Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: OJ/uoVWg9FPSjq2SiQ49yhdmvdiUrNbU6/4IJgaWQAE=
Subject key identifier: C9:EB:74:2A:40:D1:3A:2D:01:5B:09:F9:37:1B:D1:24:CF:3C:51:BC
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019A18E2C2511362637D179003478E5AF468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0A1B
Signing time: Sat 25 Oct 2025 01:01:45 +0000
Manifest this update: Sat 25 Oct 2025 01:01:45 +0000
Manifest next update: Sun 26 Oct 2025 01:01:45 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: Q9QPT1eKAddBOI7gJCbLzcQY9u4Ihleh6yp/wO0kfRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:c2:51:13:62:63:7d:17:90:03:47:8e:5a:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Oct 25 01:01:45 2025 GMT
Not After : Oct 26 01:01:45 2025 GMT
Subject: CN=c9eb742a40d13a2d015b09f9371bd124cf3c51bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:b5:4d:44:f0:a6:36:89:09:fe:49:7b:05:
ee:3f:1c:21:3d:9c:e4:aa:3d:f2:31:7e:12:e1:5a:
b2:9f:a4:e2:59:af:8b:d1:2e:ad:fb:14:5b:1f:5c:
bb:3a:ad:1d:75:a9:5d:45:0e:b2:94:74:bc:a5:28:
b6:43:1c:e6:82:dd:20:4f:f1:d1:b8:0c:d0:ad:aa:
ef:06:ea:45:f5:4e:aa:16:48:b6:cb:40:34:cf:7d:
19:eb:84:c5:d5:00:f9:56:6c:96:ac:b2:f6:1f:e6:
91:87:74:16:c2:4f:a2:af:24:fd:02:9e:54:58:13:
39:3b:19:03:16:af:fc:63:04:ea:b1:87:87:9e:3c:
83:70:8e:bb:23:0b:5d:66:ce:62:2f:2e:a1:ec:d0:
19:4c:4f:8c:dc:00:2c:40:7a:41:09:86:d6:d8:a8:
4e:86:50:37:4e:bc:9d:3a:63:3a:57:8d:6d:55:67:
cc:1a:b1:b7:6c:00:5a:43:0d:52:00:07:fe:aa:d1:
ad:1e:0a:78:3f:cd:b5:64:9f:9a:40:aa:14:c7:e6:
3f:98:7f:04:04:58:72:51:db:52:b2:94:1d:1d:fa:
2d:35:84:f3:f4:54:27:dc:29:51:a6:9e:43:2b:42:
7c:5f:96:31:e7:ba:c1:82:ae:d2:1b:cb:3c:53:91:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:74:2A:40:D1:3A:2D:01:5B:09:F9:37:1B:D1:24:CF:3C:51:BC
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:14:24:2f:11:b9:78:9e:f1:99:0b:db:4e:46:91:ce:8e:fe:
29:96:7f:ee:d2:12:d3:60:34:fa:2e:7c:fd:b0:87:ef:4f:a3:
18:6d:b6:fb:81:f8:9c:ca:92:c2:af:9d:90:41:11:bf:2b:7e:
59:e9:4a:4a:a3:07:08:0e:fd:58:7c:6e:49:71:df:93:f7:e5:
59:52:e0:77:c1:0f:f9:3f:10:76:65:cc:75:af:1a:f6:8d:2f:
88:d9:51:5c:02:d0:44:5a:89:25:d9:40:1e:1b:57:8b:68:d0:
ef:1a:7f:2a:8e:6e:ce:97:6b:2a:56:95:76:70:0a:04:bf:33:
9b:d3:0c:48:07:03:31:88:8a:2f:a3:8b:e7:ff:63:65:eb:cf:
68:91:2b:75:e9:70:85:ba:09:86:bf:58:7a:0c:8a:69:ac:3f:
2d:04:fd:9a:26:99:45:6a:7a:99:2f:df:62:35:c4:f2:fe:d4:
29:19:ad:98:93:0f:74:44:5c:bb:26:3a:a0:2b:98:fa:89:94:
a6:ea:ce:cd:20:4c:a6:c7:1a:a5:e1:83:57:42:97:39:19:df:
38:d7:80:f6:b3:39:3c:ca:f3:c2:31:4a:fc:15:46:7c:03:06:
e0:b1:72:10:54:a8:59:24:d7:17:ed:93:2b:25:9e:80:d1:d5:
65:d8:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:55:22 2025 by rpki-client