Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: SLFmMnKL2On1sJIoUhUBbAiX52e0jX66YnoTZoPDSMg=
Subject key identifier: 68:71:91:57:F5:AC:56:ED:F9:E6:13:F1:3A:67:03:77:36:B1:7D:18
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019A26D454E4BD38B82DCBA6E47CB12E6BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 079A
Signing time: Mon 27 Oct 2025 18:00:40 +0000
Manifest this update: Mon 27 Oct 2025 18:00:40 +0000
Manifest next update: Tue 28 Oct 2025 18:00:40 +0000
Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: d6ojHQE4YkKnJn8LP5fIMm0Q1baU/swjwRZco4yyeLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:54:e4:bd:38:b8:2d:cb:a6:e4:7c:b1:2e:6b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Oct 27 18:00:40 2025 GMT
Not After : Oct 28 18:00:40 2025 GMT
Subject: CN=68719157f5ac56edf9e613f13a67037736b17d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:a9:2b:d9:c7:7a:af:5e:ae:4b:f3:00:01:
3e:26:cf:b4:92:73:29:dd:7c:b6:92:52:f2:2f:e8:
5a:be:19:b7:b7:58:6e:5a:20:3e:6c:77:38:d3:60:
44:eb:01:6e:88:16:df:a6:1d:4a:98:06:bd:8d:b1:
ef:73:20:5d:f6:3e:d6:be:0e:d0:9e:7b:4f:f5:31:
77:3e:fa:e6:00:51:ef:fc:51:57:47:84:94:96:6f:
f9:a9:79:5f:0f:40:54:2f:22:29:69:7a:d2:ac:68:
91:4d:15:1a:08:e7:71:1e:06:92:c5:5e:30:3a:a1:
7c:d6:14:cf:8c:3d:20:5d:92:14:ee:ce:e4:8a:0d:
63:0d:87:69:b7:62:a6:69:01:2d:06:61:c4:2e:9c:
2b:72:ca:09:1a:c7:47:3a:f4:0a:f4:9f:68:18:d7:
32:29:b5:f6:7c:4d:e7:b5:cd:21:c4:eb:4f:c8:b7:
95:10:8c:cc:64:d0:48:75:a0:08:d7:34:58:c7:db:
e2:9e:29:67:b2:49:1d:78:d1:77:7e:1d:4b:57:49:
6d:59:10:3b:33:0c:06:11:e4:df:bc:fe:a4:cb:25:
1d:1a:2a:bd:e9:81:21:e4:22:d8:6d:27:3e:67:0a:
85:ed:76:eb:f4:2a:b0:31:60:24:35:31:84:e0:d7:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:91:57:F5:AC:56:ED:F9:E6:13:F1:3A:67:03:77:36:B1:7D:18
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a6:9a:98:8e:2d:2f:b6:8b:60:cc:bf:1b:f9:f1:22:41:6a:
8a:66:03:fc:26:cf:c9:09:59:24:ea:a6:ce:a3:ba:a8:2b:f5:
63:27:92:f1:0b:8a:90:3c:11:c6:57:6c:b4:06:74:f7:bd:ac:
ca:41:cd:28:76:b7:a4:86:69:ae:e6:c5:36:cb:09:a9:e0:8b:
d5:78:ce:b7:71:6f:d4:67:73:00:3c:96:ce:2a:e6:04:54:99:
92:93:5b:e4:aa:d6:0b:02:98:63:ae:cf:01:dc:d9:5f:e4:5c:
a1:38:7e:ca:8c:32:a7:87:22:fc:ce:83:24:97:ce:1f:40:02:
63:48:a4:58:48:3e:34:f2:7c:48:ed:c1:96:41:1f:ba:c4:2f:
9a:9e:c4:50:bd:a5:95:23:41:ab:49:b9:59:b3:7b:6f:83:73:
a6:55:18:99:6a:fc:ba:d0:2c:64:f8:6f:57:52:c1:30:cd:a4:
67:ef:fe:e3:67:20:eb:f9:0c:18:95:36:b8:c9:32:df:4a:29:
8d:1f:8d:f7:8f:50:bf:75:36:60:4f:99:f7:c2:9e:0c:54:06:
45:66:2f:f5:ed:2a:59:9c:e1:0c:82:c0:59:c9:f5:51:be:95:
55:84:93:ba:34:86:6a:d3:68:f0:00:8e:97:90:19:a6:cc:d0:
f2:3c:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:30 2025 by rpki-client