:11:c7:d4:71:
53:ab:04:5d:65:d5:51:04:f9:78:5b:26:db:8b:7e:
40:fb:54:8b:b3:b7:ed:24:4f:c4:ff:1b:38:58:20:
e2:fa:8e:d0:92:c8:d7:00:63:d5:1e:12:e2:1a:a2:
61:dd:ac:1f:c8:ee:0d:ce:a2:98:d6:70:0c:a3:aa:
04:bd:0c:e0:7c:45:1e:28:f6:01:2e:19:82:9d:67:
97:00:4d:5d:fa:53:39:9e:a2:2e:66:7f:62:78:f4:
de:1c:bf:a3:ae:6e:ad:09:da:2e:7f:22:d7:15:1e:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:4A:9F:DB:C4:6E:50:D4:43:7E:D4:07:9F:74:C5:43:E5:BA:66
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4f:d3:61:60:20:94:9f:1c:a1:c8:1f:96:42:82:a2:d8:5b:
66:53:cf:b8:6b:f7:74:cf:db:1c:54:ad:f7:56:b2:dd:71:4b:
4d:5a:e2:b1:e8:b8:8a:b8:6f:06:78:38:b0:75:5b:18:47:1a:
c6:92:12:53:fa:b8:63:05:09:70:3a:5c:b2:8d:ef:38:cb:9a:
04:0e:73:7f:2c:d2:5c:32:fe:53:4a:91:fc:6a:72:ad:5a:12:
49:bc:54:88:62:14:e0:24:d3:92:56:05:d7:37:af:fa:cc:f5:
b5:fd:f3:6c:38:a1:51:31:83:e9:1b:d0:cf:49:fa:b6:d5:e4:
49:26:db:df:ea:c6:0c:4c:ea:dd:c2:48:3b:80:eb:9e:94:c4:
d7:f1:b9:86:f9:82:91:83:4c:97:1f:69:40:8c:ed:50:11:0c:
24:6e:f2:e3:49:85:9d:c4:af:9c:eb:9b:98:0b:25:f3:e1:c9:
b6:38:b2:c4:f7:be:e2:29:8c:8a:ab:d4:61:af:d8:ec:65:31:
3a:d2:68:34:7e:b5:56:bd:52:9f:0d:59:f8:ad:59:f9:19:e9:
db:4c:52:de:3a:42:97:45:70:bc:bb:36:7e:7b:b0:bb:84:0a:
54:41:f7:da:7a:40:99:13:6d:9d:3f:13:bf:df:86:29:a0:7a:
97:ba:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:14 2025 by rpki-client