Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: sh4bm3FKtljmgEUrmIa6rCBuQuAr60RP3ousmD3gbN0=
Subject key identifier: 6A:44:AF:FD:30:8B:26:0F:2C:B4:7A:5C:72:47:25:88:D0:06:B8:45
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 0198D58358B3F0C8E37D428DC78BC07FD186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0CC5
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: iAk1LGYiU+wNVl0saF3a/23cnl8q1oZGAzwWGjS+hY4=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:58:b3:f0:c8:e3:7d:42:8d:c7:8b:c0:7f:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=6a44affd308b260f2cb47a5c72472588d006b845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:db:69:98:b6:ae:6b:df:8a:4b:15:67:15:
b1:5d:60:57:e9:6c:35:8e:87:e6:d6:62:b9:7f:5e:
d2:18:3e:39:41:43:16:1f:b5:d6:e9:29:f8:f5:11:
ac:9b:a3:2f:c3:8c:16:58:b6:3c:e6:1a:a8:57:ff:
cf:b6:4d:3a:aa:2f:17:e1:91:82:39:47:5d:bc:ac:
b7:11:b9:eb:f8:12:df:e7:29:6f:35:0b:05:b6:f0:
dc:60:2f:99:f8:7c:84:1b:68:c0:b2:ea:db:d0:16:
63:14:a6:34:55:2e:93:86:02:84:39:2d:92:43:6e:
08:c0:e2:f0:ec:d6:32:ab:39:06:f5:e1:80:cb:d3:
da:8d:39:b3:5b:13:18:b1:d0:7d:cc:89:44:92:85:
3b:7d:41:c2:21:16:ea:51:e1:9a:ca:46:d6:41:59:
6f:3c:e4:2a:b1:6c:8d:2f:ea:94:4b:f9:01:44:ac:
43:ed:f8:ae:f5:25:68:cc:94:40:bf:a6:f7:2a:4a:
6e:d9:5e:93:1e:87:99:cf:a2:18:98:89:c9:a2:95:
38:e3:ee:e1:22:1d:9e:e5:7c:76:1d:62:fd:f3:bf:
56:18:54:5a:06:91:7a:fe:36:84:e9:34:d4:0e:7c:
fe:e7:9d:0b:d6:e2:a3:05:bd:38:5e:56:c9:b8:81:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:AF:FD:30:8B:26:0F:2C:B4:7A:5C:72:47:25:88:D0:06:B8:45
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:b3:2a:6e:82:86:b3:8d:2a:83:52:7a:88:4c:1f:1a:bd:
2a:8e:65:b5:b3:00:70:3c:09:e7:64:c3:63:39:b6:51:85:fe:
78:c7:54:02:73:77:77:25:19:9d:3c:96:9b:8e:61:1c:14:eb:
c0:35:8c:b5:c3:01:1c:45:9e:0b:f5:dd:d5:2d:0c:53:5f:cc:
57:a5:d8:e4:10:23:e1:88:23:72:8e:c0:15:62:19:42:6e:22:
ff:63:57:1a:9f:46:71:c4:7c:40:ab:1b:7b:4b:bb:87:c4:45:
5f:ed:db:74:e1:a5:9f:f9:81:4c:df:59:01:da:77:45:ec:bd:
30:ca:3f:b8:02:31:cc:0b:64:f2:c4:3e:7e:e1:34:50:fa:cd:
c5:00:7f:97:97:85:ce:bf:6a:dc:96:51:df:b4:f0:1d:cb:d1:
f0:c8:31:b8:c0:74:11:ec:cf:66:cd:94:ce:b9:47:3d:70:46:
a7:32:e0:10:ed:4f:0b:3d:a0:08:9d:5a:65:de:93:23:c0:db:
d7:e7:64:37:f1:62:55:9e:97:a9:21:ad:6d:3d:c2:b3:77:10:
ff:17:c6:82:30:5b:2f:bc:f6:4a:2d:f0:9b:97:2c:ee:8d:06:
7d:95:b0:99:a4:7d:b0:31:6c:2a:62:44:8d:b0:47:5a:85:e0:
f1:bc:3e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1iz8MjjfUKNx4vAf9GGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjUwODIzMDYwMDExWhcNMjUwODI0MDYwMDExWjAzMTEwLwYDVQQD
Eyg2YTQ0YWZmZDMwOGIyNjBmMmNiNDdhNWM3MjQ3MjU4OGQwMDZiODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkDbaZi2rmvfiksVZxWxXWBX6Ww1
jofm1mK5f17SGD45QUMWH7XW6Sn49RGsm6Mvw4wWWLY85hqoV//Ptk06qi8X4ZGC
OUddvKy3Ebnr+BLf5ylvNQsFtvDcYC+Z+HyEG2jAsurb0BZjFKY0VS6ThgKEOS2S
Q24IwOLw7NYyqzkG9eGAy9PajTmzWxMYsdB9zIlEkoU7fUHCIRbqUeGaykbWQVlv
POQqsWyNL+qUS/kBRKxD7fiu9SVozJRAv6b3Kkpu2V6THoeZz6IYmInJopU44+7h
Ih2e5Xx2HWL9879WGFRaBpF6/jaE6TTUDnz+550L1uKjBb04XlbJuIEuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpEr/0wiyYPLLR6XHJHJYjQBrhFMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktazKm6C
hrONKoNSeohMHxq9Ko5ltbMAcDwJ52TDYzm2UYX+eMdUAnN3dyUZnTyWm45hHBTr
wDWMtcMBHEWeC/Xd1S0MU1/MV6XY5BAj4Ygjco7AFWIZQm4i/2NXGp9GccR8QKsb
e0u7h8RFX+3bdOGln/mBTN9ZAdp3Rey9MMo/uAIxzAtk8sQ+fuE0UPrNxQB/l5eF
zr9q3JZR37TwHcvR8MgxuMB0EezPZs2UzrlHPXBGpzLgEO1PCz2gCJ1aZd6TI8Db
1+dkN/FiVZ6XqSGtbT3Cs3cQ/xfGgjBbL7z2Si3wm5cs7o0GfZWwmaR9sDFsKmJE
jbBHWoXg8bw+JQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:03 2025 by rpki-client