Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: BOolUkTdwNvJztg0gO6a2SmTgphdy4yBv2Z0WJ8okbs=
Subject key identifier: 96:A2:D3:29:1E:26:AA:65:8B:EF:5D:EC:9C:00:12:91:1A:79:56:0C
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 0199394BC9F9FCC4BB6E166D734E1A2A53EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 071F
Signing time: Thu 11 Sep 2025 15:01:32 +0000
Manifest this update: Thu 11 Sep 2025 15:01:32 +0000
Manifest next update: Fri 12 Sep 2025 15:01:32 +0000
Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: cOQqMuEAYLMyMSyH4UMZ4cJW3byrHkLhKpIUp2XA+VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:c9:f9:fc:c4:bb:6e:16:6d:73:4e:1a:2a:53:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Sep 11 15:01:32 2025 GMT
Not After : Sep 12 15:01:32 2025 GMT
Subject: CN=96a2d3291e26aa658bef5dec9c0012911a79560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:75:0f:63:63:1d:fb:09:6c:fb:bc:c2:42:
f0:16:1d:20:03:55:42:03:c3:3b:6e:bf:f5:8f:c4:
b9:09:b3:21:62:b1:7f:ac:e6:46:d5:d5:d7:5a:6e:
0a:23:13:9e:46:65:ee:97:f6:ea:31:98:92:6a:7f:
f4:86:a7:0d:94:a6:7d:21:96:15:f0:2a:69:9d:a4:
c2:85:06:a1:12:b1:8c:4f:7f:1c:e4:16:d0:4e:9f:
74:58:34:02:ee:2a:a3:84:3e:27:33:b6:6e:ec:01:
92:e8:f4:b0:47:b2:39:f1:ad:67:02:c7:e3:99:8c:
ee:7a:a9:10:49:a0:ce:f6:76:fa:2c:1d:5c:6d:1f:
6f:60:a6:d2:c8:63:f4:66:d2:05:3d:71:2b:8a:61:
fc:c0:6a:c4:b7:3b:d4:5d:02:38:d0:fd:98:f1:0d:
8c:e5:48:7e:e6:e1:4e:41:54:75:38:c9:10:6e:06:
7b:59:70:ab:cb:53:9a:16:a5:fd:58:bb:dc:30:b5:
a6:b7:b9:d8:53:6e:2b:92:86:40:a6:4b:58:6e:59:
04:43:5f:f9:77:8f:bf:fc:ef:a3:e3:28:22:60:f9:
52:e8:61:f5:3b:7f:ba:9a:30:83:1d:2f:e0:7d:5d:
09:ea:2b:05:ba:b0:bd:fc:80:66:c9:bb:8d:b3:e6:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:D3:29:1E:26:AA:65:8B:EF:5D:EC:9C:00:12:91:1A:79:56:0C
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:19:d1:db:ed:31:ac:8d:f9:a1:2e:a6:ee:cf:df:9d:91:
da:85:f8:51:0a:f3:a2:83:3d:8f:b2:34:9b:ed:ec:9d:cd:59:
63:a3:67:18:05:f1:b3:d4:c2:a9:10:69:f1:8e:45:55:db:b9:
b9:53:cd:a8:5a:b2:1f:f1:bc:a8:1e:1a:8c:a9:2e:c5:86:8e:
c6:1c:c1:90:7e:57:e7:18:aa:00:01:5a:8b:e8:b0:a4:27:01:
4d:10:b8:09:5f:b9:62:3b:0a:3d:69:26:e8:f0:4c:bf:b7:da:
87:91:af:ed:9f:89:ce:67:9a:04:57:16:a9:52:83:2a:59:25:
c1:64:ae:ec:d9:46:bb:f0:35:7f:37:93:2f:76:2c:50:95:1f:
6a:64:03:63:0b:6a:ef:79:97:c3:4f:9b:e5:82:62:de:d7:fd:
f2:8d:20:4e:b3:ef:cd:dc:fd:b0:eb:fd:8d:76:4c:57:a8:31:
d2:e0:14:31:04:e4:3f:31:f0:9a:44:71:00:85:f9:36:9a:c5:
5d:11:7d:ae:42:6d:bb:9f:08:3a:2d:9e:92:79:df:de:c1:fe:
56:92:71:1c:b1:65:48:d4:6c:54:56:5c:4a:57:e6:48:08:e9:
34:36:18:50:68:2e:45:6f:97:e7:2f:54:e2:b3:10:d7:c1:cc:
bd:ae:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:56:38 2025 by rpki-client