Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: +cVGQvWs5uEfxbfc/8SjlsHBvrhRvEt7u/pq4RhhsAc=
Subject key identifier: 2B:DB:80:7E:2C:D7:6C:1B:92:61:12:60:0A:5E:FD:5F:24:D3:6F:51
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 019A1082E067D7A27F6D8B962A3027F9A0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0F5D
Signing time: Thu 23 Oct 2025 10:00:03 +0000
Manifest this update: Thu 23 Oct 2025 10:00:03 +0000
Manifest next update: Fri 24 Oct 2025 10:00:03 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: c+hrEhgpvctccG1trvnO70t8qtlvXsGqTcOZ3wr45I8=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:82:e0:67:d7:a2:7f:6d:8b:96:2a:30:27:f9:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Oct 23 10:00:03 2025 GMT
Not After : Oct 24 10:00:03 2025 GMT
Subject: CN=2bdb807e2cd76c1b926112600a5efd5f24d36f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:b8:c8:89:18:9c:0e:02:46:c0:ee:27:63:
31:64:1b:18:d7:d8:b5:29:1e:68:75:03:45:f5:95:
62:41:27:fa:fd:9d:a4:94:90:79:e7:c0:78:24:1f:
b9:87:87:ee:fa:f9:e4:3f:a9:81:a8:cc:c7:e9:87:
94:78:64:3b:a2:d4:12:3f:5c:ae:db:24:56:a0:cd:
09:9d:ac:8a:f6:d9:27:21:94:ec:30:e2:15:ae:71:
76:06:2b:b2:17:a7:59:c4:ad:a9:bf:00:8c:33:b2:
ea:43:30:5d:28:2e:1e:9c:73:67:c3:49:98:18:43:
29:0b:b5:ab:8d:3f:75:9b:6a:fa:9d:04:3e:f4:e1:
1c:6a:0e:2b:93:8a:47:67:43:ac:ac:da:02:a7:cd:
15:a2:cf:21:57:d8:35:76:87:b7:a8:23:9a:8b:20:
63:ea:a7:f2:4a:17:40:75:ef:cd:db:23:ab:51:bd:
32:73:bd:21:03:58:35:08:57:af:8a:ef:a5:5b:d9:
5c:d8:72:3d:67:e5:bb:ce:cd:80:e7:fa:da:76:94:
95:71:68:c7:47:2f:16:4a:ae:ff:e2:14:85:9c:27:
ee:27:91:ff:37:a5:27:69:36:ab:17:27:10:2b:cb:
82:e7:4e:c0:d6:d7:63:d6:40:75:1d:f7:e5:22:08:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:80:7E:2C:D7:6C:1B:92:61:12:60:0A:5E:FD:5F:24:D3:6F:51
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ec:5d:87:95:9f:c3:9c:6e:4d:dd:67:d8:ae:8b:8a:7f:ab:
76:4c:89:51:c4:71:02:37:ce:13:67:44:b5:23:65:f9:3e:27:
6d:8f:6b:2b:19:23:2f:99:09:21:26:c0:c0:d2:ee:c9:17:59:
18:17:92:a5:1c:26:1e:6b:0a:95:cf:78:69:9a:50:da:03:67:
44:c7:cd:70:07:74:bd:7d:45:3d:43:78:5d:31:b9:c5:99:22:
9f:a5:d9:8c:13:7f:eb:bf:08:da:2e:53:45:25:a6:d7:59:84:
f4:da:bd:e8:b3:94:80:8e:02:d9:64:69:01:3b:91:44:54:de:
5e:9d:f1:02:45:0b:bc:2c:24:fa:52:ec:49:f4:a7:f2:12:15:
8d:7e:bc:16:4a:7b:86:00:b5:1d:e6:27:24:72:2e:76:53:25:
c2:5c:8b:11:c3:41:94:36:69:e8:80:a3:08:16:14:1e:f9:db:
27:43:72:64:ed:47:80:70:06:2c:92:fd:fb:6b:bd:26:cd:04:
a6:61:65:58:d8:fe:2b:63:01:2d:f5:b1:a7:b2:f1:f3:2b:79:
28:1c:5e:43:d4:35:d4:fb:a5:92:0f:f4:21:37:28:6d:ee:50:
61:a9:4d:3e:1a:f3:75:80:45:a2:34:e1:f3:65:c6:64:9b:5f:
84:5f:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:45:33 2025 by rpki-client