Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: Xy52DNK5uTnwCRH/Dr4DZVDRcfo/Ga4MqAgaSPbKnW4=
Subject key identifier: C8:C7:3E:E7:D8:CE:B8:45:50:2C:57:9E:1D:E6:E6:64:28:B2:D2:47
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019873E3B4D0AACBAF772961B2B71E918776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:02:39 +0000
Manifest this update: Mon 04 Aug 2025 07:02:39 +0000
Manifest next update: Tue 05 Aug 2025 07:02:39 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: ZagVky5x8+ZDbA/IORAVMDB2wChSAfpQRS58hpe4AJA=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b4:d0:aa:cb:af:77:29:61:b2:b7:1e:91:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Aug 4 07:02:39 2025 GMT
Not After : Aug 5 07:02:39 2025 GMT
Subject: CN=c8c73ee7d8ceb845502c579e1de6e66428b2d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:30:bb:f0:9e:8e:80:96:6b:ca:2b:98:64:
5d:54:6e:c4:97:c2:b0:ab:ec:8e:18:e6:92:af:fb:
67:06:cd:e6:c7:05:16:23:ab:52:9b:f8:9b:41:af:
a7:2e:03:5f:93:bd:c2:e1:ea:18:ec:e0:56:d7:5e:
0c:12:83:53:df:af:87:22:f3:3c:08:c7:07:59:93:
9f:d5:57:09:f0:8a:a9:a5:a7:31:66:70:b8:1f:44:
af:9d:37:9b:e0:37:d4:de:cc:6c:49:eb:52:74:57:
24:7b:45:b8:6f:ec:ca:50:c9:03:f3:b1:34:d5:fa:
64:a0:e1:53:88:cc:7d:8e:bb:ef:e0:c9:04:bc:a6:
bd:b2:d5:ca:07:d5:7f:15:1b:5b:7e:ee:a9:43:20:
8c:fc:61:4f:65:05:b4:cd:f9:6a:d0:81:0e:d7:14:
24:ae:f1:d5:6b:1b:2f:e7:3b:ad:72:b9:0d:27:bf:
df:0c:77:7a:c3:df:d7:3e:9a:a0:0c:51:93:34:70:
98:9e:3e:17:32:3a:08:2e:32:f5:7e:bc:55:d6:d5:
d1:0d:0a:f1:9f:53:40:55:de:2a:af:5e:51:d9:b5:
1a:55:e2:ec:17:1b:68:49:31:d5:08:c0:69:8d:6b:
91:30:86:0b:0f:2b:94:db:80:27:b8:e0:78:6c:d8:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:3E:E7:D8:CE:B8:45:50:2C:57:9E:1D:E6:E6:64:28:B2:D2:47
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5a:24:09:92:46:d7:3b:cd:6d:c8:e5:c1:b1:73:72:72:d0:
fe:8d:ea:eb:b6:bc:8d:36:5c:48:bf:29:d8:a2:71:e9:37:c3:
15:4d:45:16:10:bf:07:d2:2a:c1:45:66:6f:78:15:a3:ac:f4:
04:a6:68:25:7a:86:92:59:2a:7d:e5:77:95:05:02:f2:61:ad:
19:6b:fb:a8:02:54:31:71:4e:5f:d1:0b:3b:f0:6e:2b:5b:22:
f8:c9:82:51:48:0f:5f:52:1b:30:5b:89:bf:f4:58:fd:3a:e7:
31:57:1e:84:ce:ef:2a:1f:87:4d:b9:8e:c0:dc:6c:43:b4:bd:
17:5c:5d:cc:02:3b:c0:8a:88:d6:0b:ff:95:72:95:95:ef:e9:
06:20:77:8f:a0:9d:89:3b:cc:00:05:36:49:cd:04:05:ee:8b:
9d:04:3c:48:40:c8:da:f7:98:7d:5e:49:2e:f4:94:f3:3f:cb:
32:b5:79:c5:03:6b:31:fe:e8:ce:a3:99:00:62:46:8f:53:fa:
11:70:9b:fa:63:60:4e:13:a0:2f:10:6c:48:d8:62:5c:7c:72:
0a:60:89:3e:8c:69:12:cf:bc:f7:1e:31:c4:22:74:7c:a4:ec:
67:3c:cf:67:ab:dc:16:b7:72:c5:7e:27:06:3e:69:9a:72:4b:
d7:57:86:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz47TQqsuvdylhsrcekYd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjUwODA0MDcwMjM5WhcNMjUwODA1MDcwMjM5WjAzMTEwLwYDVQQD
EyhjOGM3M2VlN2Q4Y2ViODQ1NTAyYzU3OWUxZGU2ZTY2NDI4YjJkMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn74wu/CejoCWa8ormGRdVG7El8Kw
q+yOGOaSr/tnBs3mxwUWI6tSm/ibQa+nLgNfk73C4eoY7OBW114MEoNT36+HIvM8
CMcHWZOf1VcJ8IqppacxZnC4H0SvnTeb4DfU3sxsSetSdFcke0W4b+zKUMkD87E0
1fpkoOFTiMx9jrvv4MkEvKa9stXKB9V/FRtbfu6pQyCM/GFPZQW0zflq0IEO1xQk
rvHVaxsv5zutcrkNJ7/fDHd6w9/XPpqgDFGTNHCYnj4XMjoILjL1frxV1tXRDQrx
n1NAVd4qr15R2bUaVeLsFxtoSTHVCMBpjWuRMIYLDyuU24AnuOB4bNiLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjHPufYzrhFUCxXnh3m5mQostJHMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1okCZJG
1zvNbcjlwbFzcnLQ/o3q67a8jTZcSL8p2KJx6TfDFU1FFhC/B9IqwUVmb3gVo6z0
BKZoJXqGklkqfeV3lQUC8mGtGWv7qAJUMXFOX9ELO/BuK1si+MmCUUgPX1IbMFuJ
v/RY/TrnMVcehM7vKh+HTbmOwNxsQ7S9F1xdzAI7wIqI1gv/lXKVle/pBiB3j6Cd
iTvMAAU2Sc0EBe6LnQQ8SEDI2veYfV5JLvSU8z/LMrV5xQNrMf7ozqOZAGJGj1P6
EXCb+mNgThOgLxBsSNhiXHxyCmCJPoxpEs+89x4xxCJ0fKTsZzzPZ6vcFrdyxX4n
Bj5pmnJL11eG9g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:04 2025 by rpki-client