Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: Lwa0HOoz6SOSYLnpBUZDE2m4r4ZAFka0dM5rcnCNEUI=
Subject key identifier: 9E:E4:34:0A:E5:59:88:84:01:3F:27:A5:59:F9:A1:E1:02:98:6E:C3
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0199FBEC2276725E33F9D215CA27D2E1FCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: HyGOoXxcXBOubArFi4yy0epgV/u5gGb2ZnnA5NPV4iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:22:76:72:5e:33:f9:d2:15:ca:27:d2:e1:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=9ee4340ae5598884013f27a559f9a1e102986ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:4c:f5:dc:89:a2:7d:19:bb:0e:ce:88:6d:
db:aa:96:00:59:73:6d:de:27:93:9d:b0:a6:9c:f5:
6b:37:54:84:b5:ed:04:4d:67:be:20:4e:e0:a4:14:
f8:0c:e2:6d:68:91:03:c3:08:00:3a:00:b1:44:80:
f2:c0:5e:e3:d4:24:e2:cd:b5:cb:78:43:82:a5:59:
ad:73:16:69:bd:c9:51:c4:c1:f1:f8:41:54:db:bc:
0e:2a:a0:10:74:2d:95:2f:89:96:df:90:22:ad:1e:
ab:fd:71:8b:00:fa:91:bb:e3:c6:51:c0:95:db:d4:
d8:44:17:9f:d2:cb:eb:37:76:40:b9:08:9c:40:89:
47:3a:5a:0c:2d:ba:0e:d0:cf:e7:b8:dd:f1:76:02:
e4:e0:84:d1:a4:8d:95:46:ce:a2:19:45:57:e3:bd:
bc:2f:92:ba:4e:01:20:36:a3:dc:e1:e8:c5:2b:e1:
0b:b1:51:31:04:21:77:ca:f7:0b:91:58:58:02:01:
49:af:e0:5f:c5:d1:7e:e3:27:e9:cb:f6:0a:7b:79:
b2:fc:40:2e:df:0e:f3:28:d8:c8:6b:92:da:5a:36:
38:dc:c2:1a:19:a6:fb:78:c3:49:58:ec:c1:79:b6:
1d:ec:33:e6:bb:f2:38:f0:11:6e:76:92:ac:c3:a5:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:34:0A:E5:59:88:84:01:3F:27:A5:59:F9:A1:E1:02:98:6E:C3
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:40:8a:dd:af:40:22:38:05:31:18:e7:4f:03:6b:a8:42:
a8:77:16:63:26:3d:92:01:b6:77:6a:78:4b:6f:1a:bd:5e:82:
48:c5:f3:06:f8:b1:d6:ef:87:03:3b:1b:eb:b9:7e:8b:6e:80:
13:58:29:e0:ee:72:2f:3e:f7:79:2b:b5:50:c5:49:dc:bb:d1:
ff:75:8e:62:94:90:53:ef:71:aa:09:3b:d1:c3:97:da:7f:c9:
28:f0:b2:dc:40:15:f3:9b:a7:3f:0c:2d:08:9f:58:74:de:61:
a9:cb:e6:9d:c8:e9:ef:8e:0d:d6:79:05:47:3e:5e:95:df:15:
73:16:ea:ed:2c:78:fa:97:d5:81:48:e5:6d:01:6f:14:c8:65:
e5:bb:98:f0:7b:d7:c4:f6:36:13:ae:f2:c1:25:5e:da:57:f9:
42:89:88:c3:b2:c3:f9:c6:ec:77:3b:89:ee:c7:43:d4:91:96:
a9:40:3a:d6:48:68:11:b4:16:a7:fb:79:10:13:eb:37:cd:b6:
61:ac:86:ea:b2:3b:37:38:02:83:3d:c6:88:31:6b:bc:ad:40:
df:54:cf:5e:28:28:0e:37:24:b8:4a:da:5e:ab:aa:24:1b:23:
21:94:8a:fd:ae:02:a5:5d:29:62:0c:92:fb:cd:06:95:30:56:
e7:93:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client