Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: j7nKzqm/gwMN9oBgGbQUgMpQhlCXRm4Dpuvqfvrgn2o=
Subject key identifier: 40:0F:88:54:B2:EA:20:5B:8D:98:AC:0D:5F:31:51:4C:CB:5A:0C:BD
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0197D3994D134B69225C9A45723AEBB22234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 15C9
Signing time: Fri 04 Jul 2025 04:02:08 +0000
Manifest this update: Fri 04 Jul 2025 04:02:08 +0000
Manifest next update: Sat 05 Jul 2025 04:02:08 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: V8u3Mzb0Hlu8Uc3+Z6PydvAiIFtzmCNYpXyuR0cHZ6Q=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:99:4d:13:4b:69:22:5c:9a:45:72:3a:eb:b2:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Jul 4 04:02:08 2025 GMT
Not After : Jul 5 04:02:08 2025 GMT
Subject: CN=400f8854b2ea205b8d98ac0d5f31514ccb5a0cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:76:20:6c:20:04:36:ca:c0:c5:3d:f9:aa:
43:ef:14:21:db:bd:c6:14:ee:2f:99:9d:b4:6a:f9:
10:5c:8c:4a:35:04:f5:d2:fa:01:6d:8b:12:19:ca:
f1:77:d0:c9:37:db:23:85:15:c3:50:25:9a:c6:1a:
94:14:85:f9:e4:ac:ce:ee:9b:ac:fd:2e:2d:46:23:
d0:14:28:30:b1:c2:be:0e:4a:2d:a0:df:0d:16:51:
a1:ec:aa:8a:4f:e9:cb:3a:f9:6e:a8:23:0b:b5:b5:
be:eb:14:bf:28:25:df:6f:ae:4a:cf:1b:0c:76:86:
ba:0b:0d:5a:96:56:3d:0c:80:39:55:19:c3:53:18:
85:1c:fa:50:6f:62:dd:a5:22:db:e7:0e:70:ed:68:
8b:aa:cd:ef:4d:9f:55:e9:56:71:4b:28:1d:5c:1f:
f3:be:d6:49:42:dc:12:26:6c:15:6b:fe:dd:39:e2:
5a:4a:06:a1:e5:cf:55:61:93:06:b6:03:00:60:c3:
b9:5c:21:52:6d:b7:72:8d:30:0d:67:a8:a6:d2:93:
3c:3e:b9:96:79:13:7d:5e:3b:34:f0:6c:fd:cd:69:
c4:50:89:af:73:01:96:13:a7:49:4f:c1:c8:70:c2:
34:3f:fc:90:6f:a5:ae:c3:4b:ee:3b:3b:c6:cf:06:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:88:54:B2:EA:20:5B:8D:98:AC:0D:5F:31:51:4C:CB:5A:0C:BD
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:33:2a:17:21:38:55:98:d6:9b:ae:53:af:ac:10:54:8e:
2f:c7:2a:3e:ad:c0:d4:74:47:5d:b2:1e:5d:88:25:f0:79:77:
54:67:3c:02:74:00:52:1b:a0:12:b9:7a:a6:1d:8d:a8:ee:29:
a9:67:5d:85:f2:f6:e7:0c:f5:71:4d:86:9d:ae:d3:6f:92:8f:
9f:4c:7b:8d:6b:1e:05:99:29:04:a9:ee:5e:5b:16:1f:a8:34:
9e:25:db:3c:ff:28:4b:bb:ae:d6:a5:23:d2:37:80:05:00:79:
6b:f1:4c:52:99:a5:e8:16:f6:52:34:75:81:c7:ac:2b:c1:f5:
73:9e:2a:57:92:b0:a1:c9:68:e1:cf:32:07:ee:ca:69:12:ef:
ca:1a:56:1d:8e:ea:a6:c9:c7:35:8d:4b:1d:44:ca:c6:41:ac:
09:dd:3f:a9:b4:0b:d4:3a:3d:7e:fd:00:d8:71:63:ce:c5:73:
ad:d2:90:17:5f:d8:ea:97:1b:56:60:0d:a3:d9:dc:65:e6:e8:
57:de:37:0b:98:6f:e6:af:8c:0e:c3:4e:b0:35:11:86:c2:94:
71:4b:db:99:d6:6d:0b:3f:28:9e:54:1f:94:59:f1:a1:f7:4a:
a0:81:37:2b:84:de:48:d0:ae:1f:a9:63:22:ba:94:fe:75:e3:
22:10:68:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfTmU0TS2kiXJpFcjrrsiI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjUwNzA0MDQwMjA4WhcNMjUwNzA1MDQwMjA4WjAzMTEwLwYDVQQD
Eyg0MDBmODg1NGIyZWEyMDViOGQ5OGFjMGQ1ZjMxNTE0Y2NiNWEwY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu12IGwgBDbKwMU9+apD7xQh273G
FO4vmZ20avkQXIxKNQT10voBbYsSGcrxd9DJN9sjhRXDUCWaxhqUFIX55KzO7pus
/S4tRiPQFCgwscK+DkotoN8NFlGh7KqKT+nLOvluqCMLtbW+6xS/KCXfb65KzxsM
doa6Cw1allY9DIA5VRnDUxiFHPpQb2LdpSLb5w5w7WiLqs3vTZ9V6VZxSygdXB/z
vtZJQtwSJmwVa/7dOeJaSgah5c9VYZMGtgMAYMO5XCFSbbdyjTANZ6im0pM8PrmW
eRN9Xjs08Gz9zWnEUImvcwGWE6dJT8HIcMI0P/yQb6Wuw0vuOzvGzwYD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAPiFSy6iBbjZisDV8xUUzLWgy9MB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9czKhch
OFWY1puuU6+sEFSOL8cqPq3A1HRHXbIeXYgl8Hl3VGc8AnQAUhugErl6ph2NqO4p
qWddhfL25wz1cU2Gna7Tb5KPn0x7jWseBZkpBKnuXlsWH6g0niXbPP8oS7uu1qUj
0jeABQB5a/FMUpml6Bb2UjR1gcesK8H1c54qV5Kwoclo4c8yB+7KaRLvyhpWHY7q
psnHNY1LHUTKxkGsCd0/qbQL1Do9fv0A2HFjzsVzrdKQF1/Y6pcbVmANo9ncZebo
V943C5hv5q+MDsNOsDURhsKUcUvbmdZtCz8onlQflFnxofdKoIE3K4TeSNCuH6lj
IrqU/nXjIhBo5A==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:43:57 2025 by rpki-client