Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: F1t6RHy5eI4TduEcyYHQM3D13rbwUO5HZg65BnTChcw=
Subject key identifier: 38:9F:34:6B:B6:D0:EC:28:AF:AF:15:9A:8A:B9:2A:6C:C7:FE:14:5F
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 0198D6614A29A8198F59E6E7B55BF22D1432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0A4F
Signing time: Sat 23 Aug 2025 10:02:36 +0000
Manifest this update: Sat 23 Aug 2025 10:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:02:36 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: 8UTdr2uOIJQzakmK5mICVzE1QERDbqteksBsELpeyeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4a:29:a8:19:8f:59:e6:e7:b5:5b:f2:2d:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Aug 23 10:02:36 2025 GMT
Not After : Aug 24 10:02:36 2025 GMT
Subject: CN=389f346bb6d0ec28afaf159a8ab92a6cc7fe145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:99:2a:e6:ef:10:81:0b:c7:ee:5d:6a:96:
70:08:07:80:10:f7:1e:ab:0f:e5:b2:c3:2d:c7:a0:
c6:57:60:ed:58:71:bd:e6:c0:f6:2b:ce:4b:0e:3f:
e3:87:b2:e6:70:31:93:4f:c1:74:37:eb:4c:f7:eb:
5f:ee:57:3b:08:37:6a:ac:f1:92:ef:1f:3f:a6:a5:
8c:35:95:e9:ea:03:cb:48:56:18:b7:44:09:23:18:
d4:83:69:65:0a:ca:08:9b:e6:6f:96:e8:09:b6:73:
c9:cf:67:f8:f5:39:75:7b:3e:70:a4:9a:21:69:91:
dc:3e:b4:2d:1a:ad:34:56:7b:3d:ee:bd:aa:3a:4b:
c7:44:30:0e:c7:c2:8f:86:40:1f:d4:a8:09:70:66:
a5:13:81:0b:47:b8:be:ba:1f:32:f3:32:60:20:f2:
ec:ec:33:61:a7:10:3c:da:35:67:70:fc:fd:d6:12:
c2:f2:d8:ce:41:eb:40:dd:66:f1:d5:1b:7f:5e:a7:
73:43:41:34:52:21:65:2e:a4:93:96:67:8e:09:b9:
50:1c:db:66:a6:bd:6f:39:c3:3c:84:62:a7:e5:56:
76:16:30:aa:d9:32:45:6b:5e:3c:f2:1e:ff:f0:84:
bd:b5:d2:57:63:15:46:ef:a3:05:f8:45:e3:e9:79:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:34:6B:B6:D0:EC:28:AF:AF:15:9A:8A:B9:2A:6C:C7:FE:14:5F
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:a6:ac:ed:d9:4a:6b:f1:bf:c2:8f:2d:33:4b:a2:fe:b7:
da:24:d5:e5:16:61:28:13:49:e6:9d:7d:8f:d4:c1:f8:8a:d7:
41:2b:a4:a8:6f:27:d5:e9:1d:a5:ee:04:d6:f1:79:38:34:8f:
f5:8c:f2:55:57:94:2c:fd:12:6b:e7:69:d0:c3:ff:60:ae:72:
17:15:19:a9:59:1c:38:9c:b1:2f:1c:b8:5b:f3:ec:05:ba:54:
49:36:66:b5:b3:d7:e3:db:8d:81:e7:ed:c2:36:06:0f:53:fa:
fc:51:07:79:1b:72:cc:43:ba:65:03:d7:1c:13:26:d8:77:17:
55:8a:c2:e1:93:be:30:2c:5f:d5:5c:ea:5d:c6:83:2c:d7:24:
23:08:df:7d:1b:7f:e0:74:96:86:08:57:3b:a1:46:f8:99:c4:
c5:5e:2f:ca:df:ae:cd:b2:f0:d7:8d:e8:2d:8d:8a:db:39:5b:
02:f7:21:1f:a5:d0:cf:67:9b:16:a1:af:16:ad:b4:de:22:fa:
ef:7e:c4:39:9c:88:ce:3d:bb:0f:b0:8f:8c:c9:90:07:a7:5d:
35:fd:18:49:96:7e:db:23:48:41:37:29:66:49:b7:e5:1d:8e:
41:87:57:49:d4:c8:ce:54:5a:39:d4:be:3a:29:94:9d:98:83:
fb:bf:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:20 2025 by rpki-client