Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: mlrq8ppaT5urVX4TQRR56OnpP8ukPQNJukw79Jg0CYE=
Subject key identifier: 5A:76:00:50:22:35:F4:4B:9C:35:0D:8A:F5:76:54:91:4B:A0:96:E5
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019A1EACD8A27B88E180CC87CFCC31A05FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 04:00:35 +0000
Manifest this update: Sun 26 Oct 2025 04:00:35 +0000
Manifest next update: Mon 27 Oct 2025 04:00:35 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: +0kCO7MQzymRRTQes7HJXLkPBFmnbMhX259xHHCdsdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:d8:a2:7b:88:e1:80:cc:87:cf:cc:31:a0:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Oct 26 04:00:35 2025 GMT
Not After : Oct 27 04:00:35 2025 GMT
Subject: CN=5a7600502235f44b9c350d8af57654914ba096e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:5c:ac:d3:9d:71:51:6d:25:58:83:a3:5e:
20:17:43:ed:22:ba:da:14:b7:87:91:d0:f2:d6:59:
1b:3b:78:e8:11:1d:c1:3c:38:fc:70:32:f3:5a:b2:
15:cf:d4:39:00:f7:e8:82:d6:db:29:0d:45:f0:6d:
26:43:f0:73:62:9c:a9:ab:7f:b1:92:ee:4b:bf:06:
ff:cd:29:92:11:99:c0:d8:82:6c:28:10:25:5e:11:
e4:5a:0b:b6:5c:95:45:2f:a4:5a:ed:ee:9d:f5:5e:
f3:36:ac:61:c5:98:0f:ff:79:33:7e:c3:4c:fa:92:
4e:4d:b9:50:05:2c:9f:54:8a:7d:e8:b2:5b:f2:d1:
8c:6a:3c:8f:3e:3a:8e:af:b7:92:40:58:97:15:a9:
6b:e7:c5:1f:5f:be:0e:a3:2d:a1:10:65:d5:56:82:
75:73:0e:89:88:f8:5a:f9:ba:c6:a2:aa:23:a4:90:
6e:89:51:bc:dd:66:f2:d7:e4:b1:1c:32:ce:0f:63:
c2:4d:f6:49:ae:72:9c:23:37:cb:5d:df:f1:d1:68:
f0:82:82:22:73:39:f4:46:59:85:c4:84:1f:ae:d5:
3e:8a:53:4a:0e:f1:9a:20:cc:d4:2c:a3:40:04:de:
8d:dd:75:9e:98:7b:06:bf:7c:ac:eb:30:84:da:35:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:00:50:22:35:F4:4B:9C:35:0D:8A:F5:76:54:91:4B:A0:96:E5
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:2a:08:08:a7:ca:df:7c:2d:bb:c7:21:d9:65:2d:89:d1:
4c:87:b4:51:d6:f2:e2:64:8b:6f:97:22:21:09:53:cf:bd:c2:
b3:ce:10:c9:7e:44:e2:7a:69:03:7c:61:55:e2:2e:5d:01:59:
90:39:ef:a6:d7:af:62:f6:d6:9b:d9:c9:f2:dc:32:60:66:fc:
53:ea:c8:30:c2:03:a5:d2:e2:02:6d:44:10:1f:b6:67:21:5f:
4c:5f:19:45:fd:96:11:8f:dc:c5:26:74:d6:f9:9a:31:ce:14:
09:2b:e0:a7:9e:4b:3f:74:df:fa:22:0b:69:5f:53:e9:4b:b5:
c6:31:d6:00:ff:a9:3e:62:34:a4:74:91:2a:59:09:3e:e3:53:
78:6a:60:74:88:42:1c:b1:72:ce:04:e6:02:75:c0:0b:2c:fc:
29:f5:1d:4e:41:0d:92:bf:87:48:a2:64:f5:87:11:bc:4e:5c:
b7:78:6f:5e:1a:5a:32:ce:82:7a:83:76:fc:31:42:14:b1:09:
03:0b:b4:8d:d7:43:31:78:80:d9:14:9e:91:69:b4:d1:24:44:
79:88:1d:89:d7:ed:34:d2:75:80:f2:46:10:f9:02:60:c1:a4:
6c:af:73:4d:95:7a:cb:b4:59:76:88:f3:08:c3:b5:2b:f1:a4:
64:bf:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:43:38 2025 by rpki-client