
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: 9YAKFu3y/jcl+8D97P60h+BQHu0tdhIt5s26wPA1KoQ=
Subject key identifier: 5A:DD:49:41:29:0D:64:B1:A1:32:3B:D7:8D:55:10:14:21:7B:B8:22
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01988167942AC2941D46782D4A764AA000E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:45 +0000
Manifest this update: Wed 06 Aug 2025 22:01:45 +0000
Manifest next update: Thu 07 Aug 2025 22:01:45 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: 3b4VyiljUsAS9pbM3G71AV/JSdres3xjhsubNjnuFGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:94:2a:c2:94:1d:46:78:2d:4a:76:4a:a0:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Aug 6 22:01:45 2025 GMT
Not After : Aug 7 22:01:45 2025 GMT
Subject: CN=5add4941290d64b1a1323bd78d551014217bb822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:07:d2:3f:d3:5c:06:06:65:60:ea:8d:92:
5c:b7:85:47:60:a9:9d:95:85:86:be:8b:8d:c8:0c:
07:8f:3b:6e:69:76:33:e7:26:b6:ee:b0:f7:b9:f8:
a6:95:67:f9:64:c3:37:cf:fe:45:c9:99:f0:fe:1a:
5c:84:d5:34:e6:f0:9b:92:3a:01:d6:c1:38:a7:c5:
56:e0:b7:71:04:31:57:c5:23:6d:16:85:9a:20:3a:
df:6d:75:a5:93:7c:ac:e3:c2:44:7c:de:c0:7b:b9:
ed:b9:3e:f4:5d:9a:8a:fc:4e:87:20:e1:4f:68:e2:
83:4c:47:8d:67:e6:f2:fc:4a:2b:32:7b:d1:e3:2e:
e3:71:1e:a2:0d:56:4c:29:94:aa:3d:96:f0:f0:17:
33:6c:10:91:59:c1:c9:17:0c:46:15:69:15:ce:98:
38:b1:ce:de:1a:94:f2:bc:81:f6:ac:9d:c9:67:65:
ab:28:8a:28:d6:a0:ac:ed:0c:c3:f7:f2:ff:b4:10:
03:dd:9c:67:2f:fc:74:73:b4:ec:42:fb:d9:22:40:
49:86:a7:07:06:fe:d3:9d:07:db:c2:25:5b:8b:f6:
be:81:8b:6d:12:bc:92:17:3c:31:b3:10:91:89:9e:
fe:a6:d7:24:07:1a:d1:01:02:49:2c:96:35:bf:55:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:49:41:29:0D:64:B1:A1:32:3B:D7:8D:55:10:14:21:7B:B8:22
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:6c:e0:0d:ab:35:21:7f:6c:12:0a:46:79:4a:f0:2f:3e:
12:f4:3c:18:74:ee:64:d3:75:ee:a4:01:cf:2d:2e:17:92:4a:
7c:29:8f:7f:b8:37:f9:7f:59:0c:75:a1:da:68:66:b4:d5:de:
e5:c4:aa:04:93:44:45:2e:b5:ae:ec:b7:72:b9:c7:8e:ce:83:
b7:e9:88:cc:4b:92:e0:b6:8a:95:2e:ea:fe:02:f0:ce:55:1e:
45:66:3b:89:fa:e9:43:fb:f1:ec:b8:b0:b6:dd:30:72:3d:fe:
97:72:59:cc:96:7f:bc:37:9b:c8:18:78:80:96:42:4a:4f:f5:
b8:85:67:be:4d:93:c2:e5:db:74:27:dc:d6:c8:39:0d:00:fc:
63:37:62:98:27:a0:b8:bd:c9:92:ca:f6:d9:0b:98:54:f7:1d:
e7:92:f5:96:7c:a1:e4:4e:00:23:56:16:a3:6b:95:72:53:67:
33:70:c8:74:66:d7:bf:db:c6:cc:19:36:60:15:3b:4e:25:42:
ef:0b:22:79:50:25:79:ce:cb:83:24:68:c0:4d:72:8b:b3:bd:
71:54:16:6b:19:e4:df:41:33:d0:8f:87:84:48:ee:57:eb:8a:
e8:96:bc:99:b4:b3:02:fc:18:b6:4a:6b:35:8a:23:62:c2:b6:
a2:3f:eb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:43 2025 by rpki-client