Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: YNFKl8Nx1mMFP5NbDLsg74tulU1slPgVB/W8uVYpV8U=
Subject key identifier: C6:B6:8B:C1:43:37:72:78:BF:53:18:FF:D1:60:03:35:FB:F2:36:3E
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019748FA1C9DE268C5B46A169426EB7689A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: XCOJXMAg/6B0ugbmy1TQN7+lF3h8w0Bn2+DWxNBU0f0=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1c:9d:e2:68:c5:b4:6a:16:94:26:eb:76:89:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=c6b68bc143377278bf5318ffd1600335fbf2363e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:8e:f3:6d:39:d4:e9:fa:42:71:1e:05:3e:
e6:11:9c:02:34:ee:85:c0:b8:86:80:e1:f9:00:7a:
11:88:8f:75:bf:64:d6:66:8d:28:f6:c6:9d:98:cf:
4c:ce:84:e4:ad:80:10:e8:d0:64:29:30:1a:40:dd:
14:de:48:8d:b6:24:5f:72:0c:1a:07:db:7d:a6:83:
f7:8d:e0:f8:40:cb:c9:a7:6b:8f:5d:a4:5c:48:d3:
d9:37:ab:e6:5c:77:89:0c:26:03:6b:b3:d4:3c:6f:
84:2a:5f:eb:de:1c:59:cf:06:98:0c:2f:1a:99:62:
56:3c:21:03:93:88:5b:14:31:71:d9:a2:0f:cb:8a:
85:c8:f2:a6:15:9d:cf:74:43:c3:c0:f7:94:c8:60:
10:a6:08:d0:c2:bc:f2:f3:11:c9:a0:d3:86:08:6a:
5e:ee:a2:eb:ab:d1:2b:58:ed:4b:78:4a:ee:28:ae:
db:4f:c4:c4:35:b4:0d:04:13:ce:e3:55:21:ff:ae:
8e:8e:83:27:e7:26:5f:de:77:09:86:ba:65:bf:b3:
36:87:3b:ec:67:9b:c0:5c:61:f2:a3:0a:71:62:6f:
d7:3b:30:85:8f:3c:08:d7:20:b2:0f:0e:63:8e:11:
39:8f:06:cd:e6:52:5c:27:40:59:42:2a:72:c5:62:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:8B:C1:43:37:72:78:BF:53:18:FF:D1:60:03:35:FB:F2:36:3E
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:26:c3:8f:35:82:ef:3e:01:a8:4f:14:4b:01:ff:30:8b:ed:
d6:34:65:eb:3a:c5:a1:bc:a0:aa:b1:5b:22:fd:3c:2c:e3:a3:
ff:58:14:f4:f5:3d:d1:de:69:a9:92:6a:29:89:91:d4:00:f6:
b0:04:b8:26:ed:8e:36:a1:60:41:3a:21:23:5d:ef:57:11:3f:
75:d0:5b:de:8b:c6:1a:20:ab:a6:51:e0:fc:5b:0e:ea:6f:ff:
a5:d7:69:d2:a1:e3:20:79:66:4b:f3:ca:f4:b4:96:0d:56:97:
1d:2d:fa:37:b6:17:08:9c:2e:6b:dc:4f:1a:a2:44:a7:26:ec:
0c:a5:0b:6f:a1:c4:23:c6:cb:07:c2:c6:5c:84:3f:f7:3d:23:
bd:ff:39:f1:e6:7e:bf:83:b6:20:de:dc:b1:9d:1e:51:ff:27:
9b:14:77:98:09:7e:63:ac:22:2a:1c:50:d4:4a:8a:9f:a9:eb:
8a:45:2f:ec:00:78:4e:4c:9e:86:00:5b:ef:6e:9e:37:ef:a5:
f1:70:db:99:2c:ea:d1:98:3b:6b:4e:48:59:f7:65:fa:b1:a8:
ab:35:e2:63:c7:52:f7:fd:31:cc:10:5e:16:a1:53:5c:42:91:
93:12:6a:96:a5:9e:0f:a9:60:fc:17:a6:d7:47:be:58:22:18:
b4:ed:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:40 2025 by rpki-client