Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: I8DdBPuHec5bC9Itv/IxkBoxMF8Lq9ipqOe02EHh0Lg=
Subject key identifier: 00:88:E5:D8:09:19:97:27:E2:BA:F9:2C:F5:3C:AE:A2:A5:81:EF:24
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019923A0CFE500078B8D8E1BFBEF20AEFC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: AVL+97cu/qNGBEKHtux7NVAte1piwY555VHDEnkNzYI=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:cf:e5:00:07:8b:8d:8e:1b:fb:ef:20:ae:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=0088e5d809199727e2baf92cf53caea2a581ef24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:cf:dd:61:c1:d4:c2:05:52:fd:25:52:59:
4f:a2:f7:95:52:ac:b8:c9:1a:fc:3a:5a:fa:31:00:
02:a2:5d:76:51:73:a4:64:6f:fe:1c:31:2b:ae:0b:
a5:34:eb:c0:17:12:ed:0f:17:73:e8:e3:e0:a6:bc:
86:f0:77:c5:4d:54:2e:31:3f:13:49:21:2c:61:33:
22:7d:f7:1b:49:91:67:ce:c2:46:fe:ac:44:ec:69:
b1:04:67:06:b0:aa:d7:62:74:c5:fe:b2:3e:9e:b8:
ee:8b:7a:a6:0a:55:4b:b9:dd:27:f8:a3:c1:7f:d1:
67:b0:b2:eb:6a:85:56:7c:3a:2b:29:91:3c:86:9e:
4f:0a:11:19:15:53:0c:be:a1:41:f2:af:c2:f2:5c:
ee:15:43:c4:5f:40:11:81:18:92:a3:3f:e7:ef:72:
d0:bd:e6:e7:64:e5:0b:1d:f6:1a:88:03:42:e1:39:
cf:4a:bd:7e:ec:d5:35:40:60:23:8a:1f:09:dc:c7:
43:64:79:25:0b:01:e5:74:57:a0:1a:32:3a:85:0d:
b3:74:f7:43:09:2f:eb:7e:c1:44:b0:f9:0d:56:1a:
7a:bb:a4:bb:94:60:4b:8f:7c:f2:88:17:77:78:60:
1c:2c:36:1c:53:da:8b:ba:61:41:9c:fe:e8:24:50:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:E5:D8:09:19:97:27:E2:BA:F9:2C:F5:3C:AE:A2:A5:81:EF:24
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e5:af:ea:c6:4b:ca:30:5c:5d:f7:bf:5c:dc:1e:39:8a:c4:
45:df:a2:77:2b:ac:00:26:49:88:ff:f7:1a:d5:9d:df:5d:0a:
db:19:e9:a5:2b:3c:5d:a1:1e:48:65:af:9f:b3:67:1b:8b:0b:
4a:91:ec:da:fd:8f:68:d4:4f:27:df:07:e8:12:ae:11:f9:31:
c1:c0:ef:8c:d5:5e:97:25:0b:74:96:79:00:b8:d9:9a:56:ef:
d7:11:7b:25:42:42:cf:82:2c:69:13:e2:73:1d:40:10:55:79:
71:74:a3:29:a6:f6:c1:a1:06:f3:b2:cf:0f:bb:1a:95:ca:19:
f8:e5:21:8f:2f:53:39:d5:5c:7b:ca:4c:c9:17:5a:c2:b2:0b:
50:ff:c7:e3:dd:82:74:2a:67:ee:36:37:b1:b3:6a:4b:1d:95:
4d:f4:81:e5:b7:88:aa:cd:b7:a0:cc:fc:79:e5:11:d1:ec:a8:
54:83:71:76:89:3d:60:1e:c6:eb:8d:ef:72:e7:17:74:15:06:
0c:6e:e6:4a:9f:07:b7:ed:d0:71:06:34:0b:b8:8f:84:e9:7c:
09:44:e4:06:3e:05:50:32:44:40:0e:6f:be:13:f7:5b:c6:7b:
c2:17:18:b2:f0:e7:26:09:1f:0a:94:68:35:b7:b1:54:99:9f:
db:2b:0a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoM/lAAeLjY4b++8grvx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjUwOTA3MTAwMjQ1WhcNMjUwOTA4MTAwMjQ1WjAzMTEwLwYDVQQD
EygwMDg4ZTVkODA5MTk5NzI3ZTJiYWY5MmNmNTNjYWVhMmE1ODFlZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGfP3WHB1MIFUv0lUllPoveVUqy4
yRr8Olr6MQACol12UXOkZG/+HDErrgulNOvAFxLtDxdz6OPgpryG8HfFTVQuMT8T
SSEsYTMiffcbSZFnzsJG/qxE7GmxBGcGsKrXYnTF/rI+nrjui3qmClVLud0n+KPB
f9FnsLLraoVWfDorKZE8hp5PChEZFVMMvqFB8q/C8lzuFUPEX0ARgRiSoz/n73LQ
vebnZOULHfYaiANC4TnPSr1+7NU1QGAjih8J3MdDZHklCwHldFegGjI6hQ2zdPdD
CS/rfsFEsPkNVhp6u6S7lGBLj3zyiBd3eGAcLDYcU9qLumFBnP7oJFAkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACI5dgJGZcn4rr5LPU8rqKlge8kMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOWv6sZL
yjBcXfe/XNweOYrERd+idyusACZJiP/3GtWd310K2xnppSs8XaEeSGWvn7NnG4sL
SpHs2v2PaNRPJ98H6BKuEfkxwcDvjNVelyULdJZ5ALjZmlbv1xF7JUJCz4IsaRPi
cx1AEFV5cXSjKab2waEG87LPD7salcoZ+OUhjy9TOdVce8pMyRdawrILUP/H492C
dCpn7jY3sbNqSx2VTfSB5beIqs23oMz8eeUR0eyoVINxdok9YB7G643vcucXdBUG
DG7mSp8Ht+3QcQY0C7iPhOl8CUTkBj4FUDJEQA5vvhP3W8Z7whcYsvDnJgkfCpRo
NbexVJmf2ysKGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client