Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: KtfrxEqJiffn9wQZhLcN2zJHBTO+qC7MRNTz31QcQNQ=
Subject key identifier: 8B:88:07:83:F5:69:0C:9F:E1:32:09:2E:CE:B8:64:0B:74:32:CE:80
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 019A71B87370917CAE8F95D3EE1F4B2D4150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 0EB5
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: h4k3c0N1GhLkTUumcMAfMfXSJFzFQ4DDhHSN0G3BvmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:73:70:91:7c:ae:8f:95:d3:ee:1f:4b:2d:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=8b880783f5690c9fe132092eceb8640b7432ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:b6:e5:fa:b9:65:ea:20:e7:ed:83:a6:bf:
f8:80:48:b1:3e:0f:9f:f3:5a:41:48:32:c4:6f:81:
3b:15:4a:ad:f3:9a:f4:c8:24:f2:8d:17:17:18:f0:
00:03:7a:a2:16:6f:7e:e5:18:77:f9:30:66:73:a4:
c9:ae:f4:dd:63:c0:87:e6:78:6b:01:e4:2a:2a:a0:
96:b4:5c:5c:47:8d:40:df:7a:93:dc:31:62:45:41:
59:1a:af:33:5c:74:97:f3:14:0a:ee:d5:bb:09:73:
e5:3b:6e:ab:15:24:45:b7:1b:93:21:6e:38:60:f4:
72:ab:06:18:4d:a3:a5:fe:20:09:16:67:91:a6:10:
b7:54:d0:13:36:12:0f:8b:bc:5a:c2:33:0c:f2:92:
d3:4a:e1:39:03:98:d5:3b:a8:a4:9a:4f:5b:d8:cc:
ca:86:b1:ff:87:ca:3a:cf:89:7e:b5:62:9a:7b:1a:
b2:e5:a4:93:7b:c7:63:02:b8:d6:db:87:b2:0a:c4:
1e:fa:33:9c:94:c8:f3:0e:0f:d9:38:c6:bc:87:a9:
bd:eb:99:36:1d:e1:06:fe:4b:e6:98:19:23:15:4d:
3e:8d:61:e3:fb:47:85:6f:1c:34:6c:49:05:1d:c0:
8b:bc:5c:44:74:e7:cf:81:00:61:a4:2d:88:7e:e0:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:07:83:F5:69:0C:9F:E1:32:09:2E:CE:B8:64:0B:74:32:CE:80
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7b:db:a6:a2:3d:15:2e:c0:cf:df:be:4f:0d:0e:e5:8d:34:
6e:37:b6:e6:56:08:60:7e:ea:53:27:ac:3d:36:a4:a2:f9:f5:
b9:76:26:53:b1:4d:44:04:8e:38:be:ec:c6:3d:cf:b8:9f:c1:
36:9b:b1:90:63:56:fe:00:31:32:b6:00:b0:f6:ad:ff:58:73:
53:5f:26:f6:aa:cb:25:40:e3:f2:53:8a:35:c5:e7:e0:0f:38:
6c:10:bb:54:79:9c:dc:e9:76:52:fd:0a:55:6d:14:5c:d1:33:
97:a0:21:3e:26:8d:13:e7:5e:02:bf:17:5b:84:c8:db:2f:02:
00:06:c1:19:3a:4d:37:e7:7a:56:23:7f:bf:95:90:d7:ad:05:
4d:2b:a9:f2:38:ad:6a:4e:d2:d0:da:3b:54:6b:19:21:18:08:
76:24:75:96:ef:e1:91:95:1d:a0:00:47:bf:16:e3:bb:82:b5:
35:0a:8a:04:9c:74:2e:aa:fe:02:e9:ff:a5:8e:1f:57:55:e1:
8a:39:28:80:d2:83:70:39:a8:c4:8b:55:0b:2b:2f:5b:62:80:
bc:88:9d:70:b0:ca:91:b1:0d:6a:ca:b3:ab:21:95:e1:fd:0d:
7e:55:be:59:03:74:2b:0e:c0:b4:d3:ac:1c:e7:7f:37:12:f7:
91:6b:e5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHNwkXyuj5XT7h9LLUFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjAyOTRiNDZjOTAyZDkzYzA3OWMxNjg2Y2ZlNDViYmEz
MzE4Y2IwHhcNMjUxMTExMDcwMTQ0WhcNMjUxMTEyMDcwMTQ0WjAzMTEwLwYDVQQD
Eyg4Yjg4MDc4M2Y1NjkwYzlmZTEzMjA5MmVjZWI4NjQwYjc0MzJjZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZa25fq5Zeog5+2Dpr/4gEixPg+f
81pBSDLEb4E7FUqt85r0yCTyjRcXGPAAA3qiFm9+5Rh3+TBmc6TJrvTdY8CH5nhr
AeQqKqCWtFxcR41A33qT3DFiRUFZGq8zXHSX8xQK7tW7CXPlO26rFSRFtxuTIW44
YPRyqwYYTaOl/iAJFmeRphC3VNATNhIPi7xawjMM8pLTSuE5A5jVO6ikmk9b2MzK
hrH/h8o6z4l+tWKaexqy5aSTe8djArjW24eyCsQe+jOclMjzDg/ZOMa8h6m965k2
HeEG/kvmmBkjFU0+jWHj+0eFbxw0bEkFHcCLvFxEdOfPgQBhpC2IfuDYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuIB4P1aQyf4TIJLs64ZAt0Ms6AMB8GA1UdIwQY
MBaAFCEgKUtGyQLZPAecFobP5Fu6MxjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2Qt
YTIwZGE1NmM0MTg0LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2QtYTIwZGE1NmM0MTg0
LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXvbpqI9
FS7Az9++Tw0O5Y00bje25lYIYH7qUyesPTakovn1uXYmU7FNRASOOL7sxj3PuJ/B
NpuxkGNW/gAxMrYAsPat/1hzU18m9qrLJUDj8lOKNcXn4A84bBC7VHmc3Ol2Uv0K
VW0UXNEzl6AhPiaNE+deAr8XW4TI2y8CAAbBGTpNN+d6ViN/v5WQ160FTSup8jit
ak7S0No7VGsZIRgIdiR1lu/hkZUdoABHvxbju4K1NQqKBJx0Lqr+Aun/pY4fV1Xh
ijkogNKDcDmoxItVCysvW2KAvIidcLDKkbENasqzqyGV4f0NflW+WQN0Kw7AtNOs
HOd/NxL3kWvl2A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client