Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: WB/v9Q2vOKttaYP6iXV7cibNtGvj0vFFWLYCmIq+aNw=
Subject key identifier: 02:91:9F:E1:2D:1D:77:CE:63:20:95:D3:4B:F5:25:E7:3C:23:7A:DA
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 01983DCF7D9BD95508F36E04FE556C4516E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1600
Signing time: Thu 24 Jul 2025 19:01:04 +0000
Manifest this update: Thu 24 Jul 2025 19:01:04 +0000
Manifest next update: Fri 25 Jul 2025 19:01:04 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: bKE8t0r4wy4P0kJYVOX1ftY6YXskjhzvEQAnKV9K4vw=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:7d:9b:d9:55:08:f3:6e:04:fe:55:6c:45:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Jul 24 19:01:04 2025 GMT
Not After : Jul 25 19:01:04 2025 GMT
Subject: CN=02919fe12d1d77ce632095d34bf525e73c237ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:b0:e8:3c:69:fc:80:09:69:98:8d:92:af:
4a:7b:7b:6c:26:5a:bb:72:4b:83:7c:25:2a:21:0b:
ea:ea:23:2e:89:3c:81:20:0b:2a:2d:dc:9e:52:c3:
96:81:f8:65:cc:d5:93:d9:00:b0:f7:d5:22:17:cb:
22:38:18:04:b0:70:5f:75:fb:21:29:e9:63:2c:a4:
fb:05:8b:5e:d0:db:a6:c2:94:3b:28:eb:ee:10:69:
f5:fe:62:31:0f:f6:2f:20:72:40:8b:52:2e:31:67:
46:36:8e:ec:20:f1:16:51:84:bd:48:84:92:3c:31:
d1:62:7f:19:54:e8:54:7a:3a:ef:5d:c0:6e:03:c9:
d8:21:a8:43:4d:46:b7:55:39:9a:da:35:28:23:08:
52:7d:46:4f:c4:44:4f:62:22:29:6c:7c:40:ec:cb:
7b:7e:37:44:22:61:c1:94:c1:50:85:4a:c7:9e:d0:
4a:a2:32:ac:f3:1b:47:f9:28:e3:14:78:8e:8f:12:
18:7b:61:32:5b:c0:cd:a5:86:2b:11:79:09:26:a1:
32:86:14:ad:35:ef:90:f9:8b:ff:f3:c0:e7:be:b5:
1d:7c:f6:d6:df:36:34:f9:79:a5:02:ee:73:37:c8:
75:2a:a9:ca:13:8d:9b:72:5a:18:e2:a2:ed:f0:2a:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:9F:E1:2D:1D:77:CE:63:20:95:D3:4B:F5:25:E7:3C:23:7A:DA
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:69:f6:d4:7f:00:6d:5d:05:09:44:7c:f5:4c:40:14:84:11:
60:fa:2e:13:00:a7:b2:b7:9f:2d:b5:d2:2e:af:51:65:a5:a6:
61:17:49:33:4d:00:0a:b9:76:91:ad:99:58:69:cf:9a:fb:92:
2f:8d:ba:c1:62:e8:72:2d:2a:11:17:5d:72:ae:ff:aa:ce:e3:
b9:1b:b6:eb:fd:0b:6c:9b:6e:cf:a5:80:1d:c8:a4:2b:5c:64:
7f:e6:56:e1:47:98:96:14:dc:2f:13:e4:ae:46:46:ee:39:ab:
b3:21:8a:65:bc:3f:42:75:39:30:fc:c4:ab:33:6a:5d:e0:88:
34:c8:a2:b8:af:49:b3:38:e2:21:33:af:ab:41:41:fa:38:40:
39:65:7d:1f:62:30:6c:88:2c:4e:df:8f:bf:74:33:86:fd:f6:
45:d2:6f:0e:af:ca:03:89:d4:8a:ff:8f:61:ce:cd:b3:7b:8b:
5d:a2:bf:2f:a6:81:32:67:c5:6a:67:8f:8e:bd:58:be:49:43:
cf:29:c9:ce:2b:f5:c6:dc:9f:1c:a5:84:23:15:54:91:c7:a7:
b6:d1:56:a8:7f:9c:52:a7:cc:10:05:0c:a0:17:db:e6:fb:0b:
21:0e:ac:58:98:c3:5e:2c:d1:18:98:41:44:55:38:b4:9c:06:
5d:07:f5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9z32b2VUI824E/lVsRRbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjUwNzI0MTkwMTA0WhcNMjUwNzI1MTkwMTA0WjAzMTEwLwYDVQQD
EygwMjkxOWZlMTJkMWQ3N2NlNjMyMDk1ZDM0YmY1MjVlNzNjMjM3YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YWw6Dxp/IAJaZiNkq9Ke3tsJlq7
ckuDfCUqIQvq6iMuiTyBIAsqLdyeUsOWgfhlzNWT2QCw99UiF8siOBgEsHBfdfsh
KeljLKT7BYte0NumwpQ7KOvuEGn1/mIxD/YvIHJAi1IuMWdGNo7sIPEWUYS9SISS
PDHRYn8ZVOhUejrvXcBuA8nYIahDTUa3VTma2jUoIwhSfUZPxERPYiIpbHxA7Mt7
fjdEImHBlMFQhUrHntBKojKs8xtH+SjjFHiOjxIYe2EyW8DNpYYrEXkJJqEyhhSt
Ne+Q+Yv/88DnvrUdfPbW3zY0+XmlAu5zN8h1KqnKE42bcloY4qLt8CqpoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKRn+EtHXfOYyCV00v1Jec8I3raMB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWn21H8A
bV0FCUR89UxAFIQRYPouEwCnsrefLbXSLq9RZaWmYRdJM00ACrl2ka2ZWGnPmvuS
L426wWLoci0qERddcq7/qs7juRu26/0LbJtuz6WAHcikK1xkf+ZW4UeYlhTcLxPk
rkZG7jmrsyGKZbw/QnU5MPzEqzNqXeCINMiiuK9JszjiITOvq0FB+jhAOWV9H2Iw
bIgsTt+Pv3Qzhv32RdJvDq/KA4nUiv+PYc7Ns3uLXaK/L6aBMmfFamePjr1YvklD
zynJziv1xtyfHKWEIxVUkcenttFWqH+cUqfMEAUMoBfb5vsLIQ6sWJjDXizRGJhB
RFU4tJwGXQf1SQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 21:16:14 2025 by rpki-client