Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: SH6okiATej2HAY+RE8oWh2mr3KnHTRPq1ecYYsj45sk=
Subject key identifier: 3A:48:32:CB:25:00:DF:95:04:E7:3C:E6:10:E7:54:22:00:DB:DF:C8
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 0199FD3475A00A8467EFC210EE0203A13724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0F53
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: 2PPiT3wA6eCbwAE94rlu5Wn4IlHhyhMsxC6g+Nmk9dk=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:75:a0:0a:84:67:ef:c2:10:ee:02:03:a1:37:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=3a4832cb2500df9504e73ce610e7542200dbdfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:d7:89:fc:4a:a5:07:ef:3c:f4:f4:08:ae:
2b:10:1b:cc:e2:f8:bb:e2:3b:6d:3c:e5:bc:42:92:
f1:f8:16:d3:f1:e1:21:1e:54:06:16:28:8c:ef:e0:
0e:a9:34:88:cd:0f:01:5a:61:aa:56:4e:ff:de:a8:
f6:81:f7:16:51:e1:3d:58:1c:02:34:2c:86:6f:6c:
21:35:21:ef:49:60:e9:de:bb:c2:07:15:22:f1:98:
5e:6f:03:12:21:eb:64:7e:f0:63:11:93:b7:bf:5f:
c1:08:a5:40:05:84:fa:37:72:bc:19:5f:99:0c:8a:
07:92:57:8f:07:b8:08:45:27:e4:00:bf:1e:00:62:
39:4f:31:6a:c5:a9:24:30:2e:81:41:3f:ad:cc:88:
4c:d5:9d:50:b2:dc:67:c7:2c:0c:de:18:2f:d7:55:
50:c1:6d:bb:19:43:42:9d:ab:15:fc:91:c7:38:eb:
fe:0d:eb:62:1c:33:3f:9f:9f:87:b8:ec:57:5f:d4:
21:ea:d6:cb:0e:4a:bc:72:92:ed:88:ed:9a:9b:5a:
45:5c:3a:41:05:dd:be:2e:10:a3:f3:3c:af:40:b3:
ea:70:92:f0:9c:92:31:10:30:f6:a9:a2:39:12:e0:
0b:64:c7:c8:44:7e:b8:9a:9d:77:f4:d4:4c:3d:37:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:32:CB:25:00:DF:95:04:E7:3C:E6:10:E7:54:22:00:DB:DF:C8
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a9:d2:fa:be:48:4c:6e:99:b7:81:25:cf:a1:60:b1:fc:66:
cf:17:af:88:8a:d9:39:33:32:fe:5e:98:3c:5c:2a:92:72:95:
ed:e3:25:db:a1:81:82:0c:84:fc:25:ba:31:1c:71:e1:29:cf:
3d:14:9c:d3:64:b3:04:1b:dc:20:7b:e0:63:51:8b:74:f7:a8:
5a:b5:d8:13:5e:8f:54:78:ee:ec:fc:f8:05:4d:3e:d3:1f:3e:
cc:73:09:33:14:c6:47:f8:d7:f1:8c:51:62:81:33:dd:3f:7d:
0f:a2:dc:d9:7d:fe:2e:8d:92:bf:cb:f9:90:1b:33:98:18:34:
25:e3:76:07:cb:52:9c:b1:24:af:8d:cd:b7:c8:36:cd:bd:95:
89:e7:b0:b9:5e:2d:71:2e:9d:bc:e1:0b:46:06:17:26:ea:75:
55:8d:35:b9:79:38:a1:8c:44:c1:4c:b5:12:28:c8:1e:af:00:
30:33:84:c8:7d:df:b9:9a:c4:71:0f:b9:a6:f9:2b:45:b2:47:
73:a1:0c:bd:47:17:09:bc:3f:a7:34:35:8b:34:4b:f5:f3:bc:
9a:1f:b4:34:4d:7a:aa:0e:45:74:4f:91:4b:ca:97:93:8a:df:
77:a4:56:c0:8f:28:32:3f:8d:2f:6c:27:bb:88:3d:05:b6:b3:
a4:9f:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:50 2025 by rpki-client