Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: cXO7acKDlih598Or3qScisOdk1Ih3RRzl7U1wk1leH0=
Subject key identifier: 43:BB:90:CA:DF:0E:7A:4A:3C:5F:94:A8:96:9C:DF:81:04:66:28:B1
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 019A2E20D0795DF62AFFF83703CE64BEBAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1701
Signing time: Wed 29 Oct 2025 04:01:33 +0000
Manifest this update: Wed 29 Oct 2025 04:01:33 +0000
Manifest next update: Thu 30 Oct 2025 04:01:33 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: dTDYExCPdTcjZQ2AKrDP9peclhvS9GMS8pFT9qs4khw=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:d0:79:5d:f6:2a:ff:f8:37:03:ce:64:be:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Oct 29 04:01:33 2025 GMT
Not After : Oct 30 04:01:33 2025 GMT
Subject: CN=43bb90cadf0e7a4a3c5f94a8969cdf81046628b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:dd:f3:28:8a:9c:e6:ab:66:c8:8a:d7:3f:
91:4b:e3:d8:2b:3d:ea:db:ed:99:84:3c:a5:6c:ac:
ae:cf:79:eb:ad:0c:99:d4:f7:22:9c:64:7f:59:25:
a1:0b:60:ca:93:be:57:50:72:89:0e:e3:87:82:dc:
d8:d1:ac:de:90:82:59:24:07:63:45:08:a8:e8:0c:
a1:10:61:ff:d7:f2:e1:bc:0f:8b:66:c5:18:fa:33:
95:f8:45:9f:86:f6:fe:89:7b:cc:57:1d:93:8b:ad:
79:e1:27:f5:28:1f:f8:db:7c:2c:1f:2b:3b:c1:4a:
8f:16:1f:19:4c:29:76:af:0d:ca:51:b0:46:98:32:
68:03:f4:7f:89:a0:95:67:0e:87:7a:b0:b3:2d:4e:
d8:41:64:73:c3:9f:12:7c:22:f7:03:a8:0f:14:36:
9a:9d:69:19:48:21:a5:92:65:eb:78:31:df:cc:74:
fc:7e:85:fd:12:9e:34:c8:89:d2:0c:8a:59:48:6d:
05:0e:c2:98:13:4d:be:17:14:6c:90:e1:f7:3d:22:
97:15:88:58:25:f9:da:57:d9:82:c1:1d:d1:b2:8e:
ba:3a:2c:c7:8e:8a:26:8b:27:b5:bd:d9:0e:5f:c0:
b2:84:fb:e7:80:6e:13:4b:bf:d1:a8:35:f4:5d:a8:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:90:CA:DF:0E:7A:4A:3C:5F:94:A8:96:9C:DF:81:04:66:28:B1
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:f5:46:ea:1c:50:39:54:50:63:41:73:83:f1:29:7f:8a:
31:f5:fc:f8:df:d8:46:0f:79:fe:97:f2:94:83:31:ec:5d:b7:
c9:35:dc:77:68:be:7b:90:b8:4e:22:91:30:4b:23:94:03:54:
fc:7b:a4:b6:07:ed:34:d2:ee:6b:c7:ae:ae:80:de:26:b4:16:
13:e2:f4:c1:ba:a3:4b:7f:dd:9c:39:32:36:2c:a5:e1:ce:cd:
9f:2a:59:b1:c4:cc:63:80:0a:42:e7:38:6a:53:36:ac:97:76:
c8:c2:a4:f6:1f:3f:31:36:fa:18:54:59:a1:72:5f:66:80:96:
fe:f9:e9:21:bf:dc:b7:87:a3:13:60:96:f4:00:59:5a:94:33:
cb:07:84:33:f5:e4:b6:56:c3:17:ca:90:13:ce:2f:49:0e:12:
9b:6b:70:8d:d5:2a:2b:d7:e8:6a:c3:67:8f:6d:c9:47:7e:a9:
34:b5:15:33:3f:26:93:8c:2d:e2:40:31:33:6c:b2:ce:ed:08:
56:03:75:dc:c5:6e:cd:85:d9:b0:9c:e2:72:7d:ba:fa:cb:af:
40:4b:a9:c8:3f:2e:2c:25:60:6e:6e:09:dd:c4:cb:f2:89:6b:
3d:54:54:35:58:45:a3:ee:2e:cc:e5:51:5c:67:bc:82:87:48:
cd:34:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:31:57 2025 by rpki-client