Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: 2vfqbJQ5y8+QPxpjTwuQF24FXRqhT00qDyLIQTHaE3I=
Subject key identifier: 19:CF:B1:5B:69:08:1C:EA:5D:82:EB:8A:0C:A7:C1:6D:7F:7D:39:44
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 019917649478EB1F6D6004A4919426DC59E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0EDC
Signing time: Fri 05 Sep 2025 01:01:31 +0000
Manifest this update: Fri 05 Sep 2025 01:01:31 +0000
Manifest next update: Sat 06 Sep 2025 01:01:31 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: Gq9KDm6Jr6NRbaXom2mnFcQJbYJNQaVr5/C5sebQdE8=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:94:78:eb:1f:6d:60:04:a4:91:94:26:dc:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Sep 5 01:01:31 2025 GMT
Not After : Sep 6 01:01:31 2025 GMT
Subject: CN=19cfb15b69081cea5d82eb8a0ca7c16d7f7d3944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:cb:d2:58:e8:56:33:f1:ff:b8:ae:94:c6:
b1:ef:0a:76:39:77:49:24:e3:88:be:b5:63:20:f5:
e8:75:e5:13:7d:98:cf:32:fa:7c:d3:d7:8b:44:54:
f4:9b:d7:e7:ef:be:b7:d2:3e:ff:61:5f:35:d1:63:
2f:90:15:40:e1:9b:b3:ff:a2:63:15:c2:33:87:95:
2e:a8:17:87:13:bc:6e:f1:25:b8:a6:a4:ae:7e:8b:
02:76:d0:e8:91:0a:bf:86:90:de:4f:a2:11:19:fb:
9b:40:2f:99:2b:51:fc:6f:8d:56:a1:9e:72:c1:54:
4f:b0:af:e9:c7:4f:41:6c:4b:e7:b5:c8:36:cc:f2:
6f:8b:04:e8:40:d4:3b:92:13:d6:81:dd:6c:48:f9:
e3:75:47:e7:19:ce:a1:36:e0:24:e2:90:e2:cd:9f:
96:3b:8d:af:99:1e:a4:f7:dd:3c:13:d0:c7:a0:b4:
97:f5:70:ad:38:c5:54:f7:65:eb:c6:0d:f2:e5:f9:
86:54:c0:20:8b:cf:96:65:27:c3:f8:f3:1f:3b:d7:
fc:05:09:26:f4:4b:66:4d:53:3b:b6:a1:f4:05:43:
29:97:ed:0f:3d:d7:0b:06:e3:d7:25:52:08:a1:06:
7b:ec:3f:fd:3a:6c:b6:b6:69:8e:52:45:b2:4c:fb:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:B1:5B:69:08:1C:EA:5D:82:EB:8A:0C:A7:C1:6D:7F:7D:39:44
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:c5:98:dc:b3:61:02:3b:d6:75:47:03:db:a1:70:0b:be:
f0:6c:9c:75:5c:83:96:b9:41:46:5a:d3:b0:a3:b4:96:5c:54:
c0:29:c9:a4:29:81:3b:59:1e:69:67:32:9a:5b:9f:6c:43:17:
ee:2a:42:1a:ba:89:a2:43:24:d8:90:6a:14:e1:ae:1b:b4:a1:
5e:4c:0d:3e:f9:8a:03:83:c2:61:57:ab:51:9d:92:90:2f:b9:
04:10:0a:50:33:ec:e0:b5:85:49:8a:fc:7d:6c:65:7c:81:d3:
b0:dd:65:85:3b:0b:86:1f:db:40:fd:b3:6f:ef:b2:71:8b:dc:
a9:d2:31:58:e7:cf:c6:02:5d:1f:c0:59:e6:d7:b2:2a:a3:c6:
8d:a9:51:74:79:de:e8:04:f9:12:97:1f:3d:3d:1a:7a:de:3b:
e4:14:ce:1a:33:b4:23:17:59:5c:95:30:46:25:4b:5c:17:6b:
03:13:da:e3:9e:2a:42:d3:a6:73:f7:28:41:e8:e8:b1:58:0d:
a1:c1:b8:b4:c6:6f:ef:9f:8c:4b:c1:52:d1:ce:5d:d3:73:d9:
25:84:8d:51:02:e4:d3:3a:1f:a8:da:6e:d2:ef:f5:c7:18:4e:
68:93:51:47:21:6a:ee:54:67:e0:2f:2c:3a:db:21:fa:03:84:
b2:9a:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:52 2025 by rpki-client