Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: 9pHqkeCxFyVg0cJX0LUYTeicob71Tp3tF99cvcHAUGo=
Subject key identifier: B0:48:3E:BD:41:0F:E4:EA:98:0B:9C:5C:92:F0:A7:B5:E3:4A:E2:BF
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 01988CFEBAA173FF04F27E031E42064054C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 04:02:40 +0000
Manifest this update: Sat 09 Aug 2025 04:02:40 +0000
Manifest next update: Sun 10 Aug 2025 04:02:40 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: BRQqKIqYAagrbQG5q1ZMVQfTgxJSRQaOgAVDnKQHPkY=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:ba:a1:73:ff:04:f2:7e:03:1e:42:06:40:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Aug 9 04:02:40 2025 GMT
Not After : Aug 10 04:02:40 2025 GMT
Subject: CN=b0483ebd410fe4ea980b9c5c92f0a7b5e34ae2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:26:75:47:81:6a:d5:4f:5f:9c:0f:6f:4e:
9d:1c:5a:b4:94:52:6c:a5:4e:a7:a4:e9:20:a7:5f:
79:0d:89:d5:a3:68:3f:41:69:ad:1a:fe:59:ee:23:
ed:5e:ea:a3:13:74:8e:bb:d2:eb:3a:48:fe:f5:38:
b2:55:c1:44:bc:38:70:96:b2:5d:a3:87:5f:d7:78:
9b:5d:9d:e6:5f:d5:87:fa:db:5a:28:7d:a5:9b:91:
db:25:ed:23:c6:2d:10:8e:e5:93:05:04:da:d1:1c:
9e:16:79:d2:b0:e3:02:12:0e:c4:2e:49:8e:69:10:
4b:d0:4b:6a:ef:78:51:06:2b:61:dc:f4:c1:0b:8a:
c3:68:48:ee:8f:d2:1a:3b:81:ac:ec:2b:0c:fe:f0:
47:26:9c:bc:ff:36:cf:48:7e:c8:11:d9:4a:f5:9c:
51:91:56:40:9c:6c:de:ee:c5:c4:8c:5f:09:47:95:
2e:a4:6d:6b:e0:33:7b:fd:17:27:21:60:6b:11:a8:
c6:19:e7:82:b3:95:81:8b:a4:3f:5f:26:81:44:5a:
33:12:7c:f4:b8:55:5c:8f:40:6a:9b:d3:83:f8:6c:
19:7c:72:38:ed:e4:ff:1d:e8:74:0d:db:0d:a6:44:
a0:c1:d1:55:00:2b:05:4e:1a:ae:43:53:34:09:ea:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:3E:BD:41:0F:E4:EA:98:0B:9C:5C:92:F0:A7:B5:E3:4A:E2:BF
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:48:a3:88:0b:88:50:c9:48:b3:5e:1a:1b:90:23:61:42:
90:d9:a6:59:09:f9:05:da:e3:ef:8b:bd:8e:fe:8b:9f:b1:ea:
ac:a7:9d:11:cf:1c:5d:f1:78:ff:18:d7:01:18:62:35:1d:a2:
71:4a:fe:c2:45:e5:ab:0d:94:cd:ad:ad:42:e6:2b:43:f6:f1:
0e:43:92:fb:73:93:51:15:96:29:3b:a5:92:49:aa:b8:d1:3f:
9e:9b:d5:09:a6:a5:7b:2f:99:0b:2e:94:09:76:f9:43:d7:4a:
3e:69:53:1b:cc:29:02:80:41:02:d0:00:f6:00:a2:7f:41:0f:
0e:e9:17:59:a7:8d:89:b6:76:a4:47:ab:73:33:bf:a9:00:17:
ab:6d:94:e8:b5:6c:35:67:44:3a:98:40:03:38:7e:85:53:b6:
95:de:fd:22:33:0c:fb:06:e3:28:2b:ee:dc:e0:26:f4:e3:60:
78:a5:32:69:23:48:54:61:e0:2e:4a:6e:c1:0e:33:d8:77:58:
1c:de:4f:dc:32:b6:a0:e6:68:47:61:b9:f4:a3:19:17:ff:69:
63:36:66:7e:f5:d8:40:4a:50:e6:49:7d:16:3a:d9:cc:dd:3b:
66:2c:fa:df:2a:5e:7a:e2:6b:f7:89:d5:b5:d7:81:45:06:92:
04:74:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:25 2025 by rpki-client