Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: 8QyHFXVZj1qEP7n4qZFufit2JrM4d4yPLgPm2hg3+xw=
Subject key identifier: C6:B4:95:85:2C:DE:8C:55:4F:5A:34:AE:02:5E:9C:F2:C6:33:02:13
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0198D65FBEED6813C774C18E27B558899A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: k24E3Oe7/cYGBlFmUCl6B9jaCxxDdVLQk7Xa8WGvUAg=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:be:ed:68:13:c7:74:c1:8e:27:b5:58:89:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=c6b495852cde8c554f5a34ae025e9cf2c6330213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:68:59:64:41:28:de:b2:04:11:3d:43:6e:
98:60:34:82:f2:b4:4e:35:1f:82:b4:b1:91:4a:61:
5a:b0:4d:37:92:14:21:a2:ae:df:da:3a:95:7d:0a:
81:6f:36:59:b4:c8:f8:b3:51:97:d4:4a:af:ab:cf:
c9:64:fa:ff:fd:aa:d2:d8:c8:f0:34:9a:f9:ed:38:
81:fd:cc:6a:61:52:83:20:fa:9a:4a:af:a9:0d:f7:
0b:c8:9f:cf:32:38:e0:1e:a7:63:72:30:45:bd:2e:
e0:79:fd:5c:87:72:d9:e4:cc:f1:b5:a5:9b:0a:d8:
d7:e3:8d:3d:5b:b7:b1:b6:5b:9f:19:df:20:ed:61:
7b:cb:4b:05:8f:22:df:39:0e:db:c8:93:2f:63:f6:
d8:cc:62:09:ef:a7:e8:0e:c7:8b:60:71:76:b9:28:
04:34:fd:ae:d1:0d:2e:f7:19:5b:7e:a3:d6:43:c6:
04:0c:48:25:3e:02:82:14:a3:60:70:39:2b:3a:c9:
8c:81:33:f0:53:3a:ba:09:de:7f:9e:22:24:f4:b8:
c3:3f:05:74:cc:6e:0b:6f:ba:a9:58:15:a4:cd:2f:
43:92:b6:5c:ca:05:90:ad:c7:43:4a:f2:f4:49:57:
84:f4:92:a3:7e:af:f2:11:6f:a0:7a:40:15:9d:d5:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:95:85:2C:DE:8C:55:4F:5A:34:AE:02:5E:9C:F2:C6:33:02:13
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c0:a1:0a:f6:62:ee:56:c6:80:6a:a5:d1:09:00:85:65:35:
06:87:8a:75:c9:2a:bf:d2:be:fb:d1:0b:03:90:2f:e9:60:7c:
82:f9:0a:c4:0c:ac:56:e0:7e:9a:f6:a8:ed:47:90:1d:9f:11:
41:72:69:96:f0:20:2f:21:15:3a:ce:68:d5:dc:c5:3c:e9:da:
b0:c9:de:4b:05:cf:06:d6:e3:f2:24:68:1b:93:fb:08:97:46:
ef:9d:0a:27:47:d5:68:19:9d:2a:25:ca:fc:87:4d:36:2b:70:
bc:0e:bd:b8:d0:84:54:d7:35:60:bb:e2:bd:d5:fa:c9:b6:d0:
64:77:86:b5:c1:ee:0a:93:4d:65:03:50:b8:da:8e:f0:fa:52:
8b:99:30:75:12:5a:7f:bc:6d:4d:03:dd:f9:27:e8:74:b6:1f:
4d:e8:9a:60:68:8c:bc:28:a3:50:0e:f5:3f:37:af:22:bd:ba:
1f:c0:dd:3b:02:d3:56:9e:47:bd:0b:24:05:42:f2:2a:28:34:
f4:cd:4a:b0:12:fa:ce:da:45:13:20:5e:27:a3:c4:7b:10:df:
ce:28:0e:49:18:c9:ac:50:0e:75:b4:a6:b9:1a:f6:9c:73:84:
3f:59:68:20:84:62:40:77:19:e3:0b:02:d8:3f:29:3b:36:0f:
aa:c5:e8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX77taBPHdMGOJ7VYiZp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjUwODIzMTAwMDU1WhcNMjUwODI0MTAwMDU1WjAzMTEwLwYDVQQD
EyhjNmI0OTU4NTJjZGU4YzU1NGY1YTM0YWUwMjVlOWNmMmM2MzMwMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFoWWRBKN6yBBE9Q26YYDSC8rRO
NR+CtLGRSmFasE03khQhoq7f2jqVfQqBbzZZtMj4s1GX1Eqvq8/JZPr//arS2Mjw
NJr57TiB/cxqYVKDIPqaSq+pDfcLyJ/PMjjgHqdjcjBFvS7gef1ch3LZ5MzxtaWb
CtjX4409W7extlufGd8g7WF7y0sFjyLfOQ7byJMvY/bYzGIJ76foDseLYHF2uSgE
NP2u0Q0u9xlbfqPWQ8YEDEglPgKCFKNgcDkrOsmMgTPwUzq6Cd5/niIk9LjDPwV0
zG4Lb7qpWBWkzS9DkrZcygWQrcdDSvL0SVeE9JKjfq/yEW+gekAVndXFlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa0lYUs3oxVT1o0rgJenPLGMwITMB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcChCvZi
7lbGgGql0QkAhWU1BoeKdckqv9K++9ELA5Av6WB8gvkKxAysVuB+mvao7UeQHZ8R
QXJplvAgLyEVOs5o1dzFPOnasMneSwXPBtbj8iRoG5P7CJdG750KJ0fVaBmdKiXK
/IdNNitwvA69uNCEVNc1YLvivdX6ybbQZHeGtcHuCpNNZQNQuNqO8PpSi5kwdRJa
f7xtTQPd+SfodLYfTeiaYGiMvCijUA71PzevIr26H8DdOwLTVp5HvQskBULyKig0
9M1KsBL6ztpFEyBeJ6PEexDfzigOSRjJrFAOdbSmuRr2nHOEP1loIIRiQHcZ4wsC
2D8pOzYPqsXo6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:08 2025 by rpki-client