Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: xad3aUhq/kX3mH50wP2hT0HUMQ4fe/FU8jZnAlE8L4s=
Subject key identifier: 63:8C:10:56:47:A1:6D:35:D4:64:A8:93:7C:D7:33:05:6B:74:4B:A9
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0197B6A03A649BD1D0E84306BDCEA821E0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: kQ8BsdN7E0Qkj6f7f6LRtlHNmgkXzuE2LZicD07/vH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3a:64:9b:d1:d0:e8:43:06:bd:ce:a8:21:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=638c105647a16d35d464a8937cd733056b744ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:4b:df:bd:11:ca:a6:e8:93:5d:99:d8:d6:
e5:bd:cc:c9:46:15:71:5f:2d:72:25:38:2c:61:0c:
cc:57:08:65:51:7b:f6:2f:c9:da:1f:fd:2b:a1:9e:
03:3c:9e:a6:38:e7:61:8c:94:a9:6d:82:bd:a9:3e:
79:40:ef:e8:72:05:5a:0d:6b:03:14:72:19:d0:e1:
c0:25:6d:bf:59:09:97:f2:35:40:51:f7:46:f8:cf:
56:0e:eb:09:0f:b9:a2:79:5c:d4:2b:58:0f:e0:c3:
7e:8c:a2:50:59:ce:09:69:25:89:e9:fe:8c:10:3b:
8f:73:02:53:0a:92:99:ec:0a:61:74:27:bd:9c:56:
e5:8a:75:25:e8:00:3b:85:8e:7e:ee:bf:83:78:df:
d8:37:ad:f3:e5:1f:63:f6:44:fc:ef:f9:2d:ca:6f:
e3:0b:d7:58:51:c6:b4:36:8f:dc:0f:e8:04:f4:81:
a4:05:e2:56:12:0f:a4:b6:1f:52:cb:f8:a6:0b:e7:
40:f3:0e:2c:4a:20:64:c2:71:ba:90:7a:a3:2d:8a:
33:f0:22:8d:1c:22:37:81:89:e7:c0:37:04:5a:e0:
c6:66:96:f2:b3:ed:59:6e:62:33:57:a0:18:3c:87:
2a:db:57:22:f4:ab:21:00:09:1b:59:58:f1:0e:a9:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:10:56:47:A1:6D:35:D4:64:A8:93:7C:D7:33:05:6B:74:4B:A9
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:d5:42:1e:a0:00:97:55:4d:91:78:59:d6:b3:8e:a3:06:
ed:cf:1b:ff:0a:e6:9d:de:24:13:91:b9:f6:6f:85:0c:d9:51:
2e:41:69:bc:ee:c2:70:bf:16:ca:56:72:ff:56:43:04:8c:3d:
3e:58:92:dc:64:60:79:ed:24:4b:ce:7e:0b:8b:4f:1b:ff:7f:
d4:ee:70:1c:1c:45:c7:57:99:4c:2f:5c:e2:b4:17:b1:78:81:
9b:6a:33:19:f3:b8:95:6d:cb:63:20:3d:e2:b3:14:f5:54:3c:
f8:b4:e4:33:43:e1:de:e3:10:af:8a:8e:c0:68:99:43:92:4c:
ea:77:3e:40:c4:4e:ff:a2:1e:a7:86:7c:24:eb:94:b0:d9:47:
77:64:16:e0:14:74:ce:bf:40:bc:59:8a:50:a2:4d:e3:5a:a0:
7b:ac:b2:2e:b1:f1:61:1e:42:c2:7f:d8:2b:b0:ba:65:3c:76:
b4:ce:06:90:6f:04:84:04:7c:82:fd:75:fa:34:78:fa:6b:fa:
a9:1d:05:53:98:8b:2d:bf:9f:0d:eb:6e:f5:49:2a:e4:53:31:
7f:bf:56:1b:a9:56:94:51:cd:2d:9e:8d:2b:64:ff:99:bc:4b:
d5:3c:4c:a9:2b:6a:e6:21:4b:a5:be:98:bc:23:30:15:53:de:
a1:5f:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:09 2025 by rpki-client