Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: PGx9vxdz1TD9zNRzwnu9O34Xjj5ZtlT6py7NmRpYu3o=
Subject key identifier: 03:72:4F:22:EF:0E:B5:CD:D9:3E:A6:DD:AA:A6:50:58:E1:95:27:94
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0197B6A167D286E2FBB478EA0057088F0673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: MiScsM4Rn/VyPHwHd0m4zM8EFh+aDXAr6v794lfLMac=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:67:d2:86:e2:fb:b4:78:ea:00:57:08:8f:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=03724f22ef0eb5cdd93ea6ddaaa65058e1952794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:61:77:c7:5d:03:c8:08:55:71:b8:8a:2b:
99:50:c4:5b:e5:4d:5c:6b:79:5f:98:f6:6b:36:b1:
95:6f:0e:5c:e5:4d:26:c5:62:1a:64:d1:4e:e1:f2:
32:8c:3e:22:2d:06:f1:8f:6b:6d:46:22:35:b1:8d:
b4:b4:f0:fe:6a:a8:bd:10:9d:b3:57:0b:c6:9b:94:
42:44:a4:be:ae:0e:c1:50:77:70:f3:0b:61:47:b4:
82:ac:83:30:f2:f4:0d:56:ce:d3:df:7c:83:c0:c5:
f6:8d:7c:b3:ba:37:a3:f0:63:a6:99:f2:11:c9:24:
fa:24:15:8a:e5:2a:e5:1b:0c:a7:a9:38:f0:4c:68:
0c:4b:15:a9:54:8f:f4:0c:4f:58:0c:a1:f0:c0:e6:
1b:13:f2:b2:18:27:e2:ad:68:e3:f1:b3:f4:29:03:
80:13:c1:df:20:5d:48:38:2c:6c:fb:04:3f:a7:cb:
b1:5e:6c:f4:98:72:65:09:ae:a8:7a:af:aa:12:5b:
10:4f:f8:7c:3e:f2:65:eb:cf:d1:45:cf:07:d3:fa:
0f:44:9c:5c:d2:46:a8:23:0b:ad:14:b0:b8:9f:3d:
b8:55:37:26:47:37:50:73:a2:40:f6:72:f4:bc:80:
cf:e3:c9:a7:b8:ad:23:24:a6:04:74:fa:c2:3a:6c:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:4F:22:EF:0E:B5:CD:D9:3E:A6:DD:AA:A6:50:58:E1:95:27:94
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:de:4b:c9:af:b6:df:a4:f9:6c:a3:62:e5:8a:3b:22:41:5a:
73:dd:ec:d7:23:df:87:07:6e:bf:62:6f:56:10:f3:b0:6b:4d:
6e:ca:1b:d0:db:34:ab:14:e6:9a:49:02:d4:17:40:17:2e:d1:
e6:be:3f:40:d7:68:2a:97:fc:a7:ac:da:d4:ab:53:af:16:5e:
89:d4:d7:33:75:94:da:9e:5a:59:ac:08:a0:e7:5a:4d:47:fd:
82:ac:70:6e:3b:ec:72:3e:13:a5:12:9a:a5:2f:d8:d9:a7:5e:
3e:05:5c:49:d2:17:c0:ce:aa:86:1e:6d:71:06:38:c3:97:71:
8a:53:88:a2:fc:eb:4f:c2:28:a0:74:1a:6b:3e:d2:67:9c:2a:
57:cf:f3:f1:83:07:26:d1:7c:ee:c9:28:82:c5:2c:1a:a9:79:
91:e6:52:e1:65:42:01:71:e6:d8:a5:36:72:ab:1b:32:6a:31:
7f:e6:3d:45:3c:cf:6a:b6:1a:48:af:9e:94:c1:ab:fb:df:51:
32:8e:cc:3f:11:f9:da:71:54:a4:d0:49:b4:c5:85:7b:bb:19:
c1:82:e6:1b:2e:97:8a:27:7d:24:91:a6:a9:99:e7:9d:cc:93:
66:85:52:a9:cf:6c:cb:c5:d4:1e:61:a4:80:d3:9e:14:5c:67:
72:45:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:41 2025 by rpki-client