Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: Q/p9+/Li9juQUnhp4pupn5nPGe0kbAhUmfnETmXAQjM=
Subject key identifier: 01:46:23:28:94:F6:F9:DC:18:03:FF:51:83:B0:D4:F2:D9:4B:7F:EB
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 0197B6A233563DE53B5807D7BBC8CE030720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 04A2
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: mdy8EBNLZPCM2soPcVALWKdR9uS9T3aji3JFhlpv89Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:33:56:3d:e5:3b:58:07:d7:bb:c8:ce:03:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=0146232894f6f9dc1803ff5183b0d4f2d94b7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:a6:a2:59:d1:68:cf:bd:d0:8f:47:23:33:
03:2b:8e:7c:72:a2:85:b8:ce:f5:29:00:2c:35:77:
46:6c:72:f7:48:89:14:9f:f0:be:b9:75:82:0f:51:
3b:86:98:79:50:ba:2e:ef:95:e5:79:d0:55:ec:9b:
55:9a:79:ec:d9:0b:d3:80:66:c0:f8:33:bd:09:ba:
66:42:bc:b9:ee:79:65:a6:60:3c:f3:ee:05:52:a2:
c7:53:78:ea:f0:cd:91:d3:70:0d:88:f8:07:d8:38:
f8:50:39:0c:36:ca:39:c5:f0:5e:57:c1:b1:ab:b5:
8b:ef:44:27:64:81:2a:6d:01:1c:f7:40:93:03:72:
6f:b6:d0:02:b3:c2:69:20:a7:fd:7c:63:64:3f:98:
81:be:16:b5:0d:fe:fc:c2:41:d8:09:a0:03:86:ff:
b0:bc:8e:1a:00:29:3c:95:af:f9:96:39:73:03:06:
56:b6:a9:c9:49:92:70:85:07:94:95:58:0a:c7:30:
00:82:a1:37:ee:9c:f7:87:3b:98:21:ea:ac:d8:f9:
29:a5:a3:c4:50:a2:7a:38:6c:2e:57:45:38:c2:69:
31:15:09:3b:09:bd:71:f0:1e:5f:85:85:3a:79:ba:
a3:90:c8:58:fb:85:4a:71:5d:ab:bd:42:3d:a1:42:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:23:28:94:F6:F9:DC:18:03:FF:51:83:B0:D4:F2:D9:4B:7F:EB
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:2f:7c:ea:bd:d3:b0:80:90:4a:b4:39:35:8e:8a:08:0b:
ce:1b:1b:6b:23:88:95:e5:84:05:b7:24:17:1d:ed:09:98:43:
0f:a7:1f:7f:79:8c:22:dd:54:a5:a3:7e:cf:ab:57:8a:af:1a:
2f:54:8b:85:d4:da:94:e5:08:78:3c:0f:86:95:9a:3e:6e:fa:
c9:56:96:53:18:fb:dc:8d:4e:80:91:9f:a0:55:58:75:66:24:
42:7b:f8:59:3e:40:ff:d5:af:29:e1:de:7a:7c:e9:30:2f:cd:
60:8a:c7:1d:23:e7:6c:0a:e7:07:d7:c3:8b:c9:90:07:a8:cc:
d0:40:6c:a4:c7:0f:bd:73:ab:54:e5:64:59:bf:f5:40:54:98:
68:a3:b7:bc:79:91:53:7e:8b:aa:a2:64:4c:38:63:25:4b:44:
72:34:ae:74:c0:04:b5:ed:b5:93:ca:bb:9f:08:1f:99:a8:bb:
66:9d:8c:dc:25:74:59:8e:bd:60:5a:07:4d:c3:40:b1:37:3a:
42:15:24:0c:53:7f:2d:7c:95:97:45:35:24:a5:04:1c:56:51:
e0:fa:00:2f:31:d0:16:83:8e:ad:7c:28:1e:dc:3c:7a:6e:7f:
b9:3f:1e:8f:3d:79:df:c8:71:61:cf:29:1b:80:2e:44:ab:6b:
2d:4d:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:46 2025 by rpki-client