Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: vj21PJI+tcNW0Iz+5oCr3odUPHTCSOojWTPZMZp1RW4=
Subject key identifier: 7A:6B:F3:1B:14:C0:5C:E1:2A:B3:88:F8:3A:AC:98:C0:D5:AF:EC:79
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 0199364A24D3A7A75192DF3C001CC5BEFAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 08CD
Signing time: Thu 11 Sep 2025 01:00:52 +0000
Manifest this update: Thu 11 Sep 2025 01:00:52 +0000
Manifest next update: Fri 12 Sep 2025 01:00:52 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: NY5bAyWOLUV+4/TamdmAkb1LXrDDwwWjy+nXDWn50J4=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:24:d3:a7:a7:51:92:df:3c:00:1c:c5:be:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Sep 11 01:00:52 2025 GMT
Not After : Sep 12 01:00:52 2025 GMT
Subject: CN=7a6bf31b14c05ce12ab388f83aac98c0d5afec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:63:a1:f7:16:62:ab:ae:c9:11:d4:d4:69:
d6:08:7e:96:18:93:7b:97:b2:f6:26:53:8f:01:b9:
d3:71:ff:35:4e:69:61:8c:0c:8c:6b:3f:88:c6:41:
19:e8:1f:52:e2:4e:cc:78:25:fb:ea:24:01:f6:69:
24:10:e3:b9:ac:79:c7:b6:58:c8:ea:8f:bf:b2:77:
76:6d:07:6e:83:d3:f2:90:95:c8:1a:83:d8:dd:a8:
ae:a9:4b:5e:ee:db:b2:7a:a4:3c:66:da:08:d2:78:
8b:db:d6:f7:36:0e:bb:df:90:c0:d6:d4:5c:57:48:
d5:41:1f:15:37:85:d7:bf:0f:b7:5d:56:06:5b:97:
72:f6:18:a1:63:af:a5:7a:ec:5c:8a:44:4d:41:18:
5e:4c:a6:aa:75:32:da:c2:e8:07:2a:3c:b9:51:fc:
61:20:a8:35:23:7d:01:ae:26:a1:d5:4b:94:92:85:
9e:72:6e:cc:05:bf:22:05:5e:82:57:85:64:04:a8:
ff:95:8d:79:3d:dc:f0:ba:12:d8:7c:87:31:1a:bc:
79:39:84:a9:42:97:01:9e:d9:7b:38:a3:7b:f4:f8:
0d:46:6a:cb:99:65:6d:d6:f7:7c:93:c3:f6:d8:23:
8b:43:93:34:b2:62:a4:8f:59:87:4e:33:11:46:f1:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:F3:1B:14:C0:5C:E1:2A:B3:88:F8:3A:AC:98:C0:D5:AF:EC:79
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:e0:af:99:a8:a4:6b:80:16:13:57:af:4e:07:89:87:09:
b3:e4:05:d7:79:14:f4:9c:83:7b:80:33:44:11:04:da:22:11:
dc:ce:87:57:33:95:b0:e5:cc:ae:cc:06:e3:6d:19:28:d4:44:
90:c4:04:a9:11:ab:cd:3a:da:5c:72:10:a0:33:c3:b0:f4:82:
59:09:57:fb:fa:cb:04:8c:b2:45:a1:b0:ff:e9:0c:de:01:b8:
3b:37:0e:4f:35:7f:01:05:22:2e:f5:6b:86:93:8d:8f:11:bd:
50:3a:ea:25:c1:72:4c:a4:0e:97:3e:a2:77:61:52:e6:79:4e:
6c:d3:75:c5:75:74:a7:06:af:de:75:62:84:ee:75:c8:cd:ab:
d2:81:93:d4:7b:7c:70:66:e1:bb:e8:bc:35:97:13:33:d2:10:
8f:8e:e0:30:d0:b0:00:58:07:99:af:e3:52:44:e6:c7:9f:4e:
33:ea:04:6d:96:b5:fe:23:73:38:6b:ac:6e:01:db:35:1a:45:
94:ed:e2:ea:85:46:1a:6a:3a:65:14:db:4c:22:c8:da:5d:f0:
08:22:53:79:d2:3f:8b:de:5a:70:73:fa:9a:53:fb:72:c1:51:
04:87:07:90:79:9d:67:06:e1:44:cf:47:4f:ab:86:43:61:27:
d3:51:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:06:34 2025 by rpki-client