Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: crI896Kw1o7aBNaJkXWBFMtD1JM3pVEYw3oqd+rn/bA=
Subject key identifier: F6:34:F1:A9:9F:0E:6E:31:73:4C:D0:BB:EC:BB:6C:6B:12:23:26:5A
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 0199FBEAC1DBF315FE7F2DBDC9C57A406009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0AE7
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: zOwJ4u8kYPynKeRtuPpyrF3UqbH3UEhfUJ0XuMhs8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c1:db:f3:15:fe:7f:2d:bd:c9:c5:7a:40:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=f634f1a99f0e6e31734cd0bbecbb6c6b1223265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:c3:e3:89:2d:c1:bb:c4:fe:16:76:b9:0c:
73:53:bd:b7:a3:6b:69:1b:0f:07:d9:7f:ca:a6:bb:
fd:8f:7b:57:fb:4e:c4:45:aa:b9:25:82:18:3b:01:
22:9e:3f:02:8d:d6:dc:6b:65:f5:03:3c:97:bd:b4:
8f:23:c3:7c:f9:33:16:c2:b6:9e:5b:d0:81:76:a8:
b2:00:22:8d:97:da:14:6f:43:30:8a:0e:f0:d7:e3:
4b:a5:76:74:af:61:c2:7e:6c:04:c0:48:b2:4f:7d:
c8:2b:1b:d3:8d:c2:bd:9b:d3:02:1b:2d:ab:34:32:
b0:57:f4:cd:77:35:64:cf:e7:81:88:3a:12:21:e1:
0d:c7:74:f2:9f:26:08:13:be:66:b6:cf:83:3f:04:
d8:50:7f:f7:6b:39:aa:99:33:a8:4f:64:08:d5:de:
1a:93:83:71:9c:5c:4f:86:01:ff:54:a4:0a:7a:12:
e7:8c:ea:de:ad:82:c4:86:83:5c:8c:47:f2:d2:fd:
2a:ef:53:07:9d:91:e7:e6:06:2e:bd:fa:08:3b:03:
37:fe:c3:a7:15:c7:68:04:7d:51:8a:71:a8:1f:21:
1a:f0:6c:91:07:f6:52:42:c2:26:2c:83:eb:7a:4a:
8a:4a:35:08:55:ab:c5:61:12:75:cc:2d:1a:a4:06:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:F1:A9:9F:0E:6E:31:73:4C:D0:BB:EC:BB:6C:6B:12:23:26:5A
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:73:9a:fe:e3:6e:a5:bb:b4:9b:91:73:6e:b9:e8:7c:97:
26:5b:5f:64:8d:eb:41:6d:6e:c7:ce:62:41:4b:bb:11:51:7d:
30:a5:dd:a1:c8:67:93:17:30:bd:d8:7b:72:46:f1:e7:b3:42:
9e:8a:67:78:be:39:ea:10:69:07:8e:82:75:80:9f:98:93:da:
dd:83:ad:3a:d0:9e:51:7e:af:1f:8f:4d:65:5f:fd:fd:23:7f:
e0:07:e6:f5:56:1b:ee:9b:33:09:04:17:7c:2b:ab:f2:3f:df:
05:b1:fd:06:ae:b7:64:de:01:05:33:14:3c:1a:19:e1:d5:2b:
41:58:af:c2:dd:ce:51:81:03:2e:40:8f:12:42:74:24:23:74:
92:0c:24:c2:b6:7b:02:15:86:03:09:58:3e:e9:4d:6c:c0:43:
82:03:e2:0b:91:01:59:04:1a:93:57:08:69:d9:f0:e1:c1:ba:
d2:c3:3f:29:de:19:87:9e:48:f7:25:99:dd:da:03:b1:4e:8a:
0d:f0:ed:c1:70:c4:67:22:48:db:de:0c:d3:76:71:86:4b:6b:
f6:00:94:6e:c7:39:d8:01:f5:a3:c6:08:4a:85:d1:9d:08:d4:
e7:25:7c:f6:1a:10:84:5e:c7:37:65:22:4b:07:f5:09:30:67:
12:f8:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:07 2025 by rpki-client