Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: p1kHSvBT3m0exMkgT7MqtJv//Kx66oWuYbv0xCz6u2A=
Subject key identifier: C0:72:4B:A5:22:89:62:61:DC:93:B0:5D:2C:CF:83:3C:23:9F:0D:BD
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019847771F8742963A93850107F06628AE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:00:45 +0000
Manifest this update: Sat 26 Jul 2025 16:00:45 +0000
Manifest next update: Sun 27 Jul 2025 16:00:45 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: d3EEExEztRz/pX6Z1SJm5N+WWQx0NbueEEFKVr4dKAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:1f:87:42:96:3a:93:85:01:07:f0:66:28:ae:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jul 26 16:00:45 2025 GMT
Not After : Jul 27 16:00:45 2025 GMT
Subject: CN=c0724ba522896261dc93b05d2ccf833c239f0dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:5c:81:25:da:87:17:19:ad:2f:61:1c:21:
40:2f:4b:83:06:be:ce:9d:5c:2a:ec:ad:5c:3b:b6:
c0:5c:06:23:40:7e:d3:4e:8f:b2:aa:91:a4:d7:a4:
5a:3e:91:97:e2:9d:45:53:15:9a:1a:28:a8:19:d9:
96:53:00:e8:c2:20:91:62:d7:5b:33:b2:1c:12:df:
2f:23:c4:a6:41:b0:6e:72:24:bc:42:ab:2f:e1:e5:
0b:40:ea:7e:1c:3b:e6:89:38:d9:98:af:51:1a:65:
74:40:73:de:44:d0:73:89:8f:1e:68:c2:2f:98:0f:
4d:c3:0c:8e:87:53:e6:e8:f8:9e:1e:9e:74:2b:7f:
0d:c6:40:4e:be:75:0f:ae:ff:20:08:68:71:d0:f0:
92:96:1b:64:c5:00:dc:11:ff:cd:e0:d2:23:e9:a8:
9d:de:8f:d1:e9:c1:d9:f3:0d:13:31:fc:ad:9f:f3:
f5:63:a6:ec:73:ff:cc:04:8f:63:f0:13:e7:06:77:
98:50:a5:a0:48:f1:33:79:f7:fc:e3:e2:b2:d5:bd:
bf:04:72:41:81:e1:44:63:bf:5d:11:75:8a:36:e9:
5c:60:24:b1:26:ad:2c:64:81:b1:c0:a7:ce:44:55:
1f:4c:31:86:11:8f:21:4a:2d:93:e9:ba:d4:dd:16:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:4B:A5:22:89:62:61:DC:93:B0:5D:2C:CF:83:3C:23:9F:0D:BD
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:0c:5e:29:d4:6f:2b:2c:d8:87:e5:68:ba:cf:91:03:b4:
d5:3d:f8:d3:1b:b2:13:55:32:b3:26:e4:da:73:f5:d4:8d:b3:
6c:ae:d5:65:05:dd:e1:16:22:d8:35:18:68:11:21:c2:e8:90:
c6:fe:c0:04:38:5a:a6:01:c3:8f:21:3b:c0:d5:b2:62:b9:ff:
e8:dd:e5:5c:df:ab:4e:0c:d1:8e:55:27:1c:15:80:e5:f5:22:
b1:21:14:50:93:46:4f:49:d3:49:c8:2f:a7:22:2c:4e:20:e3:
cd:ad:1d:98:f6:de:27:8a:69:94:38:97:31:77:fe:40:61:0f:
42:6d:06:a8:36:13:6e:2b:c6:00:e1:54:e9:67:fc:7f:d8:07:
86:ce:d3:ad:94:f0:b0:e0:31:87:a4:dc:c2:78:5b:0c:c4:9a:
31:03:13:e2:77:cd:12:48:b6:1a:92:b7:dc:70:0d:35:f1:20:
f7:7b:f2:6e:ba:1c:e1:89:9a:a0:82:7f:f9:19:94:2a:84:35:
c3:53:04:05:7e:0c:e2:7d:05:14:1c:a9:8f:e1:c5:28:e2:e4:
55:bd:67:1a:69:25:63:1a:c4:f0:09:55:f0:8f:16:8a:9e:13:
27:b6:93:65:16:29:57:be:ff:31:13:c7:55:19:e6:df:5f:43:
f8:c3:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:02:55 2025 by rpki-client