Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: TWGuy4SEmBUnJdE/2MRaj8AtsyqLM+TRzgHK92J04Gw=
Subject key identifier: CC:F6:01:03:2B:6D:78:99:D1:DD:36:DA:31:D7:29:37:55:F8:9A:2D
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 0198D4740FF24C4EFAFFE2DC88E1C3DC62B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0536
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: uXoWGxjPLTeRevbFfIoot5Bn4txKTe4e7rBMc4Z95tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0f:f2:4c:4e:fa:ff:e2:dc:88:e1:c3:dc:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=ccf601032b6d7899d1dd36da31d7293755f89a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:f5:f7:26:0c:b1:e3:bf:b1:00:ef:54:da:
98:a4:1c:e3:cf:35:e1:29:18:77:87:e0:1d:ce:c8:
10:11:f0:13:00:f5:a7:80:71:3a:23:40:ee:21:d3:
ec:15:7d:5e:35:c2:95:d1:1b:ce:f1:b7:fd:90:15:
ba:79:bb:e3:77:df:20:d7:e2:c2:36:12:5d:86:ad:
93:44:92:72:6c:b0:2f:36:93:95:bd:a9:e3:43:3f:
f1:06:c1:1e:62:09:fb:9f:f2:e8:b9:e2:a5:3f:04:
ce:82:20:bc:ae:30:22:a6:b1:41:41:26:4c:62:86:
cd:3c:a5:ab:58:42:da:33:ca:d6:83:77:e2:bf:69:
97:2a:4c:29:d9:8d:f3:94:7c:7d:a8:8f:b0:00:85:
bc:58:32:ce:3b:47:6f:84:90:00:3b:14:fc:2f:b9:
da:82:48:a5:24:29:e2:c4:56:04:2f:c4:d4:f7:80:
9b:ab:59:e0:10:d7:aa:d2:7e:23:3c:5a:5b:c3:a7:
23:54:3c:9b:61:a6:3d:cc:bc:bd:8e:35:8a:1c:8b:
4d:3d:22:a4:56:6f:a8:c1:8b:f7:cc:b5:1e:32:a5:
c8:6d:be:8e:c8:ba:88:bc:3e:f0:a5:21:f9:b1:af:
90:c5:8e:7b:fb:d1:a1:5b:0a:2b:15:9d:09:ef:d3:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F6:01:03:2B:6D:78:99:D1:DD:36:DA:31:D7:29:37:55:F8:9A:2D
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:50:b4:09:80:d6:f2:6b:2a:06:4f:b7:b7:bd:63:37:8e:
db:ff:dc:7d:08:fd:22:38:ba:20:49:13:11:d1:21:b6:96:c8:
b8:52:39:89:9f:5c:f1:0d:d0:d9:9b:c9:c5:63:eb:a2:fe:dc:
6b:68:32:08:01:3c:56:5a:21:7b:28:c6:d0:79:86:90:93:7c:
9e:b3:6f:bc:28:6c:c4:ee:4a:90:cf:ee:d4:2f:f8:d2:ea:39:
8a:cd:8f:e3:b3:49:5c:ec:6a:55:88:06:92:d2:08:cb:39:0f:
28:95:9b:e3:74:1a:6f:4b:57:47:70:97:aa:1f:62:38:2c:d3:
da:9f:66:6a:08:7c:78:16:68:58:bb:c7:52:d8:25:a0:a0:fd:
b6:e2:53:13:06:62:27:c9:96:e1:b9:17:c5:b5:82:fd:61:d7:
30:62:51:92:83:b3:38:64:20:ab:a7:90:e1:a1:f0:8c:51:b6:
ef:e2:17:be:27:16:1e:05:5b:0f:c7:0d:52:f4:9f:54:81:f7:
77:23:ff:97:84:7c:f7:4d:bf:05:17:05:23:5c:e6:a9:32:e7:
8c:6a:73:95:b7:09:74:bf:32:8a:4d:a7:1c:dc:6e:77:79:94:
25:04:45:b9:c6:32:63:b9:18:6f:c7:e4:6d:7a:18:7e:0f:73:
10:b8:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:13 2025 by rpki-client