Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: 2ml7pG71ZxkNhAVKunTChWZu+uttMZrwWEUbvpd8N9o=
Subject key identifier: 82:C4:50:9C:DD:65:1E:AE:6D:17:F3:44:90:F0:65:D2:F0:91:6C:53
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 01977B302EF5BBE269BDE336401C57C20F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 00:00:44 +0000
Manifest this update: Tue 17 Jun 2025 00:00:44 +0000
Manifest next update: Wed 18 Jun 2025 00:00:44 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: E+PBsQYrnYHNABDIDc/iI9Sh8aITtakBEYWPilF03SQ=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:2e:f5:bb:e2:69:bd:e3:36:40:1c:57:c2:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Jun 17 00:00:44 2025 GMT
Not After : Jun 18 00:00:44 2025 GMT
Subject: CN=82c4509cdd651eae6d17f34490f065d2f0916c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:db:a5:2c:46:a9:4e:28:7e:ed:ad:40:ca:dd:
72:b2:69:7b:08:0d:87:d0:ad:7b:3f:9f:f3:e9:09:
dd:30:7d:65:0a:5b:d3:ce:17:d4:e1:d5:5d:a8:4b:
79:97:03:65:d7:76:14:c8:05:33:35:ed:31:84:54:
37:2c:16:38:e2:5f:29:f0:1b:45:a0:c1:42:39:6f:
f5:83:2b:30:03:c0:cd:20:a3:e7:77:09:bf:01:d8:
65:ff:d4:90:5e:f3:34:a1:67:f2:e3:b9:16:80:de:
0d:7b:3c:5d:f8:a4:f3:21:d4:d2:c1:fe:7a:cf:c3:
c5:53:d6:01:c4:4a:01:d3:51:d5:1d:7f:c8:d6:c2:
ca:5b:1d:97:c4:23:a7:72:a9:0e:e0:59:f7:ce:80:
47:91:94:ef:64:aa:9b:e0:c9:65:d4:07:7c:8a:53:
76:5f:0e:7d:9c:eb:66:15:26:04:6a:48:05:8f:4c:
8a:fc:f1:00:3f:e9:e4:6b:6c:29:72:39:16:56:8e:
86:a3:c6:1b:18:53:68:f2:ff:c8:7d:92:88:eb:c4:
01:30:2a:dd:2f:ab:37:ac:00:38:b9:4e:6f:62:a5:
e4:f2:b3:c2:ae:d4:6a:cd:87:b1:d8:93:b6:76:24:
dd:9b:52:fe:30:db:51:17:3d:41:2c:33:79:d2:67:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:50:9C:DD:65:1E:AE:6D:17:F3:44:90:F0:65:D2:F0:91:6C:53
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:31:79:b9:92:36:c6:48:f4:f0:db:e5:fb:39:31:c8:7e:3f:
e8:d8:1b:52:20:52:8c:e9:2f:8a:30:73:29:6c:7d:48:d6:72:
d5:a2:8d:81:83:34:7d:7e:e8:5b:0d:1f:7b:0b:56:46:18:98:
15:4f:19:56:a8:67:25:8c:08:62:b9:d0:71:d1:05:fc:2f:e7:
64:64:c2:a9:32:f6:a7:53:d4:14:fb:71:78:88:0f:fe:f3:d2:
b9:2c:47:58:2c:06:54:12:c1:56:6c:66:3a:cd:1f:0e:2a:a4:
da:f7:db:a6:e4:bb:a4:1c:eb:a9:3f:17:cb:a0:4e:de:d0:72:
37:38:24:c4:dd:c6:b0:73:e1:32:24:70:1a:ec:6f:8c:f8:65:
be:6c:f2:3c:13:9a:0d:24:a3:a9:a6:60:21:a7:66:67:66:01:
44:bd:18:1d:2e:ad:05:7d:19:db:e4:16:d3:ca:fc:ff:71:28:
3b:9d:72:0b:86:1a:bd:fe:49:17:d9:f3:3a:7e:e3:7f:fe:5f:
bc:39:7b:66:fd:3e:25:ba:64:7d:7f:3e:f3:96:d7:cf:9c:3d:
1c:59:3b:69:44:25:a0:e2:ee:e9:02:5c:1c:f5:ec:e2:6e:45:
6c:b5:ed:29:57:94:26:57:9e:fb:30:8e:66:aa:29:73:fa:f8:
e8:e2:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:18:43 2025 by rpki-client