Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier: y7/C4UAiT8gJ0nymtTOoXB469yyl4+5v2mWyac331RI=
Subject key identifier: 22:52:FE:7C:77:0B:2F:8D:AA:59:A9:3D:34:66:AC:8A:FC:20:09:B8
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 0198D5BB940DF5D7B310785861B1B65CC070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: yU0B1eFGV7aOM0OrgWonZF2weDbcg6RQ9vw5mu7BRpk=)
2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:94:0d:f5:d7:b3:10:78:58:61:b1:b6:5c:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=2252fe7c770b2f8daa59a93d3466ac8afc2009b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:30:f6:9b:28:6e:32:ad:b2:18:0d:b1:0b:
57:bb:17:fa:bf:1f:41:a4:51:91:d1:30:42:d2:66:
b8:e3:be:b6:2e:53:f8:e2:38:f7:4f:49:72:0b:6a:
bb:5d:e4:e5:99:67:54:07:40:09:1d:d4:49:13:ff:
43:33:d7:87:a4:21:e1:a3:f2:72:d6:34:67:c1:91:
14:3f:b7:0f:be:80:8e:b7:56:2f:32:94:71:81:f8:
a8:49:47:33:3a:92:25:51:13:1e:91:f3:b9:da:66:
a5:3d:86:a8:f8:98:13:5a:f7:8d:c5:48:41:f6:19:
01:94:e4:d7:1d:b4:fa:c6:74:a6:a8:ee:9e:8c:de:
32:5c:53:f3:5d:d6:f1:50:8b:db:21:63:53:bb:a9:
6a:0f:ee:d4:25:5c:71:f1:6e:00:dd:4d:f3:8e:1d:
50:79:cd:4b:92:b2:b8:2a:9b:48:a0:39:e7:96:02:
66:53:e8:d7:23:20:f3:a1:62:90:b4:34:2e:c9:6f:
1d:74:c6:fe:88:dd:78:44:2b:7b:5f:07:a6:14:ed:
ad:4d:0d:97:01:4a:e5:41:eb:88:92:fa:7f:e5:c0:
78:4f:ca:30:66:d0:e1:e6:a7:8e:74:f2:7b:a3:47:
c0:12:0f:c9:55:1a:a8:88:4b:6f:79:ec:7a:e1:10:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:52:FE:7C:77:0B:2F:8D:AA:59:A9:3D:34:66:AC:8A:FC:20:09:B8
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:20:f9:fc:f3:c1:85:86:6b:17:2b:1a:43:25:d9:e0:f7:33:
4c:eb:6f:38:3f:31:e2:a7:45:79:dc:c3:41:e8:58:a5:24:d0:
1d:19:69:19:8b:de:2b:82:8a:d1:16:27:9b:33:ef:8d:11:78:
ae:84:67:bd:e7:f7:86:41:21:97:d7:f1:99:fd:8c:0b:f2:c3:
7c:55:a3:61:e2:15:69:ed:09:7e:cd:27:21:cf:de:be:e4:4f:
0b:79:ac:f8:ed:fd:c7:37:78:e9:04:82:ea:18:ec:5d:b6:7f:
b1:02:fa:9c:cf:a0:fc:8b:70:49:15:08:28:ed:14:1d:18:46:
50:31:62:8b:20:25:ad:93:01:49:1d:26:9b:bc:e7:ed:0b:c1:
4d:6f:53:00:47:ab:3e:1e:08:b5:b8:de:ab:42:fb:1c:49:5a:
ed:0c:d5:4a:3d:de:92:ef:b3:d3:cf:93:ba:7d:6f:3b:02:1c:
53:da:75:49:9e:88:11:7f:5d:f3:4d:7d:13:c3:8d:0a:b1:ba:
fb:f4:c3:03:b9:52:8f:eb:13:e4:4e:60:a6:d2:32:de:ad:91:
9b:8f:b2:69:32:87:e8:6f:df:ac:55:29:17:b3:5b:29:64:54:
ac:03:c3:5f:60:d2:48:64:df:23:e3:51:6c:e4:85:59:26:fd:
2e:04:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:24 2025 by rpki-client