Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: I2A3uP14qzHpdc0MUjJACIbpWxwb+oDuECtgAaW/KeE=
Subject key identifier: 1C:0A:F0:60:EF:85:5E:B3:AF:28:20:CF:1C:18:6D:CA:72:96:7E:D0
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 0199FD33E1C62A8D57358D093C98714FACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0934
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: Xa3H9axGVIpNGi9R+iHhcbgQqFSY0g8/NuUdOfx69Gk=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e1:c6:2a:8d:57:35:8d:09:3c:98:71:4f:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=1c0af060ef855eb3af2820cf1c186dca72967ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:56:d6:f2:64:a8:50:81:a8:dc:62:14:e8:
e9:28:37:c2:d6:32:5a:8a:03:26:52:1b:a0:b1:76:
c9:35:1a:d7:e8:60:dc:d9:98:4c:2e:ca:da:90:6a:
47:20:b2:0d:ce:48:95:ef:fe:30:eb:de:4f:a2:95:
97:21:80:dc:e4:ac:54:67:34:10:5b:be:95:b9:2a:
c8:d5:9d:6a:30:d2:b6:6d:ae:7f:36:71:e7:3b:22:
60:8a:59:af:65:5e:3e:c4:91:ca:8b:8e:dc:1d:27:
82:b8:64:db:01:29:5f:75:18:0e:79:ac:ed:d7:08:
57:ee:10:2b:05:ca:0d:af:3c:ef:ab:df:04:32:6a:
38:e3:9b:91:6d:cb:c1:84:8b:5f:fb:96:43:fb:8b:
a4:d1:67:91:38:ee:25:fd:d1:1c:a2:8f:44:01:29:
69:b0:86:7f:c8:fa:ca:57:e7:e1:e5:88:78:12:4a:
c0:2f:1b:b5:ba:7e:53:ca:89:f1:13:ee:bc:07:85:
cc:06:cf:35:40:34:3d:62:06:d9:3e:c2:b3:7a:d4:
91:a2:99:ab:ae:6f:ca:4d:ff:ff:83:b9:45:1b:1f:
43:24:be:31:23:fd:aa:e8:4f:0c:fd:57:07:75:7e:
82:e8:d5:4e:2a:7c:06:e3:f6:20:24:55:7b:57:76:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:F0:60:EF:85:5E:B3:AF:28:20:CF:1C:18:6D:CA:72:96:7E:D0
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8c:fc:25:31:04:c8:14:d3:73:24:37:1e:19:35:35:6e:d7:
d9:0b:2c:f5:6f:95:d1:50:9d:6b:d3:d2:a0:85:87:37:1b:a6:
60:c9:79:89:49:b8:41:0a:67:6d:0f:a7:da:fd:ed:39:61:d6:
39:93:c5:20:4d:08:9e:4c:88:b8:0c:b8:24:b7:da:64:88:8e:
8a:aa:f0:80:d0:a5:96:e1:fe:c1:4e:9c:f6:8b:d0:47:af:27:
5f:cc:9b:3b:f2:35:5b:3e:58:70:fa:c0:e2:16:5e:1e:ed:9f:
34:ac:1d:ee:c3:38:03:85:8a:71:4a:96:6e:6c:f9:53:0d:0c:
a9:d9:58:dd:ec:d3:e7:10:bf:2f:1e:db:ad:18:03:41:55:b6:
88:d2:15:ea:18:a1:71:2e:a6:d6:27:1b:0f:88:72:0c:cd:68:
1b:7d:1b:00:71:f3:f8:57:5f:fc:2c:5d:31:1c:57:4f:ee:12:
0a:3d:f7:99:b0:c5:51:4f:ca:ca:63:c4:04:14:c7:b6:26:df:
60:7d:8a:10:6e:53:15:da:c1:00:d8:99:7b:e6:11:97:46:83:
96:09:a8:d2:d4:35:8d:f9:e4:a0:69:7b:03:2d:c1:d6:47:49:
f3:31:55:12:8c:f4:27:3f:7b:8a:1b:87:61:81:4a:3d:9e:da:
50:00:e7:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+HGKo1XNY0JPJhxT6zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjUxMDE5MTYwMDU5WhcNMjUxMDIwMTYwMDU5WjAzMTEwLwYDVQQD
EygxYzBhZjA2MGVmODU1ZWIzYWYyODIwY2YxYzE4NmRjYTcyOTY3ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusxW1vJkqFCBqNxiFOjpKDfC1jJa
igMmUhugsXbJNRrX6GDc2ZhMLsrakGpHILINzkiV7/4w695PopWXIYDc5KxUZzQQ
W76VuSrI1Z1qMNK2ba5/NnHnOyJgilmvZV4+xJHKi47cHSeCuGTbASlfdRgOeazt
1whX7hArBcoNrzzvq98EMmo445uRbcvBhItf+5ZD+4uk0WeROO4l/dEcoo9EASlp
sIZ/yPrKV+fh5Yh4EkrALxu1un5TyonxE+68B4XMBs81QDQ9YgbZPsKzetSRopmr
rm/KTf//g7lFGx9DJL4xI/2q6E8M/VcHdX6C6NVOKnwG4/YgJFV7V3ZfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwK8GDvhV6zryggzxwYbcpyln7QMB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4z8JTEE
yBTTcyQ3Hhk1NW7X2Qss9W+V0VCda9PSoIWHNxumYMl5iUm4QQpnbQ+n2v3tOWHW
OZPFIE0InkyIuAy4JLfaZIiOiqrwgNClluH+wU6c9ovQR68nX8ybO/I1Wz5YcPrA
4hZeHu2fNKwd7sM4A4WKcUqWbmz5Uw0MqdlY3ezT5xC/Lx7brRgDQVW2iNIV6hih
cS6m1icbD4hyDM1oG30bAHHz+Fdf/CxdMRxXT+4SCj33mbDFUU/KymPEBBTHtibf
YH2KEG5TFdrBANiZe+YRl0aDlgmo0tQ1jfnkoGl7Ay3B1kdJ8zFVEoz0Jz97ihuH
YYFKPZ7aUADn6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:23:11 2025 by rpki-client