Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: Ip9H6Y5C0DxOP7Y8JC6lRl5m+uUdqLXY8Dp4he495FQ=
Subject key identifier: AE:35:C0:50:3F:69:44:8F:4B:35:E5:E1:9B:98:1C:B7:B5:41:95:EE
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 0199228C4258F6BE2CE4C0D0FBAA51C59267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 05:00:41 +0000
Manifest this update: Sun 07 Sep 2025 05:00:41 +0000
Manifest next update: Mon 08 Sep 2025 05:00:41 +0000
Files and hashes: 1: VnjAZXEV2IpEDwg3p4BnaouHiwY.roa (hash: +OjGTLOvqNCpLYSjRU9GeBSRZeFRlVpWW6Mj3HPVgqw=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: k0mfBtq0SqbR363Eft/h+agJl61al99ugUFk/eCnyfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:42:58:f6:be:2c:e4:c0:d0:fb:aa:51:c5:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Sep 7 05:00:41 2025 GMT
Not After : Sep 8 05:00:41 2025 GMT
Subject: CN=ae35c0503f69448f4b35e5e19b981cb7b54195ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:0f:d2:ea:0e:7b:95:d1:7c:db:2d:2f:20:
0d:25:83:1b:68:64:16:de:16:b9:b3:b2:2e:71:9d:
a5:a0:d8:2c:b4:1c:00:18:a1:04:25:42:30:30:ab:
d9:a7:be:26:02:f1:d8:6f:62:e2:4b:ed:01:0d:b1:
cc:14:c7:04:0c:47:f6:6e:77:b6:6b:a4:8f:06:3d:
b7:91:36:ca:95:13:aa:0d:b1:2c:63:c7:11:ab:90:
95:b7:e1:94:51:d4:51:ca:fd:66:be:90:12:76:d8:
c6:1e:ab:43:40:ab:de:a4:f4:b2:6f:a6:59:28:23:
7e:ea:23:19:d7:38:21:b3:77:b3:ab:5d:21:8c:6e:
48:52:06:36:7e:ec:3e:17:f0:7f:dc:d7:4d:8a:00:
f2:33:cf:aa:ce:be:09:f7:0d:39:ed:5f:8d:bd:32:
27:ea:8d:da:08:7a:81:ed:8f:7b:f3:a2:8c:13:cc:
aa:ec:9d:ce:6a:30:2e:58:77:8d:b3:7d:8e:3a:a3:
ed:73:4f:3d:63:41:46:e7:c6:5d:45:e3:93:3d:a9:
d2:90:d9:00:8a:e6:43:c2:dd:f6:0b:89:78:d6:1b:
19:79:4f:c1:98:6a:a4:8b:54:7a:07:f3:3d:d3:a7:
e7:f0:66:4e:8e:a1:10:aa:7a:c0:4c:44:58:33:b3:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:C0:50:3F:69:44:8F:4B:35:E5:E1:9B:98:1C:B7:B5:41:95:EE
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:45:cd:0b:74:a0:7e:d5:9f:1d:80:ba:d6:f4:1c:83:d4:cb:
77:ee:3d:74:d3:ff:c7:90:18:56:23:86:9e:a5:bc:bc:06:17:
19:e1:ad:30:99:0d:5c:e8:8e:30:0a:59:c5:2a:62:8e:56:f6:
69:6b:d7:89:77:de:41:5c:b0:02:2b:17:2d:37:fa:d9:4e:54:
ef:52:7b:6b:a0:a2:df:99:08:bd:f4:bb:55:a3:18:ea:5c:6f:
77:74:63:0f:f6:0b:76:1f:bc:1e:6b:8b:b9:ea:36:16:52:07:
95:27:a9:17:96:c9:df:56:e7:9d:e5:03:9d:0f:ef:d7:3e:b4:
e3:a7:0a:2a:13:e1:5e:3d:80:5a:36:aa:46:3f:04:44:50:2a:
2e:71:3b:52:be:a5:e1:30:6a:1f:50:50:a4:6f:87:b6:0b:31:
88:61:4b:35:4f:94:e4:d9:2a:1a:25:aa:8c:fe:c6:90:a3:95:
2e:10:0c:b8:fa:1b:84:ba:57:2e:ca:aa:78:3d:19:49:0a:8a:
6e:28:c9:ec:c5:75:d1:08:b9:bc:bd:33:78:a1:77:94:12:47:
14:6e:4e:22:53:7a:18:df:41:9b:d0:41:bc:c0:3f:61:ef:c8:
3e:03:da:d5:66:1a:50:8f:a9:99:d4:fa:9f:87:e0:c7:30:59:
b9:84:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:38 2025 by rpki-client