Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: Y2iQ5iIhsM8Xd0KByr/hSVtl3329YEwVtOMlQwwaxrY=
Subject key identifier: CB:F3:00:35:20:63:4B:DF:6F:BC:C8:97:B6:2E:62:F3:0D:CB:7A:16
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 0198D65F0D941626B3936E1ABF4E639788B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: 14
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa (hash: mLKIDtdNErnqIL5hnzMx6CpSHF/6qunSx1xGrtmVRzc=)
2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: qSbPe0NIcVZm1zjiLa7x53B7LwQtSpuoRwhF78718Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0d:94:16:26:b3:93:6e:1a:bf:4e:63:97:88:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=cbf3003520634bdf6fbcc897b62e62f30dcb7a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:3f:7d:29:50:d1:1d:1b:23:b5:d9:f1:82:
13:49:27:4e:79:03:53:d5:3e:2c:48:f3:c1:16:9d:
bc:41:6d:4a:26:1c:16:67:46:98:16:95:15:52:fd:
3c:0c:cb:89:11:54:8b:13:25:d9:65:62:ef:20:9a:
9d:2c:79:94:93:00:1d:09:01:20:05:5b:4e:68:51:
02:bb:14:42:7a:4a:33:1d:c9:bc:25:5c:9f:cb:34:
20:a6:f4:97:aa:0e:c4:6c:0b:48:81:c1:88:a7:31:
02:d0:c7:8d:eb:81:f3:4f:be:ec:06:bc:59:e1:32:
d1:58:d6:a7:52:f6:ef:ba:02:be:2c:b4:5d:d5:b6:
e7:3b:ca:f1:0d:30:65:98:ed:3e:24:c0:fd:23:14:
e2:17:a5:6b:8b:e4:d1:ae:75:97:e2:61:50:cb:54:
c9:f2:b4:3c:f1:b0:77:7e:86:c1:0a:aa:03:66:0f:
78:1c:9b:ac:6f:f8:8c:60:30:38:c8:55:96:d8:91:
18:b7:1c:99:03:fa:06:bd:85:5c:5d:cf:a3:53:2e:
f4:17:42:64:e3:ee:a3:8f:32:37:11:0d:03:e4:5e:
3b:a5:f8:7d:90:ac:6a:e8:59:a3:80:0f:73:bc:d1:
87:63:a9:ff:d9:99:1c:68:c5:51:e4:e4:ca:38:82:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:00:35:20:63:4B:DF:6F:BC:C8:97:B6:2E:62:F3:0D:CB:7A:16
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:3f:ca:26:7d:45:e0:c0:28:2f:73:ee:d3:69:2e:bf:12:
ed:0a:56:be:2a:1f:0d:3c:98:18:ec:01:bb:23:b3:95:3f:ad:
d8:88:bd:bf:6a:9c:50:85:26:13:97:54:81:cc:98:fd:7a:ec:
af:61:dd:16:05:28:df:76:14:6c:20:a7:27:48:c6:e0:76:45:
d3:0d:19:7a:ea:1b:e9:98:b9:68:b4:a5:c9:82:ac:83:26:f6:
f7:1d:c5:b1:17:c3:78:dc:89:bb:2c:88:7f:91:1f:5d:f1:a3:
d1:1e:21:f0:67:81:02:95:48:5d:5d:d0:3d:b3:1d:d3:6f:ef:
4a:5f:c5:b3:24:40:8a:5d:e9:92:99:82:34:15:07:c0:38:0f:
43:f3:3c:ab:46:00:60:52:17:6f:49:a9:05:47:ed:87:c2:c0:
df:2e:5b:78:a9:32:dd:a9:2d:e4:4a:0e:7c:ba:f0:bd:8b:f1:
a1:f9:a2:de:9e:7b:1a:2d:42:f9:59:61:0c:06:17:b1:27:83:
85:09:1c:cc:69:93:f5:81:b0:03:a0:38:21:e8:cb:0b:6e:f5:
2c:02:71:1f:69:e1:4a:b5:fd:ca:d0:4f:40:36:d1:79:e7:ce:
d8:6f:b2:9d:d8:be:0d:f7:ab:d4:1a:46:94:17:a7:b5:9d:88:
2a:a9:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:20 2025 by rpki-client