Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: L2vdLYOghWghO+yMUsZhlvHSyVdsFX70d1v+NRnBEGk=
Subject key identifier: 8D:FC:E4:C9:AE:64:44:24:26:9C:DF:6E:B3:0C:E5:03:05:03:81:64
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 0199FE46BD8E8B18C161E0BABC55CACDA7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 21:01:12 +0000
Manifest this update: Sun 19 Oct 2025 21:01:12 +0000
Manifest next update: Mon 20 Oct 2025 21:01:12 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: TV1/WTCWvP8YPScspRv6kSUUENAilNA5VoUAPQmME5c=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bd:8e:8b:18:c1:61:e0:ba:bc:55:ca:cd:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Oct 19 21:01:12 2025 GMT
Not After : Oct 20 21:01:12 2025 GMT
Subject: CN=8dfce4c9ae644424269cdf6eb30ce50305038164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:cd:05:ab:5b:4d:67:16:03:76:97:ea:de:
e8:4e:61:88:6a:35:2f:53:8d:2c:be:27:24:fc:74:
84:a5:b4:18:60:23:12:c0:ab:91:92:b5:ad:2a:34:
27:60:18:7b:b6:dc:9d:45:e4:05:94:05:cc:9a:62:
b5:0b:cf:77:a3:a5:5f:65:fb:11:7f:71:4d:6b:a5:
24:6a:6c:03:b1:fb:42:56:b4:c1:8a:06:76:c2:ee:
55:25:d7:96:ab:d9:49:8e:a0:6d:69:df:03:50:ac:
10:c4:fb:9e:d9:09:65:df:38:26:ec:46:0c:dd:f0:
74:1a:b7:5c:32:17:9b:08:23:f4:b0:6f:c2:97:79:
1b:6b:35:82:24:fd:6b:1c:2c:a6:95:49:4d:3a:d5:
67:a7:f8:3b:a3:c0:be:fe:08:9d:0e:17:1f:90:f3:
ed:b6:59:0c:0f:91:6f:88:e4:c7:51:20:5e:d3:9e:
cf:ff:93:db:86:c4:67:45:95:45:31:60:70:bf:3d:
c1:da:88:cb:19:64:ce:36:eb:bb:e4:aa:b9:cc:40:
27:66:d2:48:f0:b6:73:2d:d1:e3:fd:26:43:96:a6:
e6:b4:5c:bc:9f:ac:f5:3e:ec:48:4f:19:d0:86:2c:
9f:22:47:3e:56:72:73:74:e2:dd:6c:09:6e:b4:6f:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FC:E4:C9:AE:64:44:24:26:9C:DF:6E:B3:0C:E5:03:05:03:81:64
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ae:36:9b:0e:b8:8b:ed:f3:c9:e6:f3:4a:97:e2:ed:ce:7d:
a8:2d:fa:02:10:fd:2b:51:c4:41:0d:70:1c:26:c7:54:29:ff:
0b:9f:79:57:3e:c6:9d:d4:e5:bf:98:1e:89:ab:24:a3:39:20:
b6:01:af:31:2a:fe:fb:c8:7f:b6:b0:a9:47:a7:41:43:d4:32:
75:6c:f0:4d:15:38:38:bf:87:7a:62:6f:2b:ce:6d:55:77:03:
26:08:e8:00:fe:66:52:41:99:fd:bb:91:cb:fe:e6:de:92:d8:
60:12:76:67:15:15:fe:9b:8b:2d:0a:45:5f:61:bc:6b:9a:26:
65:d3:da:5c:87:58:b2:61:cc:de:8d:c2:10:41:92:ad:ae:4e:
be:6e:f0:93:d7:f0:5e:78:2b:c7:9c:59:8c:d9:d3:e8:ee:1e:
98:8b:cf:4b:1f:64:a5:a1:90:94:39:07:2d:db:1b:f9:13:c5:
7a:c1:31:4f:91:b8:a3:64:b7:63:e1:86:95:80:57:cd:df:60:
71:de:29:40:78:62:0a:1e:fd:3b:73:21:24:5c:93:07:bf:6a:
43:4f:db:35:d8:7a:70:3d:55:e6:d8:b5:2c:af:4a:0e:ce:4e:
d4:e2:14:14:f2:60:9c:4e:4f:fb:da:95:90:c6:d0:e6:f8:91:
93:81:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:25 2025 by rpki-client