Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File: IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier: 3ERDdV4GaSnvfITxwRI6wFFRcWoEwq103RvcT8x6nGU=
Subject key identifier: 2A:59:34:EA:FF:AB:E6:3D:F0:F4:B6:83:CC:8E:F2:55:D3:2F:A7:47
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer: /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial: 01987E2F15CD564492E90063411C927B3EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number: 0CC3
Signing time: Wed 06 Aug 2025 07:01:11 +0000
Manifest this update: Wed 06 Aug 2025 07:01:11 +0000
Manifest next update: Thu 07 Aug 2025 07:01:11 +0000
Files and hashes: 1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: LRV/kdCXu8TejfCTLt49QT7JijnrOyqTrCP5LF09ufI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:15:cd:56:44:92:e9:00:63:41:1c:92:7b:3e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Validity
Not Before: Aug 6 07:01:11 2025 GMT
Not After : Aug 7 07:01:11 2025 GMT
Subject: CN=2a5934eaffabe63df0f4b683cc8ef255d32fa747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:d8:fb:2d:61:8f:d9:bf:ec:a0:fe:34:f8:
92:cc:c7:e7:c3:e9:23:45:18:0d:4e:af:42:29:95:
5a:e1:79:be:a2:39:47:7c:08:c9:37:b4:94:ca:27:
ca:dc:a2:e7:58:4e:26:54:cc:2a:80:fe:7b:eb:70:
31:b0:12:63:3a:7d:e0:81:b3:c5:13:d8:6c:35:f0:
5b:39:91:64:f4:07:b3:96:2b:93:85:bd:a8:ff:72:
fc:8c:0f:ce:c4:43:ec:32:0b:6e:93:70:5a:f6:38:
7f:48:21:b7:dd:bb:07:68:8e:62:2a:84:74:fd:5f:
83:33:a5:46:98:00:04:c2:8a:53:27:3a:7d:03:e5:
1d:d8:57:49:1e:2e:58:5d:d8:b6:25:3e:1c:39:fa:
ea:63:8d:4c:0a:9c:ea:ab:2a:2b:cd:87:7f:6f:88:
bc:2f:05:2b:76:4e:02:1c:fb:26:8b:8d:55:37:f3:
73:fc:0f:79:30:05:b7:db:70:de:a4:35:9d:9c:68:
6c:13:57:6a:7f:6b:97:4d:03:ec:cb:90:d6:43:5a:
a6:ce:8e:ad:41:e2:48:ab:78:73:b6:45:84:4e:31:
7c:2b:4f:17:00:70:a5:9e:56:55:2e:d6:92:23:7e:
ad:ea:7d:0c:c0:e9:d7:02:54:95:d9:38:81:cf:93:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:34:EA:FF:AB:E6:3D:F0:F4:B6:83:CC:8E:F2:55:D3:2F:A7:47
X509v3 Authority Key Identifier:
keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:80:6c:5a:d5:5d:9f:e9:88:22:63:61:7c:7a:0d:0c:d8:
f3:15:b9:7a:52:a0:16:d0:c2:0f:be:fb:38:1c:c5:1b:c6:54:
5e:cf:39:61:b3:f9:79:57:c6:78:e9:8c:3c:d3:ee:9e:3f:5e:
f5:e7:3d:59:c7:cc:70:d5:d2:3f:4b:98:ac:16:54:a0:64:f9:
ba:35:98:93:ee:7f:1c:b4:53:c3:fe:e8:2a:21:02:3a:53:29:
c3:72:9f:d6:da:47:34:d0:d8:9d:12:86:80:e0:8c:16:e1:08:
15:87:d5:bd:5c:36:e4:22:66:c2:11:2f:08:f8:0c:33:4d:99:
eb:0d:ee:7c:c3:9c:fb:44:69:04:35:66:99:f1:95:04:7f:2e:
1f:60:01:ab:26:a3:b2:ab:94:6f:51:c7:e7:ac:dc:93:ed:75:
23:f5:01:dd:54:27:3a:0d:7b:c4:bd:d9:73:6c:b0:8f:7c:fe:
c9:73:79:75:21:35:a2:9c:2c:76:57:7f:85:48:c6:f9:4f:d5:
0f:7e:7f:94:78:b6:22:17:ef:24:84:29:b5:ce:64:28:33:d7:
9e:25:d1:aa:94:39:16:eb:37:34:92:f2:1d:48:c4:ba:f4:06:
03:c4:46:c3:03:2a:67:3c:a9:94:b1:7d:7a:26:56:1e:4c:0a:
49:4e:6f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LxXNVkSS6QBjQRySez7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2NjZmExMjJkM2JhZTgzYWJlNTQ0MWMwYTE5YzliZTEz
ZjU0OGIwHhcNMjUwODA2MDcwMTExWhcNMjUwODA3MDcwMTExWjAzMTEwLwYDVQQD
EygyYTU5MzRlYWZmYWJlNjNkZjBmNGI2ODNjYzhlZjI1NWQzMmZhNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1jY+y1hj9m/7KD+NPiSzMfnw+kj
RRgNTq9CKZVa4Xm+ojlHfAjJN7SUyifK3KLnWE4mVMwqgP5763AxsBJjOn3ggbPF
E9hsNfBbOZFk9AezliuThb2o/3L8jA/OxEPsMgtuk3Ba9jh/SCG33bsHaI5iKoR0
/V+DM6VGmAAEwopTJzp9A+Ud2FdJHi5YXdi2JT4cOfrqY41MCpzqqyorzYd/b4i8
LwUrdk4CHPsmi41VN/Nz/A95MAW323DepDWdnGhsE1dqf2uXTQPsy5DWQ1qmzo6t
QeJIq3hztkWETjF8K08XAHClnlZVLtaSI36t6n0MwOnXAlSV2TiBz5O/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpZNOr/q+Y98PS2g8yO8lXTL6dHMB8GA1UdIwQY
MBaAFCLMz6Ei07roOr5UQcChnJvhP1SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjct
YzE1YWZlNTc5NDQ4LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjctYzE1YWZlNTc5NDQ4
LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3OAbFrV
XZ/piCJjYXx6DQzY8xW5elKgFtDCD777OBzFG8ZUXs85YbP5eVfGeOmMPNPunj9e
9ec9WcfMcNXSP0uYrBZUoGT5ujWYk+5/HLRTw/7oKiECOlMpw3Kf1tpHNNDYnRKG
gOCMFuEIFYfVvVw25CJmwhEvCPgMM02Z6w3ufMOc+0RpBDVmmfGVBH8uH2ABqyaj
squUb1HH56zck+11I/UB3VQnOg17xL3Zc2ywj3z+yXN5dSE1opwsdld/hUjG+U/V
D35/lHi2IhfvJIQptc5kKDPXniXRqpQ5Fus3NJLyHUjEuvQGA8RGwwMqZzyplLF9
eiZWHkwKSU5vsA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:35 2025 by rpki-client