Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier: mMFcB7WtWuVgpaRBscNIDzrw2fLpuetKEzXYJ3rCa1g=
Subject key identifier: 2B:18:B5:31:7C:D7:28:75:87:2E:CD:08:A5:0E:BA:4E:D5:2A:74:4D
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 019A503DE04AD456E08BAECA387A88682CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number: 0EC2
Signing time: Tue 04 Nov 2025 19:00:23 +0000
Manifest this update: Tue 04 Nov 2025 19:00:23 +0000
Manifest next update: Wed 05 Nov 2025 19:00:23 +0000
Files and hashes: 1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: IpdbfJMkrOhv1lb+ldS9xgWyVSSDNjh7ZO5d/ORrxxA=)
2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e0:4a:d4:56:e0:8b:ae:ca:38:7a:88:68:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Nov 4 19:00:23 2025 GMT
Not After : Nov 5 19:00:23 2025 GMT
Subject: CN=2b18b5317cd72875872ecd08a50eba4ed52a744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:af:ce:7a:57:37:a9:62:05:01:d3:9e:83:
b2:90:d6:e5:ea:66:1f:69:d2:3d:ab:ca:1e:a8:95:
ee:52:2c:5a:4b:0d:c5:69:b7:32:e5:ab:3d:a3:62:
7e:a5:3b:b0:72:93:73:45:88:8a:d8:04:51:51:30:
28:1b:95:f5:b4:4c:19:5c:7d:45:ed:d7:0a:8f:e3:
85:d3:34:a2:86:fd:34:3e:bf:5c:c2:be:b4:a5:64:
a6:69:e0:d5:b8:1b:ab:ba:91:34:b9:82:1f:37:78:
7e:f9:6e:7b:5d:5a:b7:6a:f3:d1:28:b9:19:a0:95:
89:b1:43:59:9e:be:09:7f:4d:7e:48:b0:50:76:21:
6f:c0:ae:09:be:8a:e6:6f:84:ef:c9:7a:11:b5:d7:
87:34:09:62:2a:c5:a1:0e:dd:26:a4:f7:ab:db:ff:
d9:3f:c3:4f:dc:a6:6e:4a:73:cf:80:85:75:be:72:
58:01:82:10:1d:5c:0a:a7:2d:cc:59:b7:1a:df:c5:
43:3a:04:5d:64:dd:bf:77:aa:45:54:34:0c:90:2e:
83:28:47:6f:f1:b4:81:57:f3:d8:ec:88:34:8b:68:
4d:4b:e3:60:37:3e:eb:ca:38:90:c6:47:3a:9c:13:
0c:84:cf:33:74:03:50:73:ea:08:05:5e:8e:01:fc:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:B5:31:7C:D7:28:75:87:2E:CD:08:A5:0E:BA:4E:D5:2A:74:4D
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:7f:f6:50:61:a1:a7:99:fe:d9:f9:b4:2a:09:c6:fd:19:
64:aa:59:08:fc:1b:45:0a:f9:ab:1a:d4:8a:8a:c3:1d:e4:d2:
80:89:a5:f5:a9:cf:d4:44:92:1d:83:ed:b6:61:0a:7b:91:7b:
48:3a:bc:f3:4b:15:92:f8:68:32:8b:01:f6:58:de:e0:59:82:
fe:5b:0d:f5:78:a0:b0:11:a2:f2:9c:d0:72:d7:d0:a9:d5:5e:
96:cd:17:72:5d:08:a5:b5:73:55:9c:0d:71:69:54:6b:c9:b7:
ed:11:8a:95:30:b3:65:c3:18:ed:fc:c1:53:07:78:53:00:1a:
fb:27:2f:f4:6a:63:c1:74:a4:b4:37:43:5f:a7:5c:6c:10:91:
a2:4c:c3:b3:6b:29:81:86:4e:d3:f0:69:60:ff:ab:f9:94:94:
b2:6b:62:41:19:98:9c:c7:4e:97:8c:56:50:94:8c:78:4a:3c:
43:76:a5:59:67:31:3c:71:fa:79:ce:4c:c1:cd:ac:e4:67:53:
3a:d5:da:1b:dc:09:a5:a2:fc:5c:39:4b:fa:f4:dd:fd:e4:54:
3d:e7:2e:5e:1a:c2:b7:4c:60:ca:54:c3:e8:6d:c8:7d:61:66:
a9:b1:42:fb:25:c5:c0:ef:13:94:de:f2:8c:31:e5:ad:17:d2:
b9:c0:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:10 2025 by rpki-client