Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: ZolaI33Tk9tAWVK6zsCAvdOcFLSvrtSrRKeomusQTnQ=
Subject key identifier: 6F:13:86:9E:06:20:BD:F2:AD:C2:5B:3C:14:E0:2B:44:C2:A4:86:9C
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 0199FFC76FEAEC77F7D22ADE933FD41664D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: AE
Signing time: Mon 20 Oct 2025 04:01:24 +0000
Manifest this update: Mon 20 Oct 2025 04:01:24 +0000
Manifest next update: Tue 21 Oct 2025 04:01:24 +0000
Files and hashes: 1: IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa (hash: mLKIDtdNErnqIL5hnzMx6CpSHF/6qunSx1xGrtmVRzc=)
2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: ewYCwBwJ0UoB3OC5ta6oC8dGfFD0qvf6NNWGb0sYTKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6f:ea:ec:77:f7:d2:2a:de:93:3f:d4:16:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Oct 20 04:01:24 2025 GMT
Not After : Oct 21 04:01:24 2025 GMT
Subject: CN=6f13869e0620bdf2adc25b3c14e02b44c2a4869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:31:0f:e2:50:11:ae:23:18:1d:b1:bd:25:
64:f7:19:38:dc:4b:63:64:dc:39:ed:71:c2:bf:a2:
ad:69:71:38:f6:f0:5c:a3:b7:3a:ba:c8:19:7d:5a:
eb:97:87:f7:d6:99:32:29:31:0b:34:12:ea:73:00:
fc:06:ea:f9:06:14:b0:35:01:16:7c:d2:fe:3f:2e:
d1:a9:d9:76:be:cd:30:0e:66:2a:57:21:ff:c4:e0:
27:9b:d9:a9:c4:21:d2:12:89:28:82:2e:59:67:4f:
28:fd:ad:ad:e3:4e:e2:ed:a1:48:50:53:cc:7f:ae:
0c:ed:81:2b:5e:cf:9d:ec:e1:c3:2d:e5:3f:6e:6f:
a7:42:f8:c8:e4:a5:9d:9a:c4:49:6f:bd:72:dd:79:
d5:09:d0:1b:0e:9f:7f:a1:18:91:24:de:e4:b0:d1:
56:e2:02:58:97:2d:b7:c2:81:70:ad:34:73:e6:69:
dc:91:55:43:6c:7d:ae:14:25:aa:5e:1e:52:a9:47:
72:df:c2:a1:58:dc:e0:26:d5:8e:7b:8c:ce:cf:71:
a1:67:3c:e6:65:dc:6f:69:4c:34:de:27:96:e8:ca:
ea:54:86:77:f5:0d:66:50:fe:fd:9f:37:72:20:b1:
06:61:c1:f0:74:4c:ab:00:74:79:1d:2d:1f:d5:5e:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:13:86:9E:06:20:BD:F2:AD:C2:5B:3C:14:E0:2B:44:C2:A4:86:9C
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:8e:fb:1e:80:f4:bf:cd:cd:5b:33:9d:34:fe:2b:ad:ba:
d6:1a:6a:57:cb:e2:86:32:e1:b6:56:d8:68:0f:7e:01:bb:92:
ab:9b:9c:ae:62:8a:df:f0:a0:5c:18:8a:a0:ff:27:cb:57:09:
f8:10:95:02:24:da:ce:09:fd:37:b8:95:d6:a1:70:74:3c:39:
2c:aa:ff:d7:84:55:2f:64:a7:75:41:47:b8:24:2d:eb:3c:a6:
80:d8:30:4b:2e:48:0a:08:fc:50:88:af:06:f4:7f:29:d2:1a:
d6:2c:9f:3f:a1:b3:28:b2:ed:c0:85:81:83:ef:a1:ce:51:22:
d9:03:6c:93:11:a2:40:62:43:07:a7:5b:c0:4b:10:2a:89:17:
fe:46:d1:88:3d:ce:7b:a6:5c:d8:96:ac:2c:5f:d1:6f:e2:e5:
20:1b:9b:f8:ef:ad:01:d6:c1:0a:67:75:15:41:e1:b4:a7:3b:
45:1d:a8:5c:f9:e9:ad:1d:08:07:a2:c0:6d:99:0b:a6:90:42:
0a:fb:ed:44:b3:3e:50:ff:88:66:f5:16:df:82:2f:eb:0b:03:
c6:e2:5c:01:3c:94:5d:6b:c3:a1:3f:cd:78:46:a5:67:d2:af:
16:1b:29:7c:4c:c5:89:2f:d0:44:a3:e8:34:81:38:31:e2:48:
70:41:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:02 2025 by rpki-client