Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: aT+61ZXwMzgJBi276z9cmn2Pg6V+w2C5yK94vymY3s0=
Subject key identifier: C3:BB:45:C5:D4:E9:7A:C9:EA:48:66:CD:01:AB:EB:EF:A3:D5:02:C4
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 0198D5F12E2DFF7121D115B17756C927BEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 10F7
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: lnRMAjLEiO0rjlk7qzNTBMlAH85p9I9S4WqkSFr0H00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2e:2d:ff:71:21:d1:15:b1:77:56:c9:27:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=c3bb45c5d4e97ac9ea4866cd01abebefa3d502c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:74:c9:03:04:41:d9:77:ed:e1:5e:80:8b:
4d:84:b3:cd:f8:d8:77:b1:49:c3:19:36:1f:7f:76:
83:30:96:d9:21:67:57:e5:17:d8:59:9b:74:1c:cc:
57:4a:fb:7e:23:b7:a2:f4:bb:99:71:5a:fc:df:78:
01:b4:af:f2:b6:c3:1e:f3:be:72:41:c9:02:0e:16:
aa:fb:cd:0b:c2:1c:b1:f6:83:55:ca:5c:cd:d0:91:
e9:9e:54:e4:8a:e7:da:d5:d8:ad:e8:0f:9f:ae:db:
68:b1:75:86:40:18:b6:77:ae:aa:a0:e5:0f:ef:15:
f7:f0:fb:b3:e1:e7:db:2f:5f:81:51:21:f8:21:bc:
a2:d1:bd:0d:b0:d2:ef:66:66:35:65:40:cf:23:07:
f4:c0:c5:39:2b:c5:2a:9b:d0:bd:6c:fa:88:25:0f:
36:8a:c6:2c:69:42:df:e5:fc:3b:cc:78:0a:28:fd:
73:a9:e6:d5:b9:5f:8b:9d:2a:9e:79:7a:c7:9f:8a:
6f:f2:58:ed:2a:17:60:45:c1:14:68:8d:3e:44:3d:
b7:9a:66:bf:fa:40:a1:3e:67:ea:e7:bc:59:57:0e:
fa:77:e9:e9:cf:b4:20:8f:0c:4c:8c:24:5c:1c:39:
f6:ee:a4:91:54:a1:1d:56:81:e2:b6:fb:9f:aa:90:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:45:C5:D4:E9:7A:C9:EA:48:66:CD:01:AB:EB:EF:A3:D5:02:C4
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:80:4b:aa:62:bc:cc:e0:54:bb:a5:93:b1:32:0c:9e:a9:2d:
e6:eb:e5:7f:ac:93:8f:d8:3d:e1:89:9c:49:ac:d7:de:97:4d:
ff:07:14:ab:b0:e5:9e:c0:68:0b:28:92:32:a7:d0:0d:23:25:
16:2e:e1:84:22:e8:3c:20:87:2f:82:00:c2:f1:bf:04:3c:e9:
0e:b6:6f:12:77:12:10:78:41:ab:19:94:42:c4:d8:80:93:29:
d5:ff:df:79:a7:6d:c9:fd:8d:fa:c7:46:4f:5c:50:4b:07:56:
e2:f2:ba:46:86:9f:da:1f:4e:d1:8d:01:78:9d:e4:7d:54:13:
2c:5f:ce:27:e2:c8:a4:cb:c5:85:4d:ab:1c:f0:0c:74:b6:e4:
9e:7e:d9:ed:48:46:9e:17:8e:45:4a:e9:ea:47:c3:ad:b6:98:
db:3d:e3:61:43:49:0f:37:e3:d6:19:ba:e4:57:48:42:4c:18:
ab:18:40:51:ad:f9:99:b3:a4:06:87:7f:6f:ae:c5:3d:46:d7:
b1:07:21:da:73:99:5d:78:71:54:63:ae:74:73:2d:a3:10:a9:
65:f0:09:da:e8:ad:39:4f:ea:14:01:74:6d:9e:3c:32:36:01:
09:ce:0d:27:22:ae:d3:c4:5c:6c:42:4f:31:00:fa:42:ad:c2:
47:d3:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:56 2025 by rpki-client