Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: /KrDN7az9tocibdt5F8R4vKKQmqwRthgJXn6OJv+poE=
Subject key identifier: 2E:C3:C1:26:2D:75:81:6C:60:77:DE:2D:96:AA:B3:08:5A:23:93:9B
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 01984588D2CC7EAE5C81A5B5AAB2FDACAC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 0D95
Signing time: Sat 26 Jul 2025 07:00:51 +0000
Manifest this update: Sat 26 Jul 2025 07:00:51 +0000
Manifest next update: Sun 27 Jul 2025 07:00:51 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: DaZTdzxtG7mei5UK++qMDCVXwqwQIyJD+6W4qVr2ga8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:d2:cc:7e:ae:5c:81:a5:b5:aa:b2:fd:ac:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Jul 26 07:00:51 2025 GMT
Not After : Jul 27 07:00:51 2025 GMT
Subject: CN=2ec3c1262d75816c6077de2d96aab3085a23939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:4d:eb:d9:de:f5:6d:83:d6:37:a7:66:e0:
9f:e2:14:ff:cf:73:e6:4e:53:b1:67:a3:8c:45:84:
18:4e:74:74:2d:b0:db:39:5c:41:5a:8c:76:9e:98:
af:dd:16:51:83:c2:00:61:97:fe:c3:1e:c7:0d:e8:
72:f2:0c:21:d9:ac:15:5d:8f:5b:b0:47:c4:96:ce:
2e:45:33:f9:9e:28:52:9b:fb:b9:3b:c8:32:10:7e:
07:60:8f:ac:dd:cb:7f:ce:7d:a6:61:e3:82:e2:b0:
17:bf:19:23:54:bd:ba:45:f5:b1:9c:e4:8f:8d:34:
01:83:43:d0:88:67:86:0a:7a:4c:e4:49:2c:e7:c5:
ad:3d:16:e0:9b:d0:06:a6:75:d3:2b:21:eb:41:ff:
26:85:3b:2d:66:60:ea:9f:7f:e3:07:be:8d:33:18:
d3:46:e4:ad:d5:5b:92:66:30:f8:08:05:75:8e:11:
3b:66:5c:b2:e0:99:89:61:c0:5d:96:ba:df:d8:04:
99:34:8f:b4:6e:e2:28:af:4a:e6:1b:02:de:25:77:
db:fc:29:c3:f2:ca:b7:f6:56:9a:20:a4:f4:f0:87:
d6:bb:29:6b:7d:4a:a2:5b:48:d1:f3:2f:e9:aa:bd:
3c:5a:cb:64:98:30:97:d4:98:bc:47:b0:1f:ea:d0:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:C1:26:2D:75:81:6C:60:77:DE:2D:96:AA:B3:08:5A:23:93:9B
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:24:e8:ce:e9:9a:88:92:3d:c8:6c:cd:bc:52:81:91:7c:b0:
7b:28:04:50:a1:10:e1:7e:17:e7:f7:1c:fe:19:ba:06:bb:98:
d4:fb:45:b3:8a:b5:d4:95:93:06:1f:dc:0a:ac:ba:4b:8e:0c:
27:31:74:0c:56:dd:4e:7f:95:77:4f:8b:b4:08:3d:2f:33:d0:
56:73:bf:d0:58:86:88:0c:05:8d:0d:81:45:86:cf:26:eb:65:
68:8b:fa:78:9a:f4:02:e9:3d:8c:a7:ab:b1:a5:19:56:71:2c:
0c:63:13:bd:98:21:45:f5:f2:13:84:06:ec:7e:17:4e:ee:ed:
51:43:58:2b:ea:79:29:65:2b:e5:5c:2f:80:05:7d:d0:ee:98:
e1:54:4e:58:f9:08:0a:31:b8:ac:44:cb:1f:ec:67:d2:e9:6e:
b2:c8:38:27:2b:72:63:e7:ab:89:33:1d:80:50:be:db:3e:4c:
52:17:13:1e:86:c6:43:e8:af:f5:e5:87:6a:c9:bd:86:67:3c:
48:b1:52:6c:23:18:35:aa:ca:c4:8a:5d:a3:8f:42:7b:da:8f:
23:3d:a9:d4:e8:e9:da:d2:13:84:74:d5:19:2e:3b:6c:4f:0a:
ae:ab:ea:11:09:b8:e7:9b:32:23:4e:22:d0:23:5e:55:15:a2:
e7:fa:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:16:08 2025 by rpki-client