Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: ZY1ErLW0kuzxL+WrvzFPQqtQofPl7LaOI2yjgbMtS0o=
Subject key identifier: 78:2F:82:AD:5E:F3:38:38:43:AC:AB:A6:80:63:69:E7:97:F3:D2:90
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 01988F59CE0A5BBABC493CDF860FC88A51E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 15:01:23 +0000
Manifest this update: Sat 09 Aug 2025 15:01:23 +0000
Manifest next update: Sun 10 Aug 2025 15:01:23 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: Ww39eGwWc5XZCd3DSgP2bCHKNopdndvYmErL681GuSo=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:ce:0a:5b:ba:bc:49:3c:df:86:0f:c8:8a:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Aug 9 15:01:23 2025 GMT
Not After : Aug 10 15:01:23 2025 GMT
Subject: CN=782f82ad5ef3383843acaba6806369e797f3d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:42:ba:31:79:9e:72:06:88:69:8c:02:0e:
9b:f9:af:a5:5c:ac:32:21:26:62:2d:45:db:bc:5d:
11:45:3a:f1:4d:6e:28:6d:48:93:2f:f9:25:89:8e:
2c:9d:12:f3:6b:c6:44:0a:44:4a:7a:66:ba:ba:fc:
6d:7f:0a:e8:b9:9f:17:a8:7a:0d:14:13:a8:67:60:
b8:84:27:f0:55:95:85:b7:ce:d4:90:2e:bd:15:cc:
01:3a:6d:96:49:69:e7:f7:56:7e:aa:13:93:96:7c:
d1:f6:9e:40:a1:bb:0d:65:54:07:c1:14:c4:70:f5:
a5:25:4e:35:de:db:eb:1c:bc:70:e6:27:a4:15:39:
6c:e6:6c:f2:a4:ab:3a:d3:23:47:c4:42:2e:8c:1f:
d4:4f:23:ef:77:94:b0:b4:c1:31:7e:ba:be:ec:fb:
f8:3a:43:5f:d5:86:0b:06:6f:35:e3:3a:e2:59:0a:
d8:ca:b1:fc:eb:02:0c:3a:ee:fa:67:99:34:cf:1a:
6e:3e:50:db:d4:2a:70:29:ab:ce:11:52:25:0c:a3:
66:5e:db:10:3f:ae:8b:bf:d6:e7:19:27:88:6d:07:
77:ea:53:fd:d8:f4:49:f8:3d:c1:c9:c7:f9:26:d2:
2f:51:b5:fb:4a:9c:ee:f7:58:81:91:dc:55:1b:36:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:82:AD:5E:F3:38:38:43:AC:AB:A6:80:63:69:E7:97:F3:D2:90
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:f9:a5:18:c1:a4:a8:74:78:ae:0a:62:c5:1b:54:77:c8:
f7:55:68:2f:74:19:40:0f:84:96:68:11:fe:31:f6:bc:6f:13:
d2:a3:a7:f5:ef:4e:24:fb:5d:0c:a9:fd:12:f7:e1:b2:81:56:
ec:7f:4b:de:92:dc:cf:05:4b:19:c1:e1:65:82:f4:2a:cb:8f:
95:66:c0:f8:d5:e5:7f:aa:69:8c:80:87:0c:b4:eb:1e:a3:0b:
3a:69:f1:18:91:13:5b:95:4a:37:3e:55:a0:bf:a0:d6:df:32:
5a:ad:78:4a:53:08:76:f2:c4:7f:6e:6b:cf:2a:17:39:70:54:
2f:17:6b:ae:11:c2:30:d9:7a:a0:ef:ac:66:01:23:6a:6a:bb:
0b:7b:d3:05:7e:1c:85:0f:73:11:23:01:d8:0f:f9:59:ef:dc:
02:17:1f:0e:ab:1a:80:f4:d0:53:ee:f1:cd:07:83:ac:dc:89:
be:45:8c:6c:ee:15:c8:0d:0c:57:27:a9:b0:ff:48:46:3c:ad:
74:24:16:cf:40:12:48:bb:58:46:7a:a9:fb:66:70:03:c2:e0:
16:c1:25:48:ac:ed:62:94:d2:e9:5d:46:4d:19:09:9c:d9:b1:
43:27:d6:b4:33:34:a6:af:fe:97:6e:ad:fc:19:6f:a4:54:7c:
2e:bf:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:49:22 2025 by rpki-client