Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: HV1sWKiRSmWTJycvjdHMagkJuC2WbKCh5U5EfPER3wk=
Subject key identifier: 33:00:1F:09:ED:77:E9:06:33:C0:66:62:05:B8:28:1C:72:1C:FF:0D
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01987DC0FF6CFA93C2E37649C6D2D59CF8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0946
Signing time: Wed 06 Aug 2025 05:00:56 +0000
Manifest this update: Wed 06 Aug 2025 05:00:56 +0000
Manifest next update: Thu 07 Aug 2025 05:00:56 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: 7Gnqc3esOuCnv7hym/UuPDBwUu6HmO4GTLfeVLjpPVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:ff:6c:fa:93:c2:e3:76:49:c6:d2:d5:9c:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Aug 6 05:00:56 2025 GMT
Not After : Aug 7 05:00:56 2025 GMT
Subject: CN=33001f09ed77e90633c0666205b8281c721cff0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:6f:0c:f5:fa:bb:cd:eb:3d:75:d8:4a:21:
55:c6:0c:60:d4:01:43:c2:ff:5b:51:cd:85:1c:93:
65:d7:55:72:c1:44:34:8d:d9:f6:ee:93:8d:79:61:
65:28:a0:53:39:d4:8b:89:38:35:34:c7:b0:e8:f9:
52:bd:74:06:77:64:c0:4b:0d:dd:c1:84:cb:cb:27:
3e:90:0b:24:62:8b:c4:bf:0b:60:34:c1:c2:df:f6:
b8:1b:43:45:78:03:06:c5:8f:fd:6a:95:24:dc:af:
a1:97:03:12:54:cd:6a:51:3c:28:fd:fe:00:9d:70:
04:e8:b2:53:3f:de:50:f3:36:88:7f:b9:58:34:1c:
9d:06:8b:d6:ee:77:9e:d2:e4:aa:14:52:c1:13:e4:
a6:50:a0:dd:a0:2c:d0:2e:9f:c9:ab:44:42:a5:c5:
44:e6:e8:45:5c:8f:d1:ad:e3:95:63:eb:77:35:ac:
d7:80:c1:0c:5d:a6:9e:1a:88:54:43:56:f7:c6:d1:
bc:40:b0:1b:53:64:fc:f9:8e:19:ec:1a:9d:d7:6d:
7c:d3:f9:d9:ad:40:35:3a:d6:67:9e:48:9b:dc:db:
36:2c:2b:bc:c6:e0:ac:76:6a:b5:0f:09:2d:fe:f0:
ed:c5:86:3a:e9:13:0b:a7:72:c2:7f:a1:ed:4b:4f:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:1F:09:ED:77:E9:06:33:C0:66:62:05:B8:28:1C:72:1C:FF:0D
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4a:c3:b9:03:c5:64:dc:7b:fe:7e:a1:0f:19:27:36:0e:38:
21:13:f7:dc:e3:4c:51:b9:a8:f2:cd:66:29:a9:b8:60:91:89:
87:3a:83:87:7c:14:54:a4:a7:b0:c1:53:a6:4e:5c:c6:48:c7:
be:f2:2a:0c:98:c2:2c:f6:cc:e2:a1:de:30:80:5f:b6:a9:5c:
48:7a:d9:de:1f:d2:3c:2d:e3:1a:2b:cc:18:f1:37:4e:b8:df:
d4:2b:17:71:32:1b:13:92:30:df:3c:77:a1:e1:4d:64:b0:66:
f3:ab:3f:09:74:5e:24:52:41:02:7b:48:93:34:bb:fd:c6:c1:
12:b3:10:c9:b6:6c:67:c4:e8:fb:e2:14:82:c2:c4:b8:fd:51:
30:be:de:91:ac:d2:49:36:69:0d:19:06:0a:57:fd:1a:57:ee:
d3:61:69:c5:77:cb:a3:74:76:91:af:e1:68:e1:33:f8:d9:e2:
4e:ed:a9:e7:32:af:93:8d:5a:ae:50:ec:35:72:21:4d:84:9a:
32:22:1b:5f:2a:98:d3:9c:cd:53:f3:a8:62:ac:f9:92:d8:4a:
12:2f:21:fd:44:f7:39:e5:66:75:aa:30:96:f8:fd:d6:5a:b9:
e1:7e:e7:db:50:db:96:4c:0a:e6:47:ea:2a:4d:63:de:2b:52:
14:63:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:52 2025 by rpki-client