
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: 9sC0dkG7/XtAVaWIEoFcurpYhmdcjP+vIga1m2RC1N8=
Subject key identifier: A2:01:FC:97:58:BD:CD:7C:C0:67:B5:3A:17:2B:DE:7D:C9:6B:44:12
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 019880C2D85C1BEBB6C3F191AAE2B8271DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0E8E
Signing time: Wed 06 Aug 2025 19:01:49 +0000
Manifest this update: Wed 06 Aug 2025 19:01:49 +0000
Manifest next update: Thu 07 Aug 2025 19:01:49 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: e00qfEnx4T3HVFq8uNH/X6pLytmXRgypQO2BvFohmPA=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:d8:5c:1b:eb:b6:c3:f1:91:aa:e2:b8:27:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Aug 6 19:01:49 2025 GMT
Not After : Aug 7 19:01:49 2025 GMT
Subject: CN=a201fc9758bdcd7cc067b53a172bde7dc96b4412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:7c:72:21:21:aa:fb:d0:0f:cd:4f:24:e8:
60:d4:b9:d2:52:7b:0f:da:99:53:36:ad:21:1d:1c:
e1:36:12:8e:99:5d:c0:f0:36:d8:83:e5:f6:b5:1e:
4c:ca:e5:a4:b0:9d:d4:8b:18:76:5c:1d:87:df:66:
8b:2b:a1:ca:7f:e7:1f:eb:0d:18:ce:d1:72:db:e9:
1e:d2:4b:dd:4e:b5:0d:c7:58:08:63:4a:20:9f:89:
9c:25:18:c8:0a:a4:d6:3b:60:33:dc:1d:a0:65:d9:
56:9f:ef:91:8d:bf:d3:5d:b9:ff:03:d3:30:d3:1f:
fe:2e:9c:d8:fe:b2:27:d4:34:ca:9b:13:25:b1:96:
cf:3d:38:14:52:29:6b:ad:99:b9:e2:7d:86:85:cb:
99:99:54:ca:16:b3:c4:2a:41:69:e7:2a:f5:b4:02:
9b:d9:b3:77:8e:2d:19:42:3d:a7:06:e7:d7:5f:22:
1f:75:58:f0:34:23:5b:4d:3f:c3:14:04:c5:cd:bc:
c4:a1:20:05:b7:7a:71:82:4f:71:71:64:3c:a9:76:
15:31:e3:e7:35:b9:3e:db:fd:85:a0:aa:26:fa:07:
e4:f5:cf:af:4a:5c:eb:e8:40:af:e5:c6:96:d0:9e:
5d:2e:6a:3a:81:40:5b:6d:9a:c8:55:38:74:ad:60:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:FC:97:58:BD:CD:7C:C0:67:B5:3A:17:2B:DE:7D:C9:6B:44:12
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:50:ae:6d:5d:d7:81:f8:f1:7c:b0:eb:29:8d:fa:d2:27:24:
30:0a:cb:de:6d:df:f0:69:0f:9c:aa:cc:ac:e2:09:5e:a1:fc:
21:ea:b6:4d:38:84:5a:93:f7:5e:4f:ab:36:fe:8f:fe:31:36:
ba:16:2d:9e:e4:a1:f5:8e:f1:5e:79:f6:94:4e:4d:17:31:b2:
34:b7:13:f4:79:1f:e4:53:2d:45:f4:09:62:f5:22:93:da:d9:
8e:43:0b:2a:69:2d:98:2f:03:eb:e4:b8:77:fc:84:b2:9d:32:
62:f4:8d:23:55:9c:19:9b:9f:0f:ea:15:ae:eb:cd:d1:b9:56:
93:cc:96:60:59:71:cc:f6:4a:3c:c2:2b:cc:46:25:37:84:aa:
f7:42:6c:47:ce:c7:d6:32:ba:ff:e6:89:48:37:44:ed:00:cd:
7f:59:30:27:14:fd:9f:e0:6a:6e:55:6a:3a:02:c6:b2:7f:d1:
cb:a1:9b:98:39:a3:b6:6e:5f:37:cf:63:4d:6f:bf:76:d3:23:
d9:bc:35:48:e8:f9:d4:c1:2e:bf:08:d8:2f:8d:e0:9c:c1:ef:
b2:4f:db:0a:35:e2:70:36:79:61:c6:9b:83:f8:b5:d8:f7:7b:
c9:2e:8a:9b:a0:ec:e0:02:7c:44:4e:84:de:28:ee:db:78:bf:
6e:8e:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:32 2025 by rpki-client