
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: yA2nlEBpc33Elw6D5iQ7Ouwme0Pmge2efrZtmGgdTPU=
Subject key identifier: 2C:B2:76:08:E8:E3:63:43:F6:16:BE:E1:28:94:C6:58:56:0F:70:96
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 0199FC5908A900417D5ED053622606BE2295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: 7CgbMHxuJajLgebxzNfnlB8hYAs.roa (hash: 9Cs5URgUgIByAdH61MOA1mCVhVWDEosP+T03kfLMOlI=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: +OJFTJxvdWMf+MeUSGccJrvZcY+XYrMxzvplWWgYejI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:08:a9:00:41:7d:5e:d0:53:62:26:06:be:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=2cb27608e8e36343f616bee12894c658560f7096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:6a:fa:93:49:1e:ce:30:71:ce:f7:b3:36:
0c:c2:90:44:c6:0e:25:65:06:7b:80:fe:94:47:db:
a0:02:49:08:e5:e4:84:12:ab:03:54:f4:11:5a:eb:
b1:49:0a:73:2d:2f:31:2f:ed:aa:75:1d:17:da:1f:
43:91:ec:b5:90:01:55:60:0a:bc:8e:cc:38:1c:d8:
29:9a:44:8a:c5:ee:3c:40:78:1b:e6:13:aa:eb:32:
09:41:33:ec:81:0f:99:45:3e:01:77:27:57:e8:31:
ee:b3:c5:87:57:3c:bd:b7:21:b0:a2:cf:cb:22:a5:
e5:e0:4f:e4:93:1a:8d:12:4b:06:a3:9e:ca:9e:73:
7a:78:b4:3c:3e:01:8a:d3:e1:cc:75:f9:42:d4:5e:
7f:dd:33:ac:5e:8a:a5:6b:86:db:4c:a4:7c:3d:e8:
de:6c:2a:e5:09:e5:bf:13:3c:b7:72:fc:cc:2d:e3:
80:fa:af:8a:e2:0a:f8:c5:ae:76:3d:4c:c6:3b:1e:
54:e8:ff:97:1c:ee:5c:3c:49:f3:24:0d:95:cf:27:
7c:61:dd:d2:39:6c:cf:22:f3:d2:8d:b3:81:f1:fd:
21:ff:7b:61:14:e9:31:3e:2e:c3:9b:26:bd:3c:e6:
88:a8:97:13:37:b4:e1:9f:bd:f1:33:d8:65:58:80:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:76:08:E8:E3:63:43:F6:16:BE:E1:28:94:C6:58:56:0F:70:96
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:4a:c9:ab:19:76:a2:f7:fd:89:21:6f:4a:f1:16:28:0b:
86:20:ed:d2:fa:a4:0e:d9:4b:b3:28:3d:6d:4d:9b:8b:45:2f:
bd:7a:76:00:4a:da:a7:81:e1:73:e8:d1:98:b8:bc:17:af:57:
f1:be:1a:7d:a0:5b:20:f6:4a:61:ac:2a:c7:06:91:f7:ab:3e:
87:3e:c3:ee:cb:82:27:a9:23:38:67:52:a5:d4:40:b8:4f:75:
de:5e:b0:f7:e8:2a:7b:56:1e:f4:2f:f5:b8:a1:5f:9b:f8:d9:
8a:2a:4a:ab:d6:bf:2b:17:4d:1d:4a:e8:b5:ba:db:ae:82:6d:
fa:1b:f5:91:15:e4:fa:64:11:71:a7:18:3a:81:20:d6:95:d0:
38:a0:d2:9b:d5:14:92:db:24:0b:a8:8c:00:b8:ac:a9:04:5a:
a4:07:06:3d:99:41:d5:81:d8:c4:2c:3c:2e:d9:de:47:39:4d:
ff:21:f8:46:f4:28:f1:70:8f:07:5f:aa:17:db:b2:3a:fa:ac:
2b:ec:af:4e:16:58:d4:c9:25:56:e5:6d:16:d1:02:d1:9a:82:
bf:6b:51:29:6b:64:eb:e2:1b:c2:9f:21:5f:b1:ae:15:01:59:
8b:c7:07:e2:22:a1:b0:09:18:41:63:56:47:70:5f:a8:eb:4d:
b1:3a:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:22 2025 by rpki-client