Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: 6embO1b5e6VtgS2Y1r1mEdOu0A76c7xqAq1+X1QLBZg=
Subject key identifier: 2E:D4:69:FE:99:3D:AE:53:1F:F0:95:31:B8:37:38:2D:AA:F6:C5:E5
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0198D4A80950FFC762EFFC526C7BDF7124D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 39cAwC9ZEBUQz3mb7PyNY44bafpg2oc8MktkjF5w7lo=)
2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:09:50:ff:c7:62:ef:fc:52:6c:7b:df:71:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=2ed469fe993dae531ff09531b837382daaf6c5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:39:54:a7:47:51:1b:cc:c8:60:ad:3b:b3:
88:7a:bf:8f:61:f9:94:93:c3:0b:fd:0a:1d:b2:f5:
9d:22:73:cc:8c:4e:1b:6b:98:a1:e8:4d:7d:59:46:
5e:38:c4:a6:e8:95:54:18:37:35:5e:90:fd:44:5c:
7f:ab:7c:74:93:f3:e1:b9:16:64:a9:1a:8e:3c:18:
2d:b8:d8:ea:7d:9b:60:be:a4:ff:77:48:9d:51:b2:
ff:c5:8f:2e:60:7e:96:23:d6:85:b4:04:c6:28:17:
16:c2:17:55:4e:41:06:1f:cb:90:18:91:92:be:39:
28:84:73:fd:f7:c3:5c:dc:4a:9f:03:78:f2:be:a6:
01:7a:52:83:b1:7b:76:b6:ee:e3:7b:73:67:b2:89:
12:ee:e8:fc:8b:8c:94:87:ea:4e:08:04:fc:04:e7:
dc:87:24:36:d2:88:63:d4:f2:9a:d5:77:e9:ff:3f:
9f:75:1d:25:16:09:c1:fc:ca:e2:ba:5e:8c:9d:b8:
77:90:36:35:16:3f:d2:cf:a0:ac:f7:02:3f:5f:37:
22:56:91:b9:55:fe:f5:9f:70:56:ad:88:59:a8:4c:
9e:30:20:f0:11:10:7a:d1:b6:17:13:f2:c1:64:b4:
f2:54:53:34:17:d4:98:c1:8f:47:b8:c3:bf:e8:9e:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:69:FE:99:3D:AE:53:1F:F0:95:31:B8:37:38:2D:AA:F6:C5:E5
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:d0:23:fb:02:36:82:79:5a:09:e8:a7:25:1a:8b:db:b5:
25:ac:bb:79:7c:e0:2c:cb:99:55:98:6a:ec:c1:3a:f3:4f:0a:
42:8b:3b:1e:d4:6d:8f:88:12:b0:fc:a4:88:ea:f1:8a:4d:30:
ab:39:32:99:e0:f6:4c:80:fe:f7:d0:77:07:33:61:7e:01:46:
eb:37:fb:8e:74:cb:fb:34:95:02:55:78:41:5d:1a:41:ac:c7:
0b:a9:fa:32:f9:22:6c:b5:a9:8a:d4:40:8f:fc:4a:74:c1:ef:
0a:0e:dc:31:cf:11:1e:2d:84:b0:69:74:6a:35:24:1f:52:b3:
a6:7d:4a:e9:ce:18:d2:bd:a7:56:00:f0:3f:a0:59:c3:f8:d5:
7b:fa:f6:45:48:0c:8d:81:54:bb:2f:f7:fa:94:73:06:93:0f:
51:c3:e8:e3:4e:2f:6e:6f:46:f7:fc:7e:c3:03:bc:86:4b:2c:
8d:79:52:ac:f1:77:d1:5f:5c:47:67:3e:8b:df:81:77:e4:46:
a0:6c:57:76:e7:3f:7f:57:ba:7c:a1:fc:6c:56:eb:78:5f:e9:
77:1d:f1:03:f8:76:5a:df:6d:2f:9a:4c:76:6f:89:7a:97:f3:
c2:30:23:21:4b:2a:39:82:fc:92:97:a4:60:e1:92:27:84:aa:
11:e7:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:09 2025 by rpki-client