Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: jnVzzrLy1Ebyb3l3wpgo1rP/HETgwWnEONVmL8J/PAQ=
Subject key identifier: CD:3E:AB:2E:98:6D:35:F3:EF:9D:B1:79:2F:F0:FD:20:87:D9:BC:3E
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 01984AAE9FF2FE488FC27AA9912968621482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0853
Signing time: Sun 27 Jul 2025 07:00:14 +0000
Manifest this update: Sun 27 Jul 2025 07:00:14 +0000
Manifest next update: Mon 28 Jul 2025 07:00:14 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: fstb7jmhLg1/rGHjXexeT9OuVPp8pCAzwScRXzsJF88=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:9f:f2:fe:48:8f:c2:7a:a9:91:29:68:62:14:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Jul 27 07:00:14 2025 GMT
Not After : Jul 28 07:00:14 2025 GMT
Subject: CN=cd3eab2e986d35f3ef9db1792ff0fd2087d9bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:16:c8:04:08:52:35:66:cf:a0:4f:e3:aa:
c8:94:c4:ec:87:ed:08:d1:67:07:f1:18:1d:18:68:
f5:4d:bc:64:65:59:e2:3e:7f:47:80:7e:46:94:b8:
5a:33:fc:c7:24:fd:6e:0d:56:aa:ae:35:ab:b5:12:
e3:3d:3f:71:73:49:90:5d:66:58:a0:04:af:3c:fe:
c6:de:c4:6b:fc:af:eb:75:61:ed:b8:91:d5:86:90:
7c:3d:57:e4:b9:63:22:c4:50:51:f7:31:2f:79:63:
ed:b8:a5:3f:1d:f7:d8:c4:3e:63:ed:ca:c8:4d:08:
b2:b7:c5:5e:fd:45:27:d3:8e:93:f7:99:a0:02:14:
e2:99:49:1c:f9:18:44:ef:21:0b:7f:38:b7:27:17:
ae:ad:ea:4b:c5:69:1c:13:3f:8e:18:c5:e6:7e:c4:
26:b2:65:42:47:c3:e0:b7:7b:69:36:13:c1:fc:66:
29:f1:9f:86:2b:fd:57:55:c0:70:e7:73:5c:b2:f2:
04:5b:ec:6e:19:64:cc:15:18:64:1f:dd:03:31:83:
63:6b:8f:b3:8c:2a:99:09:7d:2e:75:61:e9:ba:bd:
b6:a8:21:b7:86:ab:2a:1a:40:fb:4e:7d:74:0c:c4:
ae:0c:34:73:4d:e5:ef:87:b4:13:66:58:e0:4c:76:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:AB:2E:98:6D:35:F3:EF:9D:B1:79:2F:F0:FD:20:87:D9:BC:3E
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f0:78:99:83:cb:89:ac:bc:fb:c3:4d:ea:2f:61:34:a1:ac:
59:7c:18:82:76:b0:e7:8a:c3:47:ca:55:c7:82:0d:65:b8:c1:
32:d8:ac:a2:d0:cb:e4:67:97:39:dd:c7:de:10:87:b7:50:a5:
bc:b8:ef:37:5c:ae:2f:ef:b4:f0:e1:92:b8:21:b6:28:1b:fc:
0f:59:5a:b4:b1:3e:8c:38:09:de:52:10:18:f4:83:35:57:7d:
9b:69:4b:f9:56:28:87:5a:03:c0:6b:4a:d4:68:ba:2b:6b:ca:
c4:5f:4e:a5:a6:a0:14:30:76:96:1f:c7:e7:85:98:70:6e:31:
c3:b8:ea:44:ec:7d:08:24:37:e3:32:55:22:d0:20:84:dc:bf:
e7:91:d9:50:f2:79:dd:02:25:b0:95:a9:a6:2f:48:dc:8d:45:
d0:0e:66:66:f9:f2:40:f6:f7:9a:3a:91:4e:42:e1:3e:7d:4e:
c1:6e:ef:d5:6f:26:83:91:2c:00:ae:68:ca:b1:f0:40:dc:bd:
96:b1:7a:80:08:b1:e6:78:9a:7a:88:ff:ad:98:a9:a8:06:b9:
4e:92:6c:17:74:2b:7e:0e:94:92:2b:92:18:0a:36:0d:11:e4:
c4:07:34:d5:a9:5b:92:ba:76:09:6c:49:52:b1:2a:4a:24:3d:
0d:9b:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:40 2025 by rpki-client