Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: 5EYkXmyUZJPHMjKuuiNlgG3b9sFhGH22RHCW6NkNBHs=
Subject key identifier: 79:C8:EB:E1:5D:3A:BF:65:91:E8:40:37:70:BD:FD:18:11:EB:FC:74
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0198D65FC72F940C9C580B6DFD675A827F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:00:57 +0000
Manifest this update: Sat 23 Aug 2025 10:00:57 +0000
Manifest next update: Sun 24 Aug 2025 10:00:57 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: 77EQutX0eQ6rS7QGffA9EGJENkAT44BS4XiJT07MrCU=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c7:2f:94:0c:9c:58:0b:6d:fd:67:5a:82:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Aug 23 10:00:57 2025 GMT
Not After : Aug 24 10:00:57 2025 GMT
Subject: CN=79c8ebe15d3abf6591e8403770bdfd1811ebfc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:d9:8b:9c:23:5d:63:d6:f7:4a:ea:59:2b:
27:f2:7e:a8:bb:f1:fe:f7:32:87:c3:91:6b:ee:99:
3e:39:d2:f4:41:75:a1:8b:9d:cc:af:ed:5d:58:b1:
e0:00:52:cf:6d:0e:7f:78:0c:3b:9b:66:25:f2:24:
46:a4:28:fe:02:5e:4a:2d:a0:38:dc:97:1b:10:10:
11:d7:63:74:3e:6b:16:bf:88:5b:5b:5a:40:7d:79:
20:cb:ac:46:1e:24:f1:78:95:86:13:37:24:1b:bd:
46:1a:56:02:ad:c3:fc:de:d0:e8:2a:55:71:de:0b:
08:6c:e6:ce:5a:f0:c3:8b:13:13:23:68:a8:56:92:
01:ce:1a:c7:60:2c:31:a0:10:23:f3:1a:16:9d:df:
47:0f:e6:8f:29:b7:b5:6a:4e:5c:b4:b2:e5:4f:bf:
02:cb:c7:b4:f0:76:f9:54:82:3d:d3:28:a3:35:16:
e6:09:4f:15:69:6a:8d:ba:79:17:50:f4:af:78:8a:
b1:16:ee:6a:ce:cf:5a:df:7c:cd:5b:86:e5:3c:7d:
51:b8:5b:c4:20:f9:d1:f2:cb:d4:e3:2a:7d:d3:cf:
a2:c1:0f:7e:0d:4f:e0:25:d2:42:e0:dc:16:4e:43:
7f:b8:d1:5a:65:1e:db:1f:03:75:6e:e5:dc:09:20:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:EB:E1:5D:3A:BF:65:91:E8:40:37:70:BD:FD:18:11:EB:FC:74
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:64:a9:b8:28:f2:83:16:c5:20:2c:de:6d:b9:15:e0:02:1f:
98:5b:48:e9:68:00:98:7a:28:16:77:d1:e5:d5:4b:e4:2d:78:
65:26:b0:07:16:0d:73:5b:d5:ed:c1:85:21:08:93:20:8d:39:
ed:18:ef:c9:6f:d8:21:d3:5a:3a:b2:e7:b0:f5:6e:28:2d:2a:
c4:7a:4e:f8:5d:f4:be:30:c7:d6:53:aa:38:82:24:b2:a8:07:
df:3a:f9:5b:75:98:7b:de:16:9f:bb:62:82:71:25:ee:09:6c:
fa:cd:d4:0a:fe:33:fc:38:0a:fb:19:9c:28:ec:c3:87:a2:e7:
2c:9b:0d:b7:c1:ba:27:22:f2:42:bc:7c:25:53:50:f5:7c:13:
dc:85:c4:bd:de:ee:23:05:a5:d0:3d:be:8d:1f:1c:c8:6c:79:
ca:56:5f:2f:35:8e:23:0c:88:c2:e1:65:40:ec:57:59:28:9f:
4f:91:c2:cd:08:3d:72:7e:d5:71:68:49:05:05:82:c1:d6:65:
1e:ac:b4:01:c3:b5:01:71:b8:18:4e:dc:9d:82:50:40:07:36:
e0:d6:73:fc:8b:d4:e8:e1:53:52:a5:31:d8:f2:75:6e:5b:2d:
2c:a8:35:14:2c:6a:60:1e:63:ca:0a:e2:82:e1:00:2d:42:90:
1a:69:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:42 2025 by rpki-client