Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: zW0rbT3DYlluSuR+d6aKgPKXh/FKk6rUqCYAOvOINEg=
Subject key identifier: 97:39:42:E4:8B:48:49:0F:B8:25:06:B4:20:4A:17:CA:A6:D4:6F:D0
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019A72264B36C06918D825DF6A5284271A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: 8NXIBalh/qm+RD41b/ybx3Df3CZ6uc/YLwwjp3C6BSg=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4b:36:c0:69:18:d8:25:df:6a:52:84:27:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=973942e48b48490fb82506b4204a17caa6d46fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:dc:1e:d8:da:ba:81:6b:12:cd:d1:d4:ce:
57:ec:6c:d2:73:60:78:29:ce:46:d1:fe:b3:2e:0a:
4c:e1:87:7e:25:8d:f7:c2:3d:a2:71:ed:86:2f:48:
2c:17:2a:49:05:ad:be:c2:8b:d6:bd:20:6e:41:73:
74:b0:55:e2:3e:72:40:52:ab:20:3b:68:b9:6d:c0:
93:b2:8f:6d:22:13:69:28:3f:a9:41:5f:b1:b8:ba:
8f:e4:ca:c1:73:ed:2c:00:a8:71:05:c6:57:f2:6f:
a3:5b:aa:d3:88:ee:6e:64:1f:87:8a:47:16:2d:09:
b3:83:46:c4:4e:a0:30:91:d0:6f:79:8f:f5:dc:17:
d2:45:65:fe:d1:95:6d:fd:65:25:31:0b:42:18:a0:
aa:ef:cf:2d:19:96:02:73:6d:77:50:7f:a9:65:22:
ea:94:8c:72:2b:99:59:18:80:62:aa:01:4a:2f:a9:
84:b2:8a:e2:e0:0c:ee:f6:26:15:5a:71:20:92:6a:
36:53:b4:23:64:70:cb:90:18:80:a1:1e:e5:d6:38:
4a:d3:df:cb:53:69:2e:f0:bd:6e:37:05:8e:cb:39:
cf:9c:41:93:6e:55:fb:79:f9:d8:6a:3e:68:5d:6d:
6e:8a:43:a1:d2:40:5c:fa:91:f5:ef:04:fd:c7:c5:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:42:E4:8B:48:49:0F:B8:25:06:B4:20:4A:17:CA:A6:D4:6F:D0
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:95:c6:33:10:6d:91:6d:fc:a8:f5:b2:c5:f1:fd:2c:ac:b0:
40:19:28:1b:bf:7f:37:c8:92:61:cb:f3:a6:cd:56:57:3d:b4:
d5:9b:42:62:b6:4a:0e:3d:3f:48:c4:01:cb:47:22:11:69:f8:
d5:0a:37:d1:7a:d9:27:4a:9c:cf:9b:7a:12:1c:cc:63:ea:f9:
23:fb:a4:b9:3e:56:b2:20:a3:92:98:c2:9a:14:0a:7f:08:8a:
b9:c7:3e:5e:28:ee:ff:7d:07:2c:aa:4e:bf:f5:9a:61:21:20:
f7:94:38:a6:69:f2:bf:05:01:21:00:33:af:54:eb:4a:fd:b8:
45:8a:90:41:51:76:11:0a:97:6e:15:a6:01:c6:56:d3:41:80:
80:cb:5a:3d:57:b8:3a:b0:97:e6:26:0a:b2:6f:ae:38:7c:a9:
83:49:e5:4a:2e:0e:4d:ad:f6:d4:7f:d9:57:7e:8b:78:59:a9:
37:ba:5a:c7:bc:46:b7:75:a3:ed:dd:b2:2c:8d:d0:ef:a0:fb:
cc:4f:07:64:85:85:ca:21:9f:17:4d:da:76:d7:7d:3c:6f:4a:
9e:78:da:54:89:94:de:7b:91:ce:ea:f1:b5:90:b9:4c:6a:cf:
98:15:84:f4:37:54:2b:48:30:a5:76:18:5f:ed:e3:24:3b:f1:
62:90:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client