Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: Ls/ZFtGN1HGVgLuQ7mzkfkN1pxfpvSw/h9UI6F3Uj1A=
Subject key identifier: 78:AD:A7:7E:46:A3:23:89:5A:AF:4E:C3:44:4A:27:1F:67:35:49:CB
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019A251CE37B4D7CAFBE82BD56ABC0B4C282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 10:00:41 +0000
Manifest this update: Mon 27 Oct 2025 10:00:41 +0000
Manifest next update: Tue 28 Oct 2025 10:00:41 +0000
Files and hashes: 1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: n2i7wlXLUUGk/6MeknJeq8RlJ5aYECPT6XMyg9PaMd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:e3:7b:4d:7c:af:be:82:bd:56:ab:c0:b4:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Oct 27 10:00:41 2025 GMT
Not After : Oct 28 10:00:41 2025 GMT
Subject: CN=78ada77e46a323895aaf4ec3444a271f673549cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:a2:e8:92:d2:25:c8:15:9d:5e:70:50:67:
6b:0a:7b:94:17:0c:a1:f7:97:b7:bb:f3:01:fe:a2:
e7:23:36:59:35:2e:1b:e3:ab:ec:a3:35:8e:42:a6:
52:2f:b7:d8:69:40:72:11:02:48:a8:f9:e6:45:10:
f3:fe:e5:a4:f3:52:e9:27:47:3d:bb:e0:97:0a:55:
89:40:b5:ef:ba:49:3c:7b:e8:77:e0:dd:53:3a:47:
5b:65:a1:dd:8f:f0:87:63:f2:9b:4b:cb:bb:1c:ba:
07:91:41:cb:e8:dc:0e:78:2b:05:6c:6c:41:eb:c3:
19:10:7e:df:4a:49:f0:4c:22:3d:46:97:f4:43:08:
b2:ec:81:23:22:12:8e:d2:38:ff:1a:d9:7e:c8:34:
df:38:ff:9c:0b:8c:f6:c9:1e:66:9f:2d:d4:4e:ea:
0d:b8:bf:2a:14:c2:bf:cf:9d:61:57:20:ae:dd:15:
f8:85:16:5a:9e:97:10:93:f0:9b:36:b1:19:3e:52:
f4:37:78:a4:1a:3a:33:30:5c:28:fa:15:8a:d3:3b:
53:42:97:dc:ba:81:65:08:1f:50:90:62:d4:15:97:
c4:21:d3:a8:a5:d5:9b:c4:ca:3b:d4:1e:21:dd:a8:
18:69:a2:a1:75:93:67:3f:06:5b:56:37:d7:b8:a3:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:A7:7E:46:A3:23:89:5A:AF:4E:C3:44:4A:27:1F:67:35:49:CB
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:51:a4:b3:f4:c8:49:cf:ed:11:e0:f5:72:fd:6c:cb:0d:
6e:04:67:fb:d8:4c:e0:ef:8e:e6:cc:69:c1:0f:50:93:06:fb:
7b:a8:fb:a4:b9:3d:2f:6b:39:09:75:31:11:29:05:d2:8b:a0:
c6:bc:30:3c:9d:5f:f8:a9:98:81:93:5d:44:77:91:12:93:ac:
53:a0:10:ba:24:09:23:d4:5e:62:13:43:e7:c9:7f:ca:bf:bc:
f5:ac:90:0a:2b:dc:0a:32:7d:27:54:bd:64:1a:64:90:fa:65:
e8:8b:de:d5:ee:95:b0:a9:0b:64:18:3e:d7:11:e9:27:59:25:
6f:2d:70:90:97:b4:2d:27:d2:10:fc:60:b1:0c:51:61:68:31:
28:23:dc:3a:cc:e6:db:cc:5a:45:b0:68:2f:64:a2:6a:15:90:
c5:bf:f2:7b:f6:56:96:f8:8a:63:44:e5:46:87:d8:ad:8b:41:
f8:9b:b1:65:34:b1:b2:1e:7b:42:7e:5c:ca:6f:24:63:33:6c:
16:40:08:ca:84:45:fe:0b:61:1e:7b:bf:b2:10:12:0b:84:94:
bb:8e:76:24:74:05:44:30:6c:e9:97:7a:7d:45:3d:62:66:b8:
50:b2:9a:e7:2b:49:85:2c:cd:0e:9a:38:54:f2:19:f4:38:b2:
02:2c:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:56:56 2025 by rpki-client