Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: 3mT6F5VKY+XVcFLGx4NX7EtEiB0DcLcIZeURLhGm9/0=
Subject key identifier: 4D:FC:E6:7F:E5:BC:1C:FF:C1:23:99:B1:AC:27:06:F2:9E:A5:67:0A
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019A71B9018B58401D16B453FBCC9381526F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 05
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: DuUayi7tY9bIV5I_bemnhj2FKgU.roa (hash: 7q+2lmzKPBedZK74Yj01qUbUDa4feTYvUbWikyXAteg=)
2: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: e0cGMVJl4/9Vc4vNpfObDJC9LNP539IYAyBrd/gZhQI=)
3: mlI7o2WpJZBYyozovfozaIiNzyk.roa (hash: Ja13LeLJgj0g0MQUt0A5EkvjaYCybl3TMMz53xHlb0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:01:8b:58:40:1d:16:b4:53:fb:cc:93:81:52:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=4dfce67fe5bc1cffc12399b1ac2706f29ea5670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:4d:24:9d:c0:18:0d:6c:b3:86:e6:70:63:
af:2a:4b:07:08:7e:5f:23:98:8a:86:df:4d:86:e7:
c1:2e:94:1b:64:63:6b:16:7b:e0:55:1d:11:11:2e:
d0:81:ed:f8:3f:79:3d:1c:76:cf:fe:74:fe:64:01:
af:ff:6d:c2:82:f3:f6:69:06:a9:d9:ed:1e:3e:0d:
8c:d2:11:61:39:39:b2:79:c6:79:88:a0:72:d5:e9:
18:e2:d5:e8:ef:e5:9e:b6:8f:45:18:c4:6b:99:8e:
7f:73:d1:e2:e3:95:40:ab:b2:ed:b0:21:4c:75:33:
70:ca:aa:b4:66:b7:02:ff:c5:33:02:f1:6a:32:10:
89:42:f6:3f:c7:0c:33:06:cb:79:dd:7e:c6:38:24:
e7:70:36:83:f3:e5:d7:fc:5d:02:c4:f2:e1:6c:f7:
64:24:ec:08:16:bd:5e:94:fa:0e:f7:2c:5f:b0:d1:
7d:6e:bf:48:bc:61:20:e5:a3:62:5d:74:fb:47:48:
2c:23:e0:dc:75:e0:46:2d:8f:ab:cb:8e:b9:4e:0e:
9c:e5:eb:d8:78:14:53:1f:ef:8e:23:1e:cd:42:2d:
0d:02:03:95:be:e5:d3:b7:f0:74:42:f1:5e:ce:9c:
da:8c:a0:95:a8:25:55:b9:0b:03:80:71:57:70:dd:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:E6:7F:E5:BC:1C:FF:C1:23:99:B1:AC:27:06:F2:9E:A5:67:0A
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fb:9e:0b:ae:17:59:7e:57:c1:f6:56:b3:3e:b0:d7:f4:43:
a5:2c:c0:e2:79:e1:f9:79:6d:a2:e7:0f:36:b4:53:55:f7:ce:
2f:c7:fd:36:df:e3:50:3a:f7:1e:46:bc:80:13:4b:e3:3a:34:
9d:5f:0d:e1:0f:02:8d:b5:d3:6c:46:3b:b2:10:97:00:7a:1b:
22:c1:06:7f:45:00:88:04:51:ab:c2:4a:80:f4:60:eb:4d:64:
e9:28:88:72:00:b7:97:18:2f:58:ec:e8:5a:45:87:33:c0:3f:
b6:4a:91:b6:37:87:3d:4a:5c:68:6e:c7:4f:42:d6:63:49:bf:
81:f7:fa:76:0c:5d:5f:ee:cd:b9:ed:19:ee:5f:81:0c:43:a4:
b3:60:01:89:ee:aa:7c:c0:8f:a4:52:22:35:fe:99:ae:83:75:
76:10:e7:82:67:bd:ff:76:45:0d:ba:61:fe:81:0a:80:a6:ee:
e1:e1:bb:1c:71:5b:ec:fd:b9:8e:82:35:b7:c7:c6:fc:aa:84:
91:e7:2a:43:65:01:b2:f5:f0:6c:5e:8a:55:47:2a:05:23:ba:
fd:ff:ac:a6:28:e2:07:8c:1d:a7:2f:5c:f4:8f:a6:39:83:77:
d5:49:df:2a:e7:ea:77:d0:cd:db:bd:f4:af:e6:9e:5a:ed:3d:
ea:a8:aa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:09 2025 by rpki-client