Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: WJ/rLWyNa0wr0UrZCYNTNX8nzqQ30HtlpK+60GbXBVQ=
Subject key identifier: 60:0E:DF:BC:E9:D8:F9:F7:11:2D:28:A0:4A:05:5C:71:63:CD:67:9B
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 0198D65F1167B0C43889F4CDEB3158298538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 165D
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: 71qfzE2wNUDrDkCeQdtDfuSWcRWMIY4AcqhKrqvT6XE=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:11:67:b0:c4:38:89:f4:cd:eb:31:58:29:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=600edfbce9d8f9f7112d28a04a055c7163cd679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:d2:7c:8c:c3:58:66:52:50:f0:d1:be:5d:
37:a2:71:fe:dc:6b:db:d8:7d:c9:74:a7:b4:d9:59:
25:71:22:6b:17:c4:10:ff:45:60:dd:d9:82:0c:8a:
2d:cc:be:75:e8:ef:e7:e7:5b:4e:8c:e2:4b:4c:74:
53:31:9f:3f:51:4e:ee:05:94:ed:cd:03:ab:9a:51:
37:80:5e:a6:28:00:b7:17:92:99:60:af:ee:36:ea:
54:8f:c5:2b:bf:45:f8:82:86:24:a3:cf:de:34:0b:
8c:6e:62:02:ef:7a:13:10:e5:87:cc:bf:39:83:68:
82:54:1d:9d:38:bd:5d:13:0c:b8:c0:6c:81:11:5c:
1d:c4:49:6f:96:62:ba:d0:95:9c:87:15:cf:83:c5:
06:6d:94:de:f5:5d:3a:53:f8:5f:a2:34:e9:ec:1c:
80:dc:ed:73:d6:69:11:9b:fa:43:43:e1:29:2d:c1:
5f:46:6d:d3:03:5f:d9:7e:e0:90:5b:02:d8:ad:42:
78:4c:b2:e2:8e:3d:90:6d:10:85:08:8a:0f:18:e5:
77:4a:9e:72:de:07:2c:a9:68:c9:4f:ed:b8:33:8d:
fe:ec:a6:b8:f3:f4:87:46:cc:bc:82:04:ee:94:80:
b7:ca:e8:64:92:df:76:f8:ee:ee:9b:0f:0b:df:f1:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0E:DF:BC:E9:D8:F9:F7:11:2D:28:A0:4A:05:5C:71:63:CD:67:9B
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:34:8c:c1:82:8f:50:30:0a:e8:b0:cd:af:13:a2:5a:d8:
86:30:e4:21:dd:1a:61:f8:29:ec:af:fb:19:67:8b:bc:3a:95:
ed:5f:fb:73:e9:23:32:52:12:3b:3a:48:45:69:fa:c4:c4:1c:
04:d9:ea:89:3d:31:e8:96:6f:15:20:b8:68:60:53:e8:5e:f0:
04:2a:95:b6:72:00:1a:08:a7:4a:e7:c6:48:56:af:5b:ae:fa:
34:eb:12:ca:0a:e9:49:fe:27:ec:d1:1d:0f:03:bb:19:47:85:
67:c5:43:d3:16:63:ce:4d:9c:8a:13:b8:ba:95:31:9a:08:ee:
4e:ee:1f:16:27:2c:fd:5e:d8:23:10:5a:ea:2e:64:7c:6e:16:
9a:9d:5a:68:13:b8:ca:88:53:5e:4a:cf:32:e5:2b:57:23:2a:
4e:85:70:a7:b6:2a:d2:38:f7:7e:2e:42:c0:39:b0:a1:6e:84:
5d:d4:e5:d1:1b:83:1f:09:92:fe:b6:3a:1f:2a:81:ba:75:3f:
d9:da:64:84:1f:2b:2e:65:11:1d:55:ca:9d:f4:56:0f:99:87:
80:3e:91:bf:f1:da:3d:b7:0a:1d:30:49:ba:fb:68:85:ee:d0:
76:99:aa:f0:8e:25:9a:a4:5c:e9:cf:df:87:0d:9a:ae:19:86:
1c:b3:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:55 2025 by rpki-client