Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: dpi17HGl5b49lRxK0ZgLk/IE9HQQlRnX0pWMCALsvIE=
Subject key identifier: 1E:A7:6D:85:53:2D:E2:31:1C:67:5C:46:1F:88:60:12:68:78:8D:6B
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0198D473A7E2FD1C5ACD43DD21EE48D167D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: OqKRxCQS/i5ltPn+WMQVOSlCQZhHPJWGQLvHa90LeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a7:e2:fd:1c:5a:cd:43:dd:21:ee:48:d1:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=1ea76d85532de2311c675c461f88601268788d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:a5:b8:b5:67:c3:b1:dd:0f:08:a9:b6:ed:
54:36:33:e6:27:16:5a:08:43:8f:9b:4e:f6:d0:90:
6e:c6:a9:e1:a0:e0:63:7e:e5:c0:75:a5:b9:71:c4:
ec:29:e0:72:9a:38:86:07:75:38:2f:22:4a:8c:15:
dd:28:17:e5:29:1a:88:46:b0:c2:9a:19:52:cf:38:
2a:20:a7:82:3e:36:ce:3a:c7:85:46:25:ff:e9:2c:
4b:68:f9:1e:56:77:04:49:04:b0:72:0f:a6:1c:54:
e5:04:82:bf:99:3c:eb:b5:e6:25:1e:93:34:05:f6:
8f:1b:73:ac:e0:0a:dc:d8:88:0c:dd:ae:fb:b9:10:
b4:f4:ef:5d:f9:63:be:31:9f:cf:41:d7:56:a6:e6:
b1:6a:45:d6:86:d6:a7:f2:e4:1e:90:1e:10:6f:f4:
08:59:1e:21:72:59:8e:96:85:05:fd:ed:5b:cc:75:
28:a2:5d:03:4c:0e:7d:09:8e:c4:4b:70:2c:78:5a:
24:d4:54:50:9d:ee:2c:18:29:d1:b1:8f:e0:27:48:
c0:25:d2:50:24:be:14:68:db:ff:09:66:a8:1d:ef:
40:59:44:fa:07:d4:f9:31:67:b6:bb:3d:21:62:06:
d4:c1:6b:d0:63:37:5a:9f:9e:3a:0f:ef:1f:9f:54:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:6D:85:53:2D:E2:31:1C:67:5C:46:1F:88:60:12:68:78:8D:6B
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ef:35:a9:3c:61:20:7e:d6:1e:32:74:f7:26:b2:86:6f:5d:
0d:b1:8a:6c:e8:dd:fd:3a:e9:4e:d4:31:b2:4b:17:d0:b2:03:
61:3a:1f:4f:94:5f:bb:24:d4:5e:cb:3c:fa:a3:06:b9:47:5d:
91:b8:12:32:d5:bb:46:61:8a:fd:1e:de:70:18:cf:3b:f2:c8:
88:88:37:73:4c:2f:aa:c3:ab:0f:5e:72:6c:15:63:8f:3f:ea:
ec:34:a9:f4:11:6f:18:bb:64:42:51:48:99:e2:66:30:03:ee:
7b:72:33:b1:9a:ac:67:fc:4f:70:9b:6e:a8:ba:47:c2:1b:65:
97:d1:fc:10:f1:52:2d:1a:1e:34:35:52:42:ab:a7:36:20:74:
ba:fc:42:cd:c5:b2:3d:f6:45:4f:3c:04:7c:d4:52:5b:ff:8a:
32:e3:16:46:43:49:65:f4:94:6f:06:73:b8:c7:9e:2d:18:df:
7b:32:45:c5:c5:05:eb:9e:b7:d7:5a:d9:e4:2c:ff:9b:11:ab:
11:3c:a7:2f:0b:01:03:96:8d:e7:31:05:9c:2d:d8:e0:99:47:
d6:e0:ad:7e:fd:21:e2:91:b2:83:e5:ba:03:c5:a0:b6:b0:a6:
f7:c0:16:5b:44:72:80:3d:da:c3:10:86:a7:0c:0b:80:ff:ed:
d0:0b:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:37 2025 by rpki-client