Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: M3FuAmr8b/mfv5nnDtX89oAHWfMEzUidhy1dKpdWZ1o=
Subject key identifier: 83:29:AA:91:67:EB:A7:1F:83:92:96:92:29:28:43:96:AC:2E:A4:F2
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 0198D6CDAEE460C581609D565A4C303DE5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:01:00 +0000
Manifest this update: Sat 23 Aug 2025 12:01:00 +0000
Manifest next update: Sun 24 Aug 2025 12:01:00 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: r55eJmZ2zsqAEQxLkj1syxs9F8rVYf25FvabDM3t/9w=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ae:e4:60:c5:81:60:9d:56:5a:4c:30:3d:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Aug 23 12:01:00 2025 GMT
Not After : Aug 24 12:01:00 2025 GMT
Subject: CN=8329aa9167eba71f8392969229284396ac2ea4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:2c:92:47:4f:db:4c:f7:ac:33:e5:85:90:
48:8d:25:78:40:83:69:8b:ee:3e:94:16:b3:0a:67:
5b:ec:78:8e:f3:5d:5b:2e:7c:a2:4e:79:c1:49:bd:
69:d5:7e:ab:21:8a:15:1c:c1:27:0f:ac:34:d7:95:
ca:71:4d:fd:8c:c5:16:82:e8:32:39:8e:c5:e7:87:
92:99:62:27:85:e1:39:47:70:9c:40:20:ba:7c:9f:
c2:a0:b7:4b:d8:23:c1:79:2a:15:ee:1f:9e:5d:ba:
1b:cc:48:5a:71:e5:fd:f6:09:5e:99:c0:33:3c:3b:
18:03:fa:04:5b:b1:9a:c5:30:f3:c8:9e:5e:2f:40:
62:5f:01:ab:02:ca:27:69:e7:de:73:cf:3a:bb:2d:
08:b1:d8:aa:d2:69:07:ea:38:13:99:50:33:05:aa:
70:a0:96:43:f4:68:1a:5b:30:4b:0b:08:96:b3:10:
f6:91:65:ef:b1:f3:96:61:52:2a:c4:aa:59:e7:d8:
c5:fb:ca:2e:33:59:a7:cf:41:96:45:40:11:b8:3d:
78:e8:f7:bd:a5:0e:8d:7c:41:2d:4e:ab:43:32:67:
f0:8b:49:9c:7f:6b:68:4c:9f:d4:98:e7:3e:e6:45:
c2:0f:2b:6b:b7:9a:f3:43:b8:a5:82:23:47:dc:24:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:AA:91:67:EB:A7:1F:83:92:96:92:29:28:43:96:AC:2E:A4:F2
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:af:c3:f4:4f:02:21:e5:a7:de:81:f6:1b:54:51:2d:77:c3:
8b:de:91:f6:bf:37:ae:cc:43:a0:3b:b0:4f:fa:e5:b7:b7:6b:
a5:3c:40:e5:dd:91:0b:ba:b8:3c:c9:7e:14:51:77:8f:d4:77:
92:6d:b7:d3:30:da:b2:43:18:62:3e:56:63:3e:67:54:6a:39:
1c:3d:e4:14:4c:08:db:69:c4:7b:7d:3a:76:7e:cf:1f:03:bd:
c6:1e:c4:cb:f2:c4:83:e2:2f:dd:5c:c6:16:3f:c3:f4:d4:35:
8a:82:ee:c1:c3:cd:d6:01:9b:c9:c2:9f:c6:bc:42:77:a5:01:
55:fb:3e:f6:96:23:c8:b6:0c:33:db:a1:99:a8:d0:e6:48:02:
84:ba:15:b0:59:6f:0f:73:26:ef:41:84:11:4e:9e:ca:f0:7a:
a3:04:c1:1f:77:09:96:e1:83:70:3b:1b:a8:39:5f:dd:3d:7b:
b2:23:bd:c7:46:70:f0:11:e2:43:b8:a6:ad:93:87:b0:5c:ca:
87:fa:9e:8b:c6:3f:b2:97:81:20:b7:50:4b:fe:ed:82:95:97:
50:69:1d:9c:f9:18:39:c0:26:32:27:78:31:18:08:3e:6a:f2:
f3:02:ff:52:71:0e:a1:c2:d9:5c:37:f0:1c:69:b1:5d:1c:ac:
2c:c3:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:26 2025 by rpki-client