Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: v135CFcDokqlhGMHGe4HF3Mk4l+zRRfH+sK/dCiYlwA=
Subject key identifier: 87:6D:7D:9E:B3:0C:6B:37:80:BE:E2:35:52:76:8C:EE:32:31:94:BF
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019A70A536E92A37D50D1F0D11B6706A7280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0F36
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: Asgvw0OQZN4hsTkyCfQ+i9s51O4pP+sSa/Xcoat5QlI=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:36:e9:2a:37:d5:0d:1f:0d:11:b6:70:6a:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=876d7d9eb30c6b3780bee23552768cee323194bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:f9:d5:4e:fb:19:74:c2:51:68:01:39:c9:
11:65:bf:f5:09:ce:3a:cb:68:09:19:5b:67:91:6d:
d2:e2:90:c0:05:4d:21:ce:81:41:e2:c2:4c:8a:97:
97:0f:5c:91:f5:c0:88:7b:25:c4:16:37:eb:1a:fe:
15:21:8f:06:cf:92:1b:35:98:ab:86:99:97:19:3e:
9d:e5:39:f7:14:a6:f0:63:5d:9e:64:e2:3d:95:db:
94:e3:28:e3:87:75:0e:4a:d3:c0:dd:73:83:50:ed:
86:74:18:60:8e:ce:b8:6b:ac:03:e8:a6:bd:70:02:
ad:f0:e3:1a:2b:fa:02:31:ae:09:37:d7:60:79:d2:
9c:64:1d:0d:c1:9a:a1:6f:d7:2d:21:7e:61:6e:62:
e5:98:81:75:2d:f0:6c:98:c4:a8:37:3c:ad:1a:aa:
94:8b:76:a3:30:2b:7a:91:96:26:bd:10:62:24:54:
88:a7:78:a4:14:b1:d2:fa:ba:5a:71:ea:e6:8d:ec:
2b:4b:3a:82:91:4b:8b:42:42:dd:e3:df:55:39:65:
66:a6:c8:0c:5e:63:2c:9a:a6:b2:e2:e5:20:62:bf:
24:ea:fe:77:d9:d3:85:05:0e:c0:7a:88:90:e1:a4:
ee:07:14:19:98:7a:2a:c6:66:4d:14:9c:ab:08:e6:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:7D:9E:B3:0C:6B:37:80:BE:E2:35:52:76:8C:EE:32:31:94:BF
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:16:5f:c5:08:c7:f9:47:43:49:23:1b:19:3f:07:eb:cb:41:
d4:67:b3:98:8e:7f:c7:ae:cb:d8:b7:f6:0b:57:5e:7d:81:87:
67:36:49:05:df:7b:86:41:bd:28:6b:cb:45:46:e2:e2:d7:7a:
1b:07:4c:c9:8f:2e:78:10:ac:8a:01:97:2e:1e:3e:3e:2f:24:
06:e2:6b:36:08:00:71:90:81:2e:ed:a6:92:19:30:26:4f:43:
3e:b8:31:24:5a:b8:51:60:78:ee:ec:bb:52:61:9e:17:34:a9:
a3:02:3b:d8:38:7f:67:a3:65:6f:bf:88:50:14:22:00:ab:ae:
27:80:5b:55:ed:d5:3a:88:3c:b1:d2:08:c1:9a:66:ac:95:05:
63:db:75:99:22:40:59:9b:12:2f:2f:fe:96:5a:ef:a8:11:93:
10:d8:10:3e:60:b0:4b:bc:1d:3d:20:8a:21:4a:4d:68:81:82:
f0:5d:4b:6e:87:7c:f3:b5:39:73:4a:ff:b4:03:c7:de:2f:cc:
eb:e2:45:c6:8e:20:71:90:41:87:84:91:91:8d:26:b8:42:79:
11:fb:36:1a:9c:8d:82:d9:1b:ad:f7:88:ad:c2:90:e3:1d:9f:
c3:6a:bd:0b:59:e5:0b:da:5b:eb:8d:2d:de:15:ea:aa:50:48:
de:f1:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client