Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: D4mHdM1Mk2V3ca2TPI5ZS9e3a5OY3fw4LtEg/iO6ebE=
Subject key identifier: 38:D8:35:D3:1B:5E:E7:75:D8:D4:70:B8:16:D7:3C:D2:54:41:C4:D3
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 0197B9A1DE1F6F572E315F0C404A2B8445FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 03:01:22 +0000
Manifest this update: Sun 29 Jun 2025 03:01:22 +0000
Manifest next update: Mon 30 Jun 2025 03:01:22 +0000
Files and hashes: 1: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: DketSDNuFAb1GZluq6IYtZtGx+1bdtrT4K85LZtXC/k=)
2: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (hash: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:de:1f:6f:57:2e:31:5f:0c:40:4a:2b:84:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Jun 29 03:01:22 2025 GMT
Not After : Jun 30 03:01:22 2025 GMT
Subject: CN=38d835d31b5ee775d8d470b816d73cd25441c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:58:10:dc:12:cd:a9:c1:62:bc:30:8d:fa:
11:6a:1a:64:46:dc:31:c3:d3:8a:9a:0f:d5:f1:e8:
a4:cb:b4:f4:8b:0b:9b:a6:f9:0c:0e:61:11:2e:6a:
26:25:c7:7d:3e:27:98:74:44:75:13:0c:48:3f:50:
34:bd:4e:b3:35:d8:56:fb:ab:8b:ba:f2:14:79:b2:
73:92:9c:55:6f:ee:97:cb:b2:fc:b7:77:9d:d7:95:
1f:cb:94:29:b5:b3:b8:33:a5:f1:9f:51:1b:82:5e:
99:6b:3c:3b:a7:b6:a1:5f:5e:e3:00:d1:60:7d:b1:
88:83:c4:52:ad:be:f3:21:76:c8:f7:a5:a3:09:86:
e4:95:77:fd:ad:2d:45:eb:91:80:3e:53:02:2c:8b:
2c:02:27:46:3f:5e:06:78:0e:8f:30:81:c0:bb:cb:
52:4a:02:e2:d7:2a:21:aa:aa:d8:10:90:91:c6:fb:
14:76:ee:f8:4a:e2:2e:80:6e:8e:33:e5:af:df:ed:
d3:1c:5a:13:6f:76:ce:c5:35:c6:30:20:f4:3a:3e:
3c:08:dc:0e:21:18:23:bc:ee:8d:12:0c:dd:e7:03:
4f:b2:91:30:82:6b:d0:85:26:a8:7d:e3:f7:a8:aa:
b5:2e:af:40:5c:f6:0e:5a:f2:5c:68:d5:2e:fb:c1:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:35:D3:1B:5E:E7:75:D8:D4:70:B8:16:D7:3C:D2:54:41:C4:D3
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b9:02:30:d0:76:a3:81:c4:6a:79:83:03:71:7f:1e:64:bb:
af:a7:e8:6d:c1:aa:d2:84:05:db:85:1c:b6:5b:96:bb:6e:fe:
be:ff:2e:f0:26:8f:17:00:4e:94:cb:2c:91:92:87:b9:bf:0a:
95:89:58:1a:dc:2b:74:e1:1b:8c:e8:17:6f:b5:2c:40:d0:5b:
2f:08:58:8a:b7:8a:fd:67:d5:c6:28:fe:90:04:02:62:1c:14:
b9:da:d6:6b:f5:46:2d:4f:2f:8d:c0:a3:a9:cc:c9:d8:42:7b:
74:d8:36:88:2a:8b:5b:82:8c:2e:7a:e3:c1:cf:10:6c:00:b1:
a4:f3:50:f7:57:8f:c9:d1:fd:8b:90:59:78:f1:bb:56:9a:3b:
d7:bd:63:59:c4:bc:8d:7c:c7:11:67:0b:78:c4:58:70:de:a0:
68:31:97:d1:b5:0d:2b:dc:74:bb:00:af:87:8b:ff:eb:72:d0:
28:1c:2c:f1:2d:e7:44:3d:f1:69:51:29:1e:8d:09:aa:a9:bb:
05:e4:76:de:35:fa:78:84:34:ca:d1:6b:a6:2a:c0:ab:32:ec:
ff:66:d9:a0:8b:89:de:0a:52:c8:8d:a8:84:3d:c0:e2:ac:d4:
30:34:1a:f1:9f:ea:0c:73:1d:5c:60:d6:9a:18:ff:37:df:c5:
cd:aa:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:18 2025 by rpki-client