Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: kHsU/RLazhgpt+l+1mh9jTgyXQUeaLxMjLdUUXh+2aY=
Subject key identifier: 02:9B:1B:05:52:4A:CB:F8:FB:22:DD:96:8F:8D:A1:CC:2D:AD:8C:96
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 0198D5BBA0EE42D709593D34EFAC652D71FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 089B
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: XoYKYmkDHfeCXt6+fhywUlCj0AlrgzzBxcDNk/YD+q0=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a0:ee:42:d7:09:59:3d:34:ef:ac:65:2d:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=029b1b05524acbf8fb22dd968f8da1cc2dad8c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:83:d1:91:96:76:16:b1:35:f0:62:1a:80:
96:4f:77:7a:e3:3c:79:76:bf:61:0c:c9:b1:7c:8a:
9a:6d:9e:89:08:9e:70:6d:29:0e:11:ff:8e:1b:3b:
57:39:91:50:5f:56:52:59:71:36:99:83:4d:d2:96:
6d:14:5a:21:e5:94:cc:d9:ae:a9:66:86:d6:da:81:
ac:0c:8f:ca:a3:7e:4f:5f:c1:7b:99:d4:8e:72:1b:
ed:1d:09:7d:bc:95:f7:cf:be:7d:61:e4:0d:df:87:
be:e4:24:82:1d:92:7d:fe:6a:57:f0:fc:c2:64:41:
10:6d:a7:9d:fc:bd:f6:13:60:6a:b9:90:4f:5f:bf:
b9:78:74:c6:f1:e5:8f:cb:63:7a:03:4a:59:15:f9:
8c:bc:d0:46:9d:41:71:f6:00:d8:c7:84:5e:6d:d2:
2e:e6:e3:1c:98:8c:cb:ba:4b:f6:c7:5c:5b:4a:8a:
ef:32:f7:1c:92:8c:8f:80:ea:23:a1:e0:3b:bb:51:
c7:c6:bc:f7:8a:7a:f6:5c:ff:d5:19:c1:63:f6:86:
3b:5a:37:9d:15:d2:93:38:f4:87:55:66:94:72:ab:
ac:0c:0a:84:31:fd:a6:01:40:60:77:d3:da:b8:44:
00:bc:54:0f:ef:81:4d:c8:84:68:db:b5:f2:54:d9:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:1B:05:52:4A:CB:F8:FB:22:DD:96:8F:8D:A1:CC:2D:AD:8C:96
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:92:65:d4:ab:a4:f0:a0:8c:d5:12:8d:52:6b:30:17:ca:
a9:69:ae:dd:f6:f4:42:10:20:5e:33:be:f2:b9:25:fa:80:1d:
7b:dd:05:52:4f:c2:38:f5:35:89:50:02:12:21:ff:9b:3b:01:
f4:56:98:61:6b:d8:c1:89:8a:a8:81:b6:b8:0b:48:32:16:58:
59:c8:46:b6:c8:be:a2:93:a5:1b:68:ca:10:18:77:41:89:70:
29:f9:e5:b5:fa:58:16:7c:a0:e7:11:73:1c:98:5c:10:09:51:
b0:4f:0e:44:42:fd:14:38:a0:57:c8:11:3e:cf:ca:69:15:84:
10:be:03:46:63:07:54:02:2b:ba:64:e3:de:77:79:6b:2e:31:
c8:81:b2:48:22:28:b2:f7:8b:ab:b1:d5:f0:7d:4c:7c:a9:7a:
1d:0f:ec:17:13:86:43:ae:c6:23:19:fa:0e:1c:84:20:10:91:
aa:9c:e2:6e:2d:9e:dc:a7:9a:06:10:cb:fc:32:bf:a6:9d:d1:
54:ba:f4:d2:bc:af:a6:b9:d1:03:b9:f6:74:33:8d:ba:e1:05:
53:13:2b:45:8d:d0:74:78:91:55:01:f5:8f:d7:1d:92:99:e2:
27:3c:00:6c:c0:29:27:27:5c:f9:a8:1d:d9:9e:a5:dc:59:9d:
35:df:63:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6DuQtcJWT0076xlLXH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EygwMjliMWIwNTUyNGFjYmY4ZmIyMmRkOTY4ZjhkYTFjYzJkYWQ4Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCD0ZGWdhaxNfBiGoCWT3d64zx5
dr9hDMmxfIqabZ6JCJ5wbSkOEf+OGztXOZFQX1ZSWXE2mYNN0pZtFFoh5ZTM2a6p
ZobW2oGsDI/Ko35PX8F7mdSOchvtHQl9vJX3z759YeQN34e+5CSCHZJ9/mpX8PzC
ZEEQbaed/L32E2BquZBPX7+5eHTG8eWPy2N6A0pZFfmMvNBGnUFx9gDYx4RebdIu
5uMcmIzLukv2x1xbSorvMvcckoyPgOojoeA7u1HHxrz3inr2XP/VGcFj9oY7Wjed
FdKTOPSHVWaUcqusDAqEMf2mAUBgd9PauEQAvFQP74FNyIRo27XyVNkWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKbGwVSSsv4+yLdlo+NocwtrYyWMB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpiSZdSr
pPCgjNUSjVJrMBfKqWmu3fb0QhAgXjO+8rkl+oAde90FUk/COPU1iVACEiH/mzsB
9FaYYWvYwYmKqIG2uAtIMhZYWchGtsi+opOlG2jKEBh3QYlwKfnltfpYFnyg5xFz
HJhcEAlRsE8OREL9FDigV8gRPs/KaRWEEL4DRmMHVAIrumTj3nd5ay4xyIGySCIo
sveLq7HV8H1MfKl6HQ/sFxOGQ67GIxn6DhyEIBCRqpzibi2e3KeaBhDL/DK/pp3R
VLr00ryvprnRA7n2dDONuuEFUxMrRY3QdHiRVQH1j9cdkpniJzwAbMApJydc+agd
2Z6l3FmdNd9jtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:41 2025 by rpki-client