Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: 96vwZtbd7KuOb0nV2aWYoqIs7qSdq8YHMrf3coHp9A0=
Subject key identifier: C9:67:43:40:EF:5B:A8:F6:5F:E9:C4:83:8C:87:4A:28:F8:31:EE:91
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0199FBEC0CA8F3318FD2DA013A51EF5CAE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: uGyUkDEdDN3yQqvewRd2AfHMbAb9/lZPpio4j5Dgju4=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0c:a8:f3:31:8f:d2:da:01:3a:51:ef:5c:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=c9674340ef5ba8f65fe9c4838c874a28f831ee91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:c5:d7:01:e6:8d:e8:a9:de:82:a5:fe:0f:
9b:76:73:ec:1a:32:c4:e7:ef:2a:d9:79:3e:fc:70:
ff:e1:02:59:a6:6c:4b:22:a1:ad:73:67:dd:e2:84:
9d:da:22:94:8c:6c:d3:75:65:63:77:0b:fb:1b:8f:
e5:76:1f:76:90:db:ee:a0:f1:8d:20:e6:38:d3:62:
65:93:4f:f2:a2:52:db:ae:da:8f:4d:16:51:84:a0:
43:ef:0c:e9:58:92:f6:8d:aa:4b:08:55:cc:5a:2c:
57:40:8a:62:ed:70:e8:e8:49:76:ea:72:87:8e:2c:
5c:58:f5:97:fa:f3:a0:a2:24:d4:e0:15:cb:ef:fb:
49:06:1e:99:87:f0:26:2f:e7:c7:ba:35:d0:df:fb:
aa:7a:87:d1:27:3d:4a:39:70:5a:ec:b9:99:1b:79:
a4:e6:26:b4:3d:48:9d:a4:60:a4:77:b8:f1:a4:61:
d3:79:aa:15:f5:87:55:f9:bd:7c:cc:25:fd:be:8e:
e3:92:8c:68:b0:33:65:4d:5e:63:9e:d9:e9:80:ef:
f0:3d:33:d5:dd:33:f5:74:af:b9:fb:ee:10:d7:f6:
fc:65:17:18:ee:67:09:20:1c:b0:35:7f:5f:3b:41:
c1:e9:f1:01:8a:e6:11:4d:d1:ff:59:ac:55:c1:43:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:67:43:40:EF:5B:A8:F6:5F:E9:C4:83:8C:87:4A:28:F8:31:EE:91
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:5c:ad:d7:af:71:64:52:72:45:0b:c8:ff:69:fe:d0:c1:
f6:93:bb:9a:92:35:4c:77:46:a5:35:e4:e8:ce:b4:a7:88:26:
ce:08:27:93:fc:75:19:0f:cd:2d:e5:90:86:95:80:e2:c6:bb:
57:35:7c:6e:b7:8a:d6:0e:4c:99:50:32:0e:cd:67:17:25:98:
d9:6c:9b:98:0c:7e:b2:70:af:3a:6e:77:c8:a7:b2:8e:b2:4a:
66:0b:11:0f:f9:16:86:58:07:27:6c:a2:8e:ac:ca:f3:66:60:
35:e3:b2:79:dd:1d:a7:b1:a5:07:dc:ff:bb:ed:86:2d:5c:91:
24:5b:07:32:de:a6:29:cc:f0:81:7a:69:59:a0:af:e3:74:ce:
6c:93:d8:bc:de:9a:c6:cf:7a:9c:89:83:d0:d5:4a:98:6b:64:
8d:b8:52:f3:ab:54:92:3e:20:36:d5:81:5f:8a:63:40:b4:5b:
8a:c3:20:25:0f:87:10:31:8e:29:3c:74:74:66:22:25:93:da:
74:93:6b:bb:42:51:87:56:cb:7f:39:e0:e5:00:b4:85:d9:e9:
51:6b:06:6f:5a:3f:8f:02:58:3b:a4:21:d9:e1:b9:77:00:fb:
5e:57:27:dd:ca:e6:67:f1:16:1a:3a:6c:74:56:1a:ae:43:80:
79:5b:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:56 2025 by rpki-client