Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: UIA9gNKPx68mX73iHkn2szpqt59TSNvQ6wOpumora0A=
Subject key identifier: 4B:19:46:97:AC:83:E7:D0:A0:33:13:19:6F:A9:07:28:5A:2F:F3:E2
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019A5376463DAD7A64A48CF5D3520AE85949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 10:00:51 +0000
Manifest this update: Wed 05 Nov 2025 10:00:51 +0000
Manifest next update: Thu 06 Nov 2025 10:00:51 +0000
Files and hashes: 1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: JOjcB/yaIb6DQcmn1iJ5vYReULN6clQOHyiWHJmRm2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:46:3d:ad:7a:64:a4:8c:f5:d3:52:0a:e8:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Nov 5 10:00:51 2025 GMT
Not After : Nov 6 10:00:51 2025 GMT
Subject: CN=4b194697ac83e7d0a03313196fa907285a2ff3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:45:ec:a5:32:da:4d:53:33:dc:e5:bb:8f:
3b:54:d0:01:cd:a7:e0:b4:dc:15:13:90:ed:7a:98:
cf:c6:83:26:c9:f6:f3:f6:a8:35:30:31:2a:5f:f5:
07:0a:74:4d:9f:3c:67:b6:95:01:c8:90:d8:60:d5:
0e:01:3e:b4:21:f4:72:a6:0d:1d:09:e4:3a:1b:4c:
cd:38:62:38:94:61:a5:7b:cc:c7:ed:f0:dd:fc:17:
26:4d:df:42:dc:22:ed:ea:c4:1f:c7:bd:dd:15:6d:
9a:8f:8f:62:f1:5f:dc:d4:7d:12:28:83:11:d7:55:
0b:58:3a:24:ed:48:db:62:b8:4c:0a:9f:5d:cc:4d:
18:95:ff:72:09:ad:62:0c:c0:75:07:c5:c0:48:26:
bc:1d:01:3f:66:f2:10:5a:5e:27:de:32:0e:69:73:
ff:13:23:2c:a8:8b:e6:1f:4e:10:e5:69:30:57:c2:
ba:ee:f6:33:73:5e:3c:63:0f:be:30:eb:98:b3:b8:
83:69:08:80:3c:d8:c9:fd:a2:3a:bc:72:db:3c:f4:
44:0d:cb:e5:26:35:b6:9a:70:9d:ee:8f:ee:78:e2:
05:87:e8:db:87:6e:2c:b5:5f:c1:51:23:2b:10:1d:
1e:bc:f2:9a:e6:0a:2a:ce:9c:e2:fa:ef:fc:9f:9b:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:46:97:AC:83:E7:D0:A0:33:13:19:6F:A9:07:28:5A:2F:F3:E2
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2d:92:77:64:7e:88:56:9f:b3:4c:30:bc:d1:e5:f6:92:14:
fc:5b:41:d3:a7:68:61:83:7b:2a:f2:33:8b:b8:7a:f3:38:c3:
36:8d:29:b9:ac:f2:a5:ce:9a:4c:ec:6a:e0:be:8f:b1:42:dd:
71:07:32:5a:4d:4f:29:98:8c:a1:08:40:b2:8e:a0:d8:83:92:
49:81:cd:f8:e6:84:5f:d5:71:1b:eb:24:09:a0:6e:c8:9f:d7:
94:d3:d5:2c:3a:29:a8:b0:e7:30:47:95:8e:80:e3:8a:bd:24:
a8:f4:66:72:2f:71:97:ad:79:c3:71:57:ba:3a:22:b5:e6:18:
eb:78:94:64:cd:8b:1c:90:f6:ac:84:15:69:3e:21:fc:6f:43:
28:ac:d5:58:3d:5d:b8:66:1d:25:3c:29:d0:30:c8:79:a1:c5:
1b:40:64:e6:9b:e8:2d:98:cd:7a:4f:db:19:98:10:8c:fb:85:
32:f2:30:73:38:7b:f6:ef:c0:5d:30:ac:26:7b:e7:79:de:a1:
bd:6c:06:24:f6:94:c3:63:ab:94:74:dd:5e:23:1d:cf:f0:1f:
ac:64:2b:09:a1:7c:68:35:d4:33:26:6a:d6:02:5b:25:b6:13:
e9:f2:58:c3:9b:71:13:2f:e1:13:07:f8:cd:65:96:68:c3:a2:
8f:07:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:15 2025 by rpki-client