Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: 5sgc8VuMBj8eBuAYYj+ABHBrnOwZZeJBWuH9/Ahkmjw=
Subject key identifier: 65:07:7B:13:C9:F7:DA:71:47:94:24:85:0E:E0:D8:B9:B2:B5:A1:5C
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0198D698A568590A263CCDB920B6BA514CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 1331
Signing time: Sat 23 Aug 2025 11:03:04 +0000
Manifest this update: Sat 23 Aug 2025 11:03:04 +0000
Manifest next update: Sun 24 Aug 2025 11:03:04 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: UGAItryalMiougehQHEQaX4xXF4SIWZ64OHjHHJEU9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:a5:68:59:0a:26:3c:cd:b9:20:b6:ba:51:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Aug 23 11:03:04 2025 GMT
Not After : Aug 24 11:03:04 2025 GMT
Subject: CN=65077b13c9f7da71479424850ee0d8b9b2b5a15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:d0:55:6d:ce:e8:a9:36:54:85:81:73:71:
26:26:06:05:e7:4c:d4:5e:b6:81:05:71:83:db:74:
90:1f:46:25:4d:ff:ee:14:5e:73:64:a8:ff:2a:92:
79:da:b0:49:f3:9d:d9:bd:bf:35:b0:d5:9c:0b:95:
b6:6b:b4:3d:39:1a:d2:a0:46:dc:d2:a9:dc:d6:84:
36:af:e7:ed:5d:7b:ff:7f:a8:d2:30:45:8a:d5:4c:
0c:59:74:b7:db:ec:e5:55:06:bd:49:96:40:9c:a1:
a9:fb:2c:97:37:e6:1d:7e:d4:f1:8c:d7:ba:59:ed:
e8:cc:b3:e2:de:43:40:5d:ab:6c:ca:ae:d2:d0:f8:
07:63:4a:f3:c7:1d:f4:8b:fe:25:d7:6f:84:fd:f6:
91:cb:99:7e:5b:8f:ac:5c:fc:89:c9:ea:de:96:33:
5c:28:61:ef:e7:c2:b7:66:fc:18:b3:6b:da:df:9e:
ed:bd:1e:b9:5d:cf:41:5c:41:5f:06:5c:06:98:b5:
1e:62:ce:36:67:dc:14:f4:5d:23:07:e7:06:75:98:
b1:c9:ab:29:42:78:f8:91:0c:d2:b5:97:7b:f3:70:
9e:03:cb:c2:b8:4f:a5:22:51:f6:ca:e2:ba:e7:0f:
ee:bf:a2:bf:19:b3:64:4c:8e:64:25:95:78:55:0d:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:7B:13:C9:F7:DA:71:47:94:24:85:0E:E0:D8:B9:B2:B5:A1:5C
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:0a:78:f8:95:c0:42:4a:81:4e:1d:7c:7e:bb:25:83:94:
7a:57:65:c5:a0:10:ec:a6:a2:e5:a7:3f:2a:7b:c4:87:48:be:
8d:7e:f5:a4:5d:c5:46:06:e1:31:16:b0:0f:66:f4:c7:56:49:
ea:a7:a8:c8:c7:79:63:d4:20:79:d0:b2:5d:79:5b:04:9b:50:
27:e6:41:d7:ea:39:6b:ac:6d:cf:bf:dd:4f:f4:1e:f7:a4:53:
66:64:25:b9:fd:d6:7e:25:2f:88:62:e5:18:0e:d5:b5:60:4b:
bc:29:4f:ca:08:ad:3c:d8:19:fc:10:b1:50:0f:e9:fe:bc:d3:
c8:64:9a:d5:2a:8e:90:cb:85:f7:3a:63:ed:89:33:e7:e7:76:
50:d8:f2:c7:d2:7b:c0:0e:a3:d0:1a:03:6b:9e:d4:4a:8d:a6:
1b:d5:2e:d2:c5:99:3c:0e:c5:ec:dd:57:f4:cc:9e:5c:2a:72:
a8:9c:51:7b:c9:09:ec:7b:08:19:a1:25:dc:88:19:51:e3:a4:
32:57:ca:0c:72:fd:c1:fc:b4:42:69:7d:b5:d5:a3:66:08:97:
79:35:d9:85:8d:7e:80:28:ef:fd:eb:09:c8:9d:64:5a:be:01:
a3:53:1c:1d:b2:80:9b:bf:75:28:52:de:1c:37:56:bd:9f:ff:
fc:b7:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:11 2025 by rpki-client