Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: vYbYhNWdB7oCVvhBTQ4D0Di4x3rZruaa8AM1ygaBtPM=
Subject key identifier: B4:52:16:48:F4:44:B5:2A:3B:42:F2:A7:94:ED:53:A7:4F:FC:9B:13
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019A5187CD480F9B0038691B1469EFF249EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: OE1I/IEZdKkJjR8H9Y+RZMV7FaWg98DVT1KegZNpmPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:cd:48:0f:9b:00:38:69:1b:14:69:ef:f2:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=b4521648f444b52a3b42f2a794ed53a74ffc9b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:61:08:08:ec:58:32:f4:8a:69:69:b9:a8:
f4:8f:a8:72:6b:1b:90:e9:e5:44:d0:9c:10:5f:6d:
8a:24:66:83:97:f0:49:e7:ad:89:e3:b2:83:33:bb:
d1:3f:56:2c:14:1f:06:d5:82:49:5c:99:7b:a6:d0:
4d:3e:7d:88:aa:b1:b9:ec:ef:67:b4:72:91:82:31:
ec:cd:84:44:5f:3c:1d:db:a9:43:ab:ac:d3:c9:27:
b8:63:f5:b3:bb:0a:2a:18:4d:59:4d:7c:e1:a2:c0:
0d:74:dc:91:fc:38:e4:af:6d:41:34:ef:75:34:76:
26:53:b3:76:fa:f1:29:37:63:0d:d4:32:32:0b:07:
01:fc:32:18:b0:33:e1:8d:47:84:16:e5:87:f1:ea:
cb:43:b6:2e:6e:56:a2:d3:03:c7:68:6c:4e:e1:22:
36:c0:fb:88:45:1b:d2:1a:7d:50:bd:94:d4:fd:4e:
5f:68:bf:76:5f:87:f3:a3:dc:b6:07:ca:b9:01:2e:
59:17:fd:82:b2:3d:03:05:03:b7:8b:8e:20:ac:6f:
1f:7e:50:b3:27:08:c2:9c:9f:0d:12:58:61:63:94:
fc:bf:d1:a5:f2:5f:0e:a5:c6:b9:4b:f0:d7:bd:e9:
65:f2:5c:8e:63:56:fa:90:b0:10:a5:97:25:e8:6e:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:16:48:F4:44:B5:2A:3B:42:F2:A7:94:ED:53:A7:4F:FC:9B:13
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:2f:e5:84:0b:60:d0:ca:a3:e3:b0:44:78:cb:53:e4:7a:
f4:3b:4d:a6:c4:3c:b9:94:3a:2e:34:d3:5f:cb:35:8b:e5:34:
b8:12:73:0d:5f:8f:62:12:6f:09:25:80:dc:7f:3e:b6:bf:7c:
c5:13:7c:e0:c1:9a:78:d8:b4:80:3b:bc:b4:1a:11:0d:13:e5:
4a:43:23:53:57:59:b5:37:3f:4c:f3:93:e4:18:95:82:f4:ce:
c2:10:a9:89:61:a7:26:a9:db:f5:92:80:4f:ff:90:84:df:91:
3a:12:9b:a4:d4:5c:fa:38:f7:19:24:ff:82:cf:df:7b:8b:ac:
cc:b4:bd:b9:b5:bc:8e:44:35:74:1c:aa:65:51:e3:3a:9b:6a:
9d:52:37:33:dd:15:4d:59:05:79:c5:68:53:15:0f:9c:78:90:
e1:f4:2a:e7:5b:0d:bd:b8:86:7c:82:f6:90:c8:b8:f0:79:6e:
74:31:d7:b5:cb:98:e2:ca:96:e1:25:48:95:cc:8e:80:f5:3a:
8a:89:47:3f:c7:c9:ce:a2:5e:50:42:c5:53:a9:07:7e:a4:76:
ba:a9:28:1b:3f:a7:82:ef:93:1b:48:bf:2b:ad:af:88:17:db:
b5:66:7d:82:80:0f:ae:9b:24:ed:a8:dd:45:2a:98:93:af:70:
f9:a5:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:52 2025 by rpki-client