Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: aAqutFOmezQIQ/x2HZWvqhQnxDB5Hj0wYmcfUi3nrvM=
Subject key identifier: AF:A7:A8:F2:A9:A2:7C:FD:F8:8A:F8:48:BD:CC:51:CE:E4:63:6A:4C
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019A217723A77803FC6C9C69F26876D22431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 03C8
Signing time: Sun 26 Oct 2025 17:00:47 +0000
Manifest this update: Sun 26 Oct 2025 17:00:47 +0000
Manifest next update: Mon 27 Oct 2025 17:00:47 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: 95i1ao/Ze+hQvwNeP1sKusaitfeBjr4XH9mfJ3oOZUA=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:23:a7:78:03:fc:6c:9c:69:f2:68:76:d2:24:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Oct 26 17:00:47 2025 GMT
Not After : Oct 27 17:00:47 2025 GMT
Subject: CN=afa7a8f2a9a27cfdf88af848bdcc51cee4636a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:66:b2:1c:db:f7:45:2a:e7:77:dc:73:f3:
83:2d:26:47:5d:2f:09:57:d2:7d:4a:c6:c2:4a:d1:
32:c0:7b:31:96:e5:03:e3:72:e9:16:b6:3b:1a:60:
f3:ea:82:40:6a:05:87:b0:44:61:f4:1d:11:66:7c:
7d:8e:ef:88:d8:1f:1d:90:2e:46:ec:62:1c:f3:75:
5c:a4:a7:96:c6:4e:6b:a6:2e:a8:04:5a:d6:4d:ae:
d2:f1:e6:d7:2b:05:8c:ef:c9:36:1d:04:ed:e0:a9:
db:1c:03:f3:a6:60:6b:a8:38:2e:0a:c1:7f:97:83:
d3:ff:59:fd:ff:a3:46:72:dd:4a:94:84:ab:d5:11:
80:3b:67:00:a3:41:d1:75:bc:50:c4:f7:64:ec:ea:
da:c2:63:3e:08:91:92:ce:6b:fb:fb:33:9d:4a:c9:
5a:16:37:b4:ea:d9:c3:57:f4:f2:4d:fd:86:a2:58:
d5:c8:68:e8:c2:a3:28:a8:6c:b3:66:4b:85:50:b2:
f1:39:78:4f:85:3f:c9:78:03:0c:90:87:b2:89:59:
d2:b7:92:e8:4d:50:88:c9:34:aa:a8:89:34:f2:6c:
76:c3:d2:ce:9d:5b:05:ee:6e:2a:9d:86:4b:e3:d6:
d8:4d:46:b0:25:f3:dc:f3:31:b3:d9:4d:08:20:f3:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:A8:F2:A9:A2:7C:FD:F8:8A:F8:48:BD:CC:51:CE:E4:63:6A:4C
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:af:d8:fb:19:c3:c5:51:3f:5d:09:97:b6:ab:29:b5:87:b1:
d1:5d:1e:05:f5:01:8c:52:bc:b3:58:cf:28:ab:26:3a:8c:4f:
b7:3e:81:86:4a:2c:36:54:90:fa:3f:ed:d2:eb:25:0d:42:37:
b4:6e:30:51:fc:df:16:67:ec:39:53:3b:87:78:bb:8c:9e:30:
7f:87:c8:ca:78:2e:9b:12:ac:46:1f:3b:51:bb:fc:52:8a:30:
3e:0b:77:f1:19:9a:8e:ba:2b:48:e8:14:65:91:47:fa:2c:e2:
7b:3b:49:22:7b:05:b9:3e:81:3b:c1:e3:1d:99:ed:2b:ea:fc:
b8:1b:f6:1f:3b:b6:1e:1c:f2:5c:3a:9e:6c:28:fa:46:2d:1c:
23:d5:87:a7:31:e7:34:14:4c:ca:84:61:bb:9a:04:cf:41:74:
9c:c5:78:77:fb:e0:af:df:ef:fe:e3:0c:99:f6:0d:aa:2a:d4:
20:cf:46:cc:fd:83:ae:57:a2:2e:63:52:77:b5:f2:50:af:9d:
8c:53:ee:8b:10:c7:b8:e8:92:ab:39:82:a7:7a:17:07:7e:31:
01:33:2c:95:1a:24:f6:41:17:b1:fa:0b:56:f8:f5:19:b9:07:
3e:eb:f5:06:5b:e0:39:a4:25:0f:5a:e2:ab:77:7f:45:10:14:
ac:57:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:22:06 2025 by rpki-client