Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: ZnxdyOlFLlPfxoCFUiPQnJD0w4/8dxu83x2JFMhVVuw=
Subject key identifier: D2:FB:52:66:8D:3F:BC:A3:8E:80:32:AF:D6:E4:B7:A3:A5:6D:31:1F
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019A4F62710DEBB4A573B7D56627ADA3BC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: 0GmvfKxgy9ZnNRY7AfDgtADN+mealXYsG7VgpCEv5rQ=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:71:0d:eb:b4:a5:73:b7:d5:66:27:ad:a3:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=d2fb52668d3fbca38e8032afd6e4b7a3a56d311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:b6:0f:ed:07:f4:df:f0:2e:fe:a1:eb:78:
24:c5:1a:a9:e3:99:0a:b2:7a:97:3a:9b:9a:1c:89:
70:c6:bf:52:9d:0f:fc:d3:e8:ef:15:72:34:0a:d1:
58:4c:e2:9b:a7:29:b7:d9:02:1a:84:58:24:20:72:
c8:46:86:60:4b:e9:a5:32:e2:79:48:79:37:d3:d1:
51:a6:0b:b9:52:63:08:94:44:4c:e0:eb:7d:07:63:
61:fb:b9:54:12:34:96:f9:0e:55:50:d1:3d:a4:c7:
01:9b:2b:28:7d:fc:49:e9:cc:a2:50:1c:9e:59:49:
30:f0:c4:66:b6:ea:a1:94:50:47:9a:af:18:0b:e8:
c9:10:ae:0f:d1:8d:79:a1:84:aa:30:ec:dc:47:ea:
ab:ff:30:81:40:1f:e7:ae:e3:7e:e5:4d:bf:c3:c3:
5d:a7:a3:cb:df:7d:7f:de:20:1d:55:3b:8d:70:61:
85:1b:c8:83:ea:6e:94:ab:fb:21:cb:ca:19:19:e7:
b4:8d:4c:26:77:8d:01:03:99:06:68:18:c8:53:6a:
3b:5f:35:a6:77:db:9e:26:9e:4a:46:ec:5e:a7:80:
8a:6a:9b:41:cc:0c:29:b0:01:40:f8:11:4e:d0:b3:
5f:25:55:24:66:61:5b:10:fe:16:12:1a:31:6b:78:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:52:66:8D:3F:BC:A3:8E:80:32:AF:D6:E4:B7:A3:A5:6D:31:1F
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:ef:10:a5:90:ae:f7:41:d6:81:db:eb:90:37:41:6a:c4:
46:33:87:37:96:3c:03:65:9c:e4:e8:a3:f4:bf:30:30:ed:e2:
44:1c:d5:e9:24:d5:16:e1:a2:8d:90:3f:c8:3a:e1:d2:2e:f9:
d9:76:f5:2a:85:68:fe:55:b1:1b:cb:5e:55:4c:a8:fb:74:9d:
2a:17:bd:8d:33:08:21:34:04:e7:69:a7:68:42:65:29:e3:f1:
a5:3a:23:5f:32:60:85:0b:e8:cf:6f:6d:e1:29:d6:9d:ba:2d:
64:2c:25:a1:46:61:ae:21:3c:42:9d:2e:58:17:8b:17:27:27:
fa:e1:f4:01:b1:76:66:c9:09:40:1e:8b:31:43:99:64:da:36:
07:7b:0c:5a:14:ab:a1:30:d6:19:4b:18:6e:96:49:98:d3:72:
24:29:ac:ac:0b:30:33:84:48:c0:8e:0c:b8:d8:22:83:e1:9d:
bf:8f:f5:eb:60:c3:3c:9b:67:d2:0e:e9:06:50:6c:18:af:62:
3d:cd:a7:08:fa:af:7b:17:bd:e0:79:40:28:24:83:dc:65:1f:
13:30:34:2b:17:53:b1:bf:e2:03:03:8a:93:c5:f8:29:4b:54:
45:eb:5b:45:76:c8:2d:7a:7d:a6:e6:d1:a3:5c:9a:66:02:25:
d5:be:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:35 2025 by rpki-client