Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier: Snd9n93UD4Lhue+4FTmKAFenkYo9Zu4XUtMRpkmzppQ=
Subject key identifier: 15:3D:F1:57:E0:8F:2B:C0:5F:DB:22:F2:E7:1C:99:4B:54:26:23:D5
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 0198D998C0276E8840A9498FC8CA4725B075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number: 0CCE
Signing time: Sun 24 Aug 2025 01:02:03 +0000
Manifest this update: Sun 24 Aug 2025 01:02:03 +0000
Manifest next update: Mon 25 Aug 2025 01:02:03 +0000
Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: HgT/dmG6/mb46MScSnqK/sG1sX18HB45eA+t0VE1u14=)
2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Aug 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:c0:27:6e:88:40:a9:49:8f:c8:ca:47:25:b0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Aug 24 01:02:03 2025 GMT
Not After : Aug 25 01:02:03 2025 GMT
Subject: CN=153df157e08f2bc05fdb22f2e71c994b542623d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:2d:56:c9:95:c7:ad:a6:db:fb:cd:07:25:
a7:51:04:2a:9b:95:c5:97:7b:e4:e2:b2:eb:c2:0c:
b0:ac:ba:a4:7b:d3:e7:11:df:84:bd:43:02:92:80:
46:89:9a:57:61:7f:e3:ef:fe:cb:c4:45:8d:de:e0:
f7:ea:2a:c2:29:b4:3a:6a:0e:4d:67:11:44:da:40:
05:25:fe:fa:8e:5f:13:6e:39:cb:39:38:83:d5:e3:
7e:85:04:54:72:b4:39:12:fe:60:66:e2:46:90:93:
5d:91:b6:bf:f0:0e:42:e2:2f:be:09:b3:04:71:ac:
dd:62:5a:e9:2f:6f:6d:16:43:a5:16:e7:c0:e0:6b:
55:7c:80:d2:e1:aa:79:8b:94:3e:21:eb:6c:70:2e:
c0:d7:09:24:a9:97:8a:f6:d7:46:0d:c0:66:aa:c2:
87:c0:02:98:93:5d:99:b9:ff:54:30:28:53:47:06:
d9:a5:73:d2:fd:ab:a8:62:b9:04:06:4a:b1:ab:f9:
3f:b4:8d:95:79:aa:58:10:06:06:74:f4:c7:9e:7b:
fb:6f:d3:e5:1f:20:30:5d:f1:28:20:5b:8e:fd:e1:
dd:fd:81:c8:35:3d:b5:89:df:e1:05:20:a1:cb:09:
98:0a:bc:40:54:0b:69:8d:fc:81:51:de:cd:22:04:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:F1:57:E0:8F:2B:C0:5F:DB:22:F2:E7:1C:99:4B:54:26:23:D5
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:a8:48:fe:37:0a:71:fb:cd:1e:9a:1f:23:79:dc:50:49:
9a:15:94:ac:b6:4f:23:e4:48:29:c8:dc:53:bf:b3:c9:34:24:
c5:b0:c9:46:90:2d:d1:1f:8b:38:8b:b9:c5:51:ac:f1:c4:42:
a0:80:c7:b0:64:40:49:9e:ec:aa:2f:04:10:d1:62:e0:f4:6b:
d2:8b:04:99:7a:fb:a8:a8:c0:89:24:c6:c1:26:bf:13:85:6e:
8d:84:3f:3e:fc:2f:7f:17:57:ed:0c:3a:1e:6f:ca:0b:5a:3e:
a9:62:f1:30:70:71:14:6e:6f:27:50:ac:49:f1:cd:39:f4:40:
03:b3:de:30:03:99:20:49:19:91:b4:a2:f2:01:3e:da:47:aa:
3c:99:c6:dd:83:00:4b:13:a0:c3:79:23:56:af:16:a5:a7:22:
5c:e3:82:b3:45:8b:a3:56:ee:bd:99:10:2b:ef:25:ac:d3:13:
ec:5d:fe:0a:43:ad:2e:4f:91:5d:8d:26:6e:0a:8e:9d:5b:60:
12:ef:42:51:7f:bc:ca:53:c1:ba:15:09:69:d7:df:fa:0c:b4:
38:b7:41:24:24:55:0c:30:75:82:ba:54:72:f7:39:84:d7:27:
bc:94:4a:50:02:72:18:b8:bc:64:69:d5:ed:93:34:bd:7a:02:
f5:76:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:47:09 2025 by rpki-client