Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: 4Y2kuOg3dxjNOtVNgOPMf4Dob38hdY5sdOKGLW1mn8g=
Subject key identifier: 95:78:DB:21:32:B2:BA:CB:F2:83:CF:D8:D8:85:8B:E1:1F:33:7C:1C
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 0197C0495EF4710C6A76D651F23FED842AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 09BF
Signing time: Mon 30 Jun 2025 10:02:03 +0000
Manifest this update: Mon 30 Jun 2025 10:02:03 +0000
Manifest next update: Tue 01 Jul 2025 10:02:03 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: o1ujwVfguNN1zcPgwXzePqCOT562gQphiqnW6xYRPnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:5e:f4:71:0c:6a:76:d6:51:f2:3f:ed:84:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Jun 30 10:02:03 2025 GMT
Not After : Jul 1 10:02:03 2025 GMT
Subject: CN=9578db2132b2bacbf283cfd8d8858be11f337c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:68:ef:87:76:87:06:b5:19:a3:09:9e:15:
6c:a6:3c:50:41:39:18:52:9c:10:fc:4f:8d:63:24:
12:da:1e:1c:b0:5e:ac:c7:c4:be:70:e7:88:ef:dd:
b8:6c:48:4a:2b:6d:0a:e8:89:4f:c5:32:61:67:90:
4f:80:9a:b4:cd:e2:85:3d:94:2f:8b:38:90:83:61:
c4:7a:a2:69:9c:b5:e0:75:27:1e:f3:6c:69:2c:41:
d9:e4:40:2f:c8:68:80:0c:b1:4d:8a:68:68:b5:f4:
f1:78:93:a2:22:7d:2c:99:b7:c9:9f:26:4a:02:e4:
3f:a9:60:4d:0d:05:fc:76:cd:6a:d1:7e:bd:5b:3d:
70:5c:1e:35:9e:5c:8f:b6:30:7b:7e:f9:f0:ec:69:
6c:39:b2:64:0a:03:da:70:80:27:06:62:30:df:9a:
47:4d:34:50:5e:85:89:6c:2f:a2:04:bf:12:ae:ab:
d8:43:2b:45:18:d9:8b:0b:f2:7f:c0:78:cc:c9:9b:
00:b3:fd:a9:32:e9:b7:3f:ff:96:40:09:0d:29:84:
df:e4:87:06:68:6c:5c:f3:9e:50:5a:de:e9:61:c3:
2a:66:73:ef:b0:9a:3c:f0:e1:a8:b6:03:0c:df:66:
a9:ff:f3:c2:6c:29:87:42:35:d6:87:12:e7:79:d2:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:DB:21:32:B2:BA:CB:F2:83:CF:D8:D8:85:8B:E1:1F:33:7C:1C
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bf:15:66:02:db:db:dc:73:74:05:0c:41:e8:b9:bf:a4:56:
45:99:c4:df:2b:f5:a1:bf:85:97:1c:26:65:a9:23:93:83:34:
2e:1a:5c:db:8b:d1:b5:72:dd:c6:28:a8:21:a9:f1:b7:62:b7:
78:95:80:7f:32:5d:0d:81:a6:27:09:be:80:04:84:b1:44:9f:
f1:95:af:d3:09:e0:a5:67:dd:ea:5d:93:31:be:79:ee:86:99:
2d:0e:ee:90:f4:db:bd:0c:47:a6:c6:df:f6:13:14:61:87:d7:
11:c1:88:d8:fb:7a:64:31:ff:53:d6:1c:b4:d4:8a:b0:85:78:
6f:4b:a1:75:cc:d3:39:e5:bf:a6:bb:ef:4c:26:80:fa:ca:ef:
79:b0:49:f7:15:db:f9:b8:03:1c:3b:86:e4:cb:5d:cb:e9:64:
71:f8:16:f3:8f:61:3c:4a:df:50:2f:99:e9:80:5d:a8:b3:0b:
87:7f:4f:2d:1f:44:d6:4c:d8:12:fd:5a:56:4f:86:6f:30:35:
8b:00:b3:a7:46:a3:96:d8:30:04:21:11:c9:4d:79:09:0a:dd:
33:72:59:05:9d:bc:d7:5c:03:ac:c8:aa:10:78:ae:8a:5a:25:
30:69:53:46:3c:62:82:0e:ef:71:0a:e5:02:1e:79:db:a3:86:
cf:3a:d3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASV70cQxqdtZR8j/thCrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTc5YWM5MDUyZjY5NDFiMzk1MzViN2ZkMjFlMmFhYjA4
ZDU4NzgwHhcNMjUwNjMwMTAwMjAzWhcNMjUwNzAxMTAwMjAzWjAzMTEwLwYDVQQD
Eyg5NTc4ZGIyMTMyYjJiYWNiZjI4M2NmZDhkODg1OGJlMTFmMzM3YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERo74d2hwa1GaMJnhVspjxQQTkY
UpwQ/E+NYyQS2h4csF6sx8S+cOeI7924bEhKK20K6IlPxTJhZ5BPgJq0zeKFPZQv
iziQg2HEeqJpnLXgdSce82xpLEHZ5EAvyGiADLFNimhotfTxeJOiIn0smbfJnyZK
AuQ/qWBNDQX8ds1q0X69Wz1wXB41nlyPtjB7fvnw7GlsObJkCgPacIAnBmIw35pH
TTRQXoWJbC+iBL8SrqvYQytFGNmLC/J/wHjMyZsAs/2pMum3P/+WQAkNKYTf5IcG
aGxc855QWt7pYcMqZnPvsJo88OGotgMM32ap//PCbCmHQjXWhxLnedIlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV42yEysrrL8oPP2NiFi+EfM3wcMB8GA1UdIwQY
MBaAFIgXmskFL2lBs5U1t/0h4qqwjVh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlYXlRVXZhVUd6bFRXM19TSGlxckNOV0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yNjVlNWMtZmE0Ni00YjAyLWFkMGEt
NWI3OGJmN2U5NjAzLzEvaUJlYXlRVXZhVUd6bFRXM19TSGlxckNOV0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yNjVlNWMtZmE0Ni00YjAyLWFkMGEtNWI3OGJmN2U5NjAz
LzEvaUJlYXlRVXZhVUd6bFRXM19TSGlxckNOV0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPL8VZgLb
29xzdAUMQei5v6RWRZnE3yv1ob+FlxwmZakjk4M0Lhpc24vRtXLdxiioIanxt2K3
eJWAfzJdDYGmJwm+gASEsUSf8ZWv0wngpWfd6l2TMb557oaZLQ7ukPTbvQxHpsbf
9hMUYYfXEcGI2Pt6ZDH/U9YctNSKsIV4b0uhdczTOeW/prvvTCaA+srvebBJ9xXb
+bgDHDuG5Mtdy+lkcfgW849hPErfUC+Z6YBdqLMLh39PLR9E1kzYEv1aVk+GbzA1
iwCzp0ajltgwBCERyU15CQrdM3JZBZ2811wDrMiqEHiuilolMGlTRjxigg7vcQrl
Ah5526OGzzrTSQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:50:12 2025 by rpki-client