Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: JpYeSa7siP++0FAQbPGatvI9OwNzynii4ecb0GC23Zw=
Subject key identifier: 1C:6F:70:D7:21:B2:96:2B:16:E1:A3:CA:48:92:9A:84:68:0C:C4:7A
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0199FC21A7DD564DCB0FB02DDB22D11A482A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 13C9
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: JPduvV0nunHu5ynviPFBT+lMIb7SvugBh2A6zIG6vGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a7:dd:56:4d:cb:0f:b0:2d:db:22:d1:1a:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=1c6f70d721b2962b16e1a3ca48929a84680cc47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:ac:10:b2:fc:f0:d0:06:8e:a3:9c:44:69:
fa:8b:a7:b0:7c:81:e9:e3:61:1f:07:40:bc:f7:35:
8e:a5:a2:04:b2:fa:2f:7e:62:7a:87:58:ff:44:4c:
92:8a:1e:38:02:ac:70:75:b6:54:9e:fb:07:c6:19:
e4:67:8a:39:52:fa:5b:0b:5b:ae:14:16:8a:f5:56:
81:f9:85:d2:61:a6:8a:bd:99:33:3c:6f:ae:2e:1b:
4d:4c:55:95:e5:58:65:24:a5:1d:70:58:c5:ba:d3:
d8:86:7c:c8:c0:0b:43:1e:66:b9:df:c9:94:9c:70:
f9:dd:81:53:13:f6:10:cb:b5:27:61:f9:2b:66:38:
b3:d7:17:c3:6b:63:50:96:e4:af:ce:d3:6c:5b:53:
27:ae:f7:00:a7:2a:96:fd:1e:ad:57:06:f9:0c:f3:
89:a7:38:6d:ec:d5:5c:e9:4c:78:1f:1b:d4:81:05:
64:82:24:00:7f:d9:d4:60:71:35:4f:12:45:50:8f:
61:48:90:44:09:72:b3:8d:a4:ff:c4:9e:a4:0b:84:
55:8e:69:a6:5b:de:86:b5:db:87:ff:90:01:91:88:
84:d2:4d:55:f7:83:cf:be:f7:13:2a:c4:72:13:c2:
b1:26:14:49:72:69:ad:f6:82:43:18:59:5b:de:5b:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6F:70:D7:21:B2:96:2B:16:E1:A3:CA:48:92:9A:84:68:0C:C4:7A
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:7c:38:94:94:3a:b9:ae:69:c5:1c:54:5b:1d:6e:a1:c6:
59:7e:e6:9d:9c:c8:18:97:47:22:e8:41:1a:74:fe:df:ac:a4:
88:d5:17:e1:3e:b7:80:0c:05:bb:b5:98:4c:ad:97:28:1d:ba:
c1:f3:23:99:19:53:f7:40:67:24:55:63:7f:60:6b:d3:0b:a4:
44:53:91:7a:90:40:45:7f:1d:14:20:35:09:b7:d3:a9:55:3f:
70:9e:d9:88:b1:02:65:c9:f4:74:a4:72:38:78:58:c0:1b:30:
c2:be:4d:a8:6f:90:ba:1a:ba:63:a1:eb:3c:65:c4:99:49:3c:
b3:fd:e7:67:f8:eb:99:da:42:5f:c1:38:b6:1f:05:e0:ef:7d:
28:f2:10:9a:12:1a:68:17:dd:5a:c5:20:da:e1:7c:60:ee:da:
f9:a8:0a:87:5c:94:67:af:c7:24:8b:b7:3e:21:75:4d:c5:16:
a8:c1:f4:5d:c5:bb:9d:3b:77:ef:0e:f6:72:c3:05:f6:82:fc:
27:cf:98:c4:02:d9:8f:23:19:c7:c3:a2:65:8e:70:0c:2d:cb:
62:69:79:24:7b:19:04:e4:64:94:4e:19:72:91:82:dd:12:6b:
32:56:dd:42:58:62:71:bb:e8:14:d9:c1:4d:d5:8b:4b:b5:e6:
9a:91:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:20 2025 by rpki-client