Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: mMYDzutKZa45d/RVZBM9ZP9jbmQq33Q7tdzJY7/DGeE=
Subject key identifier: B2:18:21:3A:85:93:C3:69:89:BC:A1:89:E2:B9:94:B2:CD:50:F3:94
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019A299E0A1D6263C3CBE2102EAC35B48ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 094B
Signing time: Tue 28 Oct 2025 07:00:14 +0000
Manifest this update: Tue 28 Oct 2025 07:00:14 +0000
Manifest next update: Wed 29 Oct 2025 07:00:14 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: +YxeFuSfNxp//2m50u4j9/A29nIFfoYqdpAp9XfavGw=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:0a:1d:62:63:c3:cb:e2:10:2e:ac:35:b4:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Oct 28 07:00:14 2025 GMT
Not After : Oct 29 07:00:14 2025 GMT
Subject: CN=b218213a8593c36989bca189e2b994b2cd50f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:96:86:39:9d:a7:1b:6f:dc:33:da:c6:1c:
ca:c7:7a:da:b2:15:26:4a:13:63:02:d1:93:b7:6d:
8a:9f:59:ce:4a:be:47:5d:ad:24:e2:92:ae:1d:fb:
78:87:b0:bd:99:fa:de:08:d5:6f:88:ff:8a:a1:4d:
85:ac:ba:a9:84:8f:4e:11:e8:26:df:7e:c5:d8:9e:
53:cc:7a:5a:de:e4:12:97:b9:ed:21:16:69:71:b3:
42:2e:3d:f3:c6:c9:ab:39:c2:ec:fb:e4:63:ca:ab:
ef:7e:b5:2f:84:3a:1a:25:23:0a:d0:de:bb:e7:a7:
e5:46:6c:f2:53:c1:d7:46:fa:e2:34:e5:7d:96:33:
af:e4:67:45:ae:c3:4a:fc:28:a1:73:7b:da:2a:e9:
6b:e7:b2:93:0a:65:e8:22:d6:19:40:07:c6:8b:07:
db:64:f0:01:60:6f:be:ac:48:c2:93:ef:71:a3:8b:
8e:55:06:8b:c6:ec:2c:ec:91:16:24:f9:3c:07:81:
7a:7b:bd:69:65:c9:de:95:05:e3:6f:ee:c1:6a:95:
c5:5c:43:b9:41:f7:da:69:7a:dd:cb:02:72:93:31:
2b:78:8c:3b:18:80:1b:e6:13:1b:fa:bb:54:15:86:
05:30:85:8f:ea:73:77:70:52:c1:ab:72:e8:3b:cd:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:21:3A:85:93:C3:69:89:BC:A1:89:E2:B9:94:B2:CD:50:F3:94
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:a6:3d:55:e9:d5:59:58:3a:6a:c2:97:04:a2:16:eb:33:
b3:23:47:dd:44:5c:e6:79:3c:41:f4:a2:cb:c0:f5:59:dd:c4:
dc:1e:4e:6c:b8:81:fd:98:ed:4e:06:4b:98:90:60:98:68:cf:
a9:86:82:41:b3:e0:59:fb:c9:6c:9f:d5:06:ec:a5:8d:52:d4:
4d:97:f8:51:18:6f:16:1f:13:b0:a3:22:75:f6:fe:3e:c5:eb:
75:10:73:f0:e7:4f:05:32:29:39:15:7b:a4:3e:01:6b:73:e0:
0f:db:da:40:28:13:b0:85:d4:8a:f7:72:8c:31:89:5b:56:67:
e0:f2:76:27:86:96:20:79:69:9e:02:fd:58:53:d0:b8:5c:59:
cb:43:4a:01:6d:90:d2:e8:7a:1f:e0:2e:23:0b:93:43:8c:c2:
e4:a6:1d:67:9e:c7:49:8d:3e:07:1b:ce:33:99:74:52:7c:60:
42:d8:15:2f:93:bd:ca:36:a7:c8:2b:68:ea:c6:c7:c7:ff:62:
9f:53:9b:a5:71:1e:f9:bc:a5:66:c6:f4:ba:97:ad:81:8a:3b:
f8:45:68:c0:b0:41:c0:a4:d2:5a:21:79:2b:6a:73:12:43:45:
b3:02:2f:55:22:8d:8e:39:6b:2d:f8:2c:82:cd:74:c7:11:67:
b9:10:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:55:48 2025 by rpki-client