Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: 1r8syZMV2yzQedEqvhVc9oMqwfBYt5wggE5J8b/RNTo=
Subject key identifier: 8B:9A:98:88:27:C5:35:05:54:7D:C3:EC:F9:28:1D:7C:E6:AB:BF:89
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 0199240D4DFBB2461E7879962326496123F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 12:01:15 +0000
Manifest this update: Sun 07 Sep 2025 12:01:15 +0000
Manifest next update: Mon 08 Sep 2025 12:01:15 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: QafgApW2bQYy/LDhjLKSA1aPrQ0BRKtYlQffsF22Y0I=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:4d:fb:b2:46:1e:78:79:96:23:26:49:61:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Sep 7 12:01:15 2025 GMT
Not After : Sep 8 12:01:15 2025 GMT
Subject: CN=8b9a988827c53505547dc3ecf9281d7ce6abbf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:56:8f:9f:c5:28:dd:64:29:31:8a:c7:9d:
b7:91:5a:95:f9:ae:9c:54:45:98:9b:6b:e4:f1:a7:
0b:47:e5:ed:ff:7d:b1:1c:91:f3:5b:51:25:65:86:
0b:ab:be:6b:35:e6:13:57:1d:5f:dd:ef:7e:25:48:
7c:ba:06:9f:11:8e:e9:88:77:f0:83:d0:67:52:d8:
0f:76:8f:e6:7a:59:a9:71:8e:22:d3:5c:bf:15:ef:
94:21:b7:5f:14:48:15:75:d1:57:c6:61:2f:f8:c3:
37:7a:29:8d:5c:45:0b:e5:a1:74:cb:d3:3d:8b:39:
53:63:97:f9:23:51:bc:32:57:b1:2d:a2:9d:ad:b7:
58:93:f6:35:70:cd:2e:68:4e:eb:0d:34:e6:e9:b1:
0c:c9:c8:01:c9:63:c1:c7:78:64:01:08:48:ea:72:
c0:66:7b:62:3e:b8:8b:90:ab:70:03:ac:bd:4a:d0:
56:51:b1:ef:72:84:2a:3e:e9:0a:76:52:7b:2f:7d:
b5:f0:ff:69:75:48:2e:cf:61:02:79:3b:ca:35:d7:
29:15:94:c3:e9:fc:b8:8d:55:90:48:e9:4f:85:ba:
fc:35:2e:a8:6f:a4:b8:4a:19:18:fa:98:83:36:db:
77:61:c7:76:29:33:9f:7f:1b:71:cb:cb:e1:b3:61:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:98:88:27:C5:35:05:54:7D:C3:EC:F9:28:1D:7C:E6:AB:BF:89
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:a3:d6:8d:08:e3:5c:c0:70:cb:bf:7e:55:06:08:eb:e3:
b4:c1:08:23:69:66:cf:9c:d3:1e:08:0e:71:25:e7:9e:b8:4d:
df:82:cb:aa:33:1d:fb:8e:d2:97:97:4b:01:13:6a:25:9b:e6:
be:b5:04:86:c6:d3:b6:7d:c2:20:c4:64:3e:ae:3d:4d:44:51:
3a:63:22:f0:90:3d:65:81:5c:ef:dd:2a:d2:e1:82:88:fb:81:
35:7c:03:e7:f1:33:52:f0:dd:3b:cd:ad:fd:5f:d6:93:f1:3e:
f3:5e:6f:01:91:15:85:15:e5:f4:21:25:bd:47:3d:bc:05:15:
32:e9:e4:18:32:d3:a3:94:23:12:24:b8:72:0d:32:82:f8:5c:
85:cf:f5:0a:cd:02:80:d2:a4:56:b8:51:01:94:26:8b:df:7b:
9c:13:b0:fc:d9:e8:73:3a:17:ab:8a:ea:24:ac:db:0d:53:bc:
a3:af:d3:0d:75:b9:c4:45:6e:34:59:8b:7d:9e:bc:8f:cb:b4:
34:bc:35:1a:f8:69:3f:18:8d:f5:bb:bf:ed:88:e3:6f:8b:c5:
e6:d3:b3:bc:7e:38:ec:07:ee:6a:c7:d6:92:cd:be:94:14:d1:
05:61:f3:79:b5:b0:62:c9:3c:da:66:3c:c7:6f:33:84:04:c7:
00:9d:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:23 2025 by rpki-client