Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File: IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier: nKPh4cNidJY4Rp00VbYQh/TJHrMQUjzj2rTXAxFYu3Q=
Subject key identifier: 76:B5:C7:64:2B:32:95:AF:8D:4A:9A:FC:47:8B:75:53:94:4D:F9:A1
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial: 0197B7B336B5EA5DFB491E4A8CF283B56FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number: 0158
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: ADTSJtzkDTlRqoC80UaWrKGwfTpHoDZ3yS0eTI521wk=)
2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:36:b5:ea:5d:fb:49:1e:4a:8c:f2:83:b5:6f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20105484f187f2087d120cad971d682db3159965
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=76b5c7642b3295af8d4a9afc478b7553944df9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:0c:15:ee:f9:99:20:f9:45:09:5f:da:fb:
e1:bb:bd:ac:b6:fd:e9:d7:1c:65:f9:04:16:d2:6b:
b5:d2:f1:dc:8a:68:f7:7b:9a:c2:8d:c4:21:72:87:
fa:89:de:f5:43:23:9d:d4:3b:29:e1:90:13:04:38:
26:d8:84:83:7e:bb:6e:73:46:c2:40:34:28:1e:50:
4b:c9:4f:90:9e:3f:13:f5:59:e4:59:46:35:f0:d2:
e2:4d:1d:39:bf:9c:a6:13:c9:8a:27:5e:c1:2f:a3:
73:9a:d2:5f:7d:94:7f:e5:18:b3:51:16:2e:24:ed:
d3:b6:b5:4a:4e:d5:a7:b5:3f:01:60:75:6d:78:8b:
de:f8:da:c7:a9:2a:b6:b9:e6:03:d0:84:24:c5:72:
0f:0a:4c:5d:65:94:a0:09:fc:85:95:ee:13:ef:54:
86:ae:e8:0e:fc:ad:1b:02:85:55:fe:e2:53:ae:df:
95:5f:cf:5e:57:9d:9d:5d:49:8a:be:ee:97:9e:ca:
2e:ed:2b:08:cb:05:37:cb:0d:85:a1:c7:af:16:c5:
22:fb:32:af:69:b4:b8:72:e6:12:97:2a:59:d8:b7:
a3:d8:f2:6d:de:ec:b1:32:1f:6b:09:a7:2c:19:bc:
cc:23:1d:b4:53:24:92:25:b8:75:1b:49:a6:88:56:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:C7:64:2B:32:95:AF:8D:4A:9A:FC:47:8B:75:53:94:4D:F9:A1
X509v3 Authority Key Identifier:
keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:cf:ce:60:8f:3e:b5:07:ee:62:14:b0:83:0e:47:c2:a6:
c4:14:bd:89:ef:41:b7:36:45:dc:87:21:dd:fd:d5:14:cc:7e:
a1:87:45:ea:45:76:ff:ba:90:1c:92:9e:b7:30:e7:df:e1:a1:
05:ee:7d:a7:89:ea:dd:5a:a3:d6:39:2a:fd:8f:68:4d:2f:2b:
ff:b8:0e:14:70:5c:51:84:9e:96:00:2b:8d:99:cb:98:b0:2f:
02:f2:12:7b:d2:fc:b4:99:48:35:ce:9c:81:e9:4a:fe:b1:05:
9f:46:ee:82:bd:da:e4:5e:af:e1:54:83:df:4c:0a:d0:13:e9:
f2:52:de:8a:05:59:7d:e2:8a:c4:d8:82:dd:15:d7:fa:da:65:
09:0c:7a:34:1f:e3:d7:67:26:36:71:bb:9a:57:b6:a9:02:27:
d3:a9:06:fa:35:9d:a7:00:67:c4:99:fc:88:89:10:6e:51:f5:
b7:3e:40:ca:5c:36:15:58:0f:e7:fa:fe:03:b9:9f:95:fb:fa:
7c:c4:a7:5a:d4:40:a4:01:cf:be:04:5d:ab:53:bd:ee:35:0d:
17:9e:47:35:e0:4c:5b:97:af:cf:75:47:71:be:38:48:e8:fd:
00:a5:d9:3d:e1:46:64:fd:6f:96:da:86:49:fa:66:e8:27:9e:
7e:32:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:51 2025 by rpki-client