Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: BihpUnfcPXe7/1+h8TCG2tLbS5VNbwZtwSLt3ON7bwI=
Subject key identifier: E3:B5:C6:08:82:1D:D1:4C:FE:F3:0B:53:CD:B9:C1:30:EB:1B:5A:EC
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 0198D54E3A54820387C8EE41199098FDA9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0E61
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: +SwbdiFeQeXECvlSp3N9HiVgFicjDmuiSNT7iJMqCxA=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3a:54:82:03:87:c8:ee:41:19:90:98:fd:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=e3b5c608821dd14cfef30b53cdb9c130eb1b5aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:46:14:b2:4b:8b:0e:77:a2:87:c2:c3:b6:
3c:b9:52:57:52:98:7b:8c:b9:23:3e:04:d5:5c:81:
cb:a3:45:bd:e2:15:46:f0:4c:81:d7:dd:78:82:c8:
35:41:2f:07:8d:c9:48:8e:f4:15:5e:d0:0e:b3:67:
03:34:a7:72:51:70:2a:37:47:a9:4b:3c:0b:7a:26:
93:04:6c:26:33:c1:dc:00:a1:4b:05:68:5f:1e:28:
a0:04:8d:c9:ff:ae:03:d8:aa:c5:e9:60:24:12:14:
61:0c:f2:7c:a4:56:2c:cc:4a:4a:d2:04:de:2a:ff:
3a:7d:bb:b0:39:5d:e8:f0:65:55:70:e7:20:78:af:
c9:68:d8:b0:3b:d7:0a:5c:21:0b:5e:9e:16:8c:59:
62:37:1b:ab:57:fb:5a:8c:bf:f2:66:c1:87:59:64:
80:cf:83:a1:3f:51:c8:70:f3:6a:bd:62:d8:35:b6:
03:d1:f9:c2:f6:0c:31:77:b2:ba:54:df:a2:33:20:
79:e5:6f:0a:55:cf:53:97:9d:77:f0:bf:a7:0b:11:
97:5d:b6:d4:08:5d:b3:ab:9d:76:19:02:68:5a:4e:
da:69:ab:07:42:18:17:c8:53:09:40:42:54:fd:29:
7f:31:6a:ac:e4:b2:ae:34:6a:26:69:c6:fe:01:a0:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:C6:08:82:1D:D1:4C:FE:F3:0B:53:CD:B9:C1:30:EB:1B:5A:EC
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:41:13:f2:db:12:45:5e:74:2d:8d:d9:57:15:72:33:4f:
c1:43:63:21:5e:ac:3c:96:94:37:e7:f0:ca:dc:dc:7e:1f:0b:
0e:fe:74:a4:fd:42:7d:63:18:77:9f:f9:f9:97:4c:ee:90:fb:
53:61:3a:9c:74:6a:69:2e:31:37:b3:1f:3e:fa:d2:82:36:88:
5a:f3:60:ca:a0:83:b5:3a:60:c8:07:90:98:bc:96:a9:69:19:
b3:9a:dd:2d:7f:6f:a0:d0:3b:17:8b:b1:e4:e3:1e:bf:2d:4b:
bb:d7:81:2c:d2:c1:4f:da:eb:7c:f2:58:74:7b:9f:3a:58:13:
0a:d7:07:eb:99:90:20:99:f0:65:9f:5e:e5:5d:fb:c3:64:0e:
1d:b9:30:37:65:a6:9b:48:49:58:3d:48:53:0d:1d:ed:09:c0:
1e:7c:12:fc:cb:00:ab:26:a0:a8:ee:b7:72:8a:9a:16:1a:4a:
40:5e:9f:56:27:2a:99:0d:d9:57:67:ad:63:64:b7:a8:12:d5:
63:ce:5a:15:d8:2a:79:f3:5b:a1:ce:99:bf:38:dd:19:cd:b8:
a2:9f:c2:59:ce:78:3d:6a:37:bc:ee:67:1a:8d:34:bb:9f:d2:
6b:01:0c:87:50:89:09:24:3c:07:46:2d:54:f2:a6:25:fd:28:
84:be:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:42 2025 by rpki-client