Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: 7WjA+vG4Eg/NxGQkJHGT8S8qPdGxmjvphJYFZd/APgs=
Subject key identifier: E3:AF:56:1B:2A:FC:2C:06:65:83:D4:1E:73:78:0B:89:30:E0:E4:C7
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 019A4E1904277E0A7D58580A2776F5DB7691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: HS6VRGjXX1u9lY1fdY+dMlLI0QsygLxG+RvAf/cNBOQ=)
2: UrbTQ94JxNgYNpJivV6a1qmD0_A.roa (hash: TSib+fjl7l1ifEcWuz5+zR2oEqhkqRFFxSAkrpwIXbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:04:27:7e:0a:7d:58:58:0a:27:76:f5:db:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=e3af561b2afc2c066583d41e73780b8930e0e4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:e3:e4:2f:85:d5:c3:52:05:d4:16:55:15:
f9:07:f1:84:28:98:96:2d:88:d1:99:ee:23:78:26:
67:f0:8b:56:d5:0f:54:ab:70:86:3a:f9:9b:45:85:
d6:2e:b4:3e:58:7f:bb:dd:a7:dd:ef:a9:6e:07:8f:
8f:76:2a:01:dc:a2:0c:fc:c5:34:15:a8:e8:6b:f6:
8d:ba:26:56:ac:e7:44:f5:24:06:aa:9c:66:11:c3:
02:ef:4d:34:d7:39:eb:ff:c2:de:5e:a3:4a:62:3e:
17:2a:29:ef:98:08:eb:57:05:d5:df:b2:e1:4a:30:
96:e4:d9:2f:52:9b:71:67:df:a0:69:66:dd:a9:60:
8a:2a:a3:56:4f:86:5a:dd:5e:0c:ca:f2:d3:99:a7:
e6:1e:7a:ed:af:d2:71:47:ce:dc:18:c0:42:d4:ac:
d8:78:3f:2d:c4:a5:45:09:65:ca:e5:01:d4:7f:b4:
b0:ff:37:8e:35:f4:f0:68:31:7e:12:1c:29:8a:b7:
1d:f1:b0:ad:9a:5b:7f:69:13:f1:fb:5c:58:2d:71:
99:7c:70:be:8d:a4:d4:ed:bb:69:ef:d7:d7:3d:c8:
9e:2f:68:41:bf:5d:e7:af:54:06:28:f5:b2:06:fc:
72:b3:04:e3:1b:7d:9a:97:29:c8:ef:28:0d:a8:c4:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:56:1B:2A:FC:2C:06:65:83:D4:1E:73:78:0B:89:30:E0:E4:C7
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:4b:b7:51:7e:c2:fd:cd:e6:12:cb:ae:c3:eb:3d:d0:bf:
60:5c:41:f8:66:b6:82:71:ed:7c:c4:60:3c:f9:a0:14:f4:66:
9a:a8:8f:d2:85:81:64:8a:32:26:fd:cb:84:36:63:3c:dc:e1:
e0:37:ef:f4:32:3f:8f:ba:a2:ef:ba:85:66:7a:ad:a2:f7:9d:
8a:91:e6:22:9b:37:fd:74:cf:6c:56:f6:5c:e3:7f:41:bc:f9:
b8:16:ac:57:ee:84:79:21:e7:83:05:b6:b2:29:4f:50:f7:75:
61:37:73:2b:4e:42:23:f3:47:6b:52:43:77:a8:83:dc:b5:c3:
9b:eb:1c:08:bf:e7:8f:5f:25:8f:b2:fd:b9:c4:f2:ed:fb:f2:
fa:4f:04:3e:7e:c2:1c:42:3e:52:95:7f:33:a8:d4:b5:be:83:
e9:f0:e6:d8:dc:88:6a:0c:e5:bf:24:07:f7:10:cd:fb:82:a6:
55:58:89:f4:37:fc:ac:c8:5a:0e:4e:97:c0:7a:77:bd:0b:b4:
31:ac:64:f6:46:27:9a:a8:2f:4c:65:9f:4b:2e:2d:b4:a3:52:
5d:65:9c:ef:73:e4:4b:92:95:d9:6e:0b:df:94:ab:5a:14:cf:
fa:ed:65:16:d9:d8:07:4f:20:c3:d3:ec:5a:01:a8:46:29:d2:
25:b4:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:35 2025 by rpki-client