Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: b6DX/Ha3gW+M9+U+c7uqOBdTBga3vyjh/WoBsr/gCgw=
Subject key identifier: B2:70:D6:1F:18:C2:FE:FC:25:EA:42:ED:30:D1:2E:20:E7:56:28:54
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 019A4EF5D332B4C76D911113EDDA610BC779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: MeW6kb01G17XfdhXsTayBCGVfKqFCxFeHfWNXiQ6034=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d3:32:b4:c7:6d:91:11:13:ed:da:61:0b:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=b270d61f18c2fefc25ea42ed30d12e20e7562854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:a0:6e:4b:84:d8:53:1c:4e:b5:37:a2:9f:
e6:f6:d9:f8:f1:97:14:49:49:0f:62:2d:5f:39:ff:
b0:ba:46:14:dd:23:2c:88:57:07:3e:ec:a9:69:c4:
15:e8:5e:f5:5d:5e:a2:fe:48:33:fa:38:19:91:39:
5a:84:70:1b:66:5a:79:a1:57:ea:b3:ab:dc:3c:80:
e7:dd:e0:30:cf:ce:db:94:ee:32:1a:3c:02:6a:6e:
d0:dc:2f:39:1b:c8:02:d0:11:72:b8:b9:cb:03:b5:
ed:f5:54:0c:51:56:b9:74:c4:48:90:f7:9c:11:b8:
df:24:91:3b:fa:3a:75:4f:26:f9:f5:72:7d:f2:c4:
c0:bd:13:b7:d0:9b:bc:fa:71:5f:aa:14:34:24:e5:
b5:8a:60:c5:38:09:f9:77:11:26:36:ad:ee:4d:bc:
cf:fe:2b:fe:82:49:37:69:0d:74:4c:4d:94:cb:e6:
3f:10:1e:0d:1c:f2:39:b3:b6:df:c4:ac:1a:28:cc:
6a:2a:af:0d:82:86:4b:71:d8:5d:2b:bd:78:c6:e8:
b0:1a:0d:1b:62:59:22:d4:01:78:7b:cd:dd:34:b2:
6c:71:a2:a8:97:0c:a6:3b:95:6b:88:bb:5d:be:49:
f1:08:61:db:df:8e:52:b2:43:10:f0:76:72:7e:72:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:70:D6:1F:18:C2:FE:FC:25:EA:42:ED:30:D1:2E:20:E7:56:28:54
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:73:b8:b2:39:7b:be:88:76:eb:89:4c:e2:46:64:01:6f:
03:7e:db:12:ba:86:21:82:cc:b6:09:ea:9a:ac:8d:f6:1c:8e:
6e:55:b7:f5:d5:58:ea:ea:cc:40:ed:32:0f:ed:5e:03:ac:8d:
01:66:4b:29:ec:87:17:fd:c2:f8:f0:df:14:05:aa:4f:7a:c0:
50:b5:b2:21:e7:57:5b:a0:34:1d:95:ae:db:77:61:68:ee:00:
da:33:c9:f9:e6:18:7a:bd:29:3e:07:a9:d7:75:be:09:c3:ff:
cf:6c:61:a3:92:49:7b:d1:c9:55:21:19:8e:13:95:ea:96:b9:
0a:c3:31:94:48:d9:60:ae:93:46:4f:1a:90:d8:06:8e:2a:60:
44:59:65:42:80:d2:12:58:49:71:53:32:af:07:54:28:a4:5e:
12:3b:2d:02:1d:34:0a:db:fd:07:fd:d3:4f:4f:e6:f3:cb:ec:
c3:c3:b2:58:42:39:34:d8:74:0c:a1:62:28:12:a4:63:7b:61:
7e:54:dc:22:e0:16:91:d8:08:56:23:dc:5a:1d:09:83:4c:2d:
5c:6d:4b:c9:a0:d9:cd:f8:f1:a3:84:f0:8d:45:25:59:b4:83:
17:69:27:06:dd:be:96:6a:0b:2c:8a:44:c6:c0:57:a0:bb:42:
3e:60:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:24 2025 by rpki-client