Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier: B216Lcw3MfrMeucm8SmoCbSQWWvQM3l3vNrySp15pRQ=
Subject key identifier: 52:85:C6:6A:41:48:AE:26:11:63:18:99:BF:32:24:0B:DE:F0:8A:F0
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial: 0198D5BB785C9F9E267573360A3ED156CC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: QKCpBgruuyz3i6ikVFdg6qQ3F0Y.roa (hash: G88p/gWLQ6tFindRbDEI4oT0jR5gYy6dY2FWfseB5AQ=)
2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: VCqCJc2zENosAChyD6e96dKZ3i7F1acS2t9MPVMBm1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:78:5c:9f:9e:26:75:73:36:0a:3e:d1:56:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=5285c66a4148ae2611631899bf32240bdef08af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:f9:38:61:ce:03:80:5a:32:3c:8d:82:31:
06:32:03:59:cf:7a:22:38:f2:7c:59:f0:15:23:af:
26:e1:6c:a8:6a:de:50:61:34:45:14:10:18:b2:72:
5d:03:f6:d3:1a:ec:19:bb:cb:22:7f:74:cc:b4:bd:
f1:d6:3a:ba:b7:02:c9:c6:04:95:df:61:44:8f:64:
70:89:92:48:06:0a:ff:f1:eb:28:91:8f:db:2d:ed:
f8:36:04:79:30:73:1b:97:a5:ba:56:14:ba:ce:d7:
b9:fd:8f:f1:32:d6:02:e4:4d:5d:10:db:36:e7:63:
cc:c7:ab:12:a1:b3:a8:d5:f6:38:c1:9a:2a:58:47:
97:36:0b:2d:b8:61:1c:7b:de:b1:b2:e6:f5:b9:54:
38:8a:15:61:34:6a:ab:dc:45:2f:68:b5:c8:48:8e:
32:8e:f4:6e:20:5c:5e:a9:cd:66:ec:24:48:36:51:
aa:b4:bf:d8:c2:df:38:fc:8b:6b:78:ce:32:f4:24:
93:b3:0b:5d:7c:49:c3:ce:6b:15:5e:ac:70:79:a1:
75:54:4d:98:3a:a0:d5:a6:5c:72:2d:37:ed:47:6b:
0c:e1:88:96:27:22:46:0a:74:96:c6:d5:d8:1e:da:
e0:94:48:93:87:10:bc:16:d7:b9:6a:98:1f:74:a9:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:C6:6A:41:48:AE:26:11:63:18:99:BF:32:24:0B:DE:F0:8A:F0
X509v3 Authority Key Identifier:
keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e2:2a:ad:61:c2:ed:9d:69:30:9e:c2:b2:0a:e6:b4:6c:97:
93:5c:7d:bf:2c:ed:75:5e:8b:f9:6b:30:14:25:d8:67:f0:e3:
43:ac:bf:7d:e7:cf:b5:61:a9:f8:8c:f7:4d:59:e3:27:ea:75:
85:2e:08:60:c0:e0:57:4d:41:4f:bf:f9:01:6d:4e:40:04:ad:
97:dd:47:40:00:b0:2b:59:62:7d:94:49:97:ca:fd:1a:37:33:
f8:40:ae:ae:73:6f:94:6d:f1:6a:2e:29:63:4f:26:e6:92:20:
68:ea:61:0d:06:41:5c:ca:d7:b9:00:27:1b:38:64:6c:7f:fb:
6d:4b:ac:d3:e3:3e:de:e9:9e:01:11:4c:ff:ac:b1:bc:6d:99:
2b:94:c7:54:88:04:ea:df:9d:e9:06:99:a0:cb:94:29:23:d2:
90:dd:1c:44:45:55:a8:f7:da:88:82:9c:e4:82:ab:ed:f8:5f:
e1:c4:84:69:77:94:56:65:02:2d:d6:61:27:58:b6:b5:43:79:
eb:1c:15:3e:05:c3:e9:71:a0:b2:88:bd:35:fd:51:49:23:a6:
39:46:88:ee:52:3a:1e:41:b7:23:f5:af:a6:22:8a:2a:45:18:
99:96:2f:3d:20:81:a3:ed:d6:7a:9a:15:4d:2e:5d:d2:44:1c:
8a:15:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:35 2025 by rpki-client