Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: 7PJ4olXyKJ5tAy7kCXTEpoFQMVC0nqrcqdANyQtQPoQ=
Subject key identifier: 4F:DF:CC:C1:C5:4E:79:20:F5:24:EB:7B:BC:BA:9C:B6:69:B0:8B:01
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 0198D54E6496DE467C337D9E3DDC9D42A312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: B8urkAQq/uiBu4aPjNOKbHM+iNJzMw3DNVwe9vUhJwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:64:96:de:46:7c:33:7d:9e:3d:dc:9d:42:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=4fdfccc1c54e7920f524eb7bbcba9cb669b08b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:19:df:97:60:1a:84:a6:c4:8f:3b:f3:e7:
00:00:7e:b8:8c:c3:de:63:b7:2a:68:f3:7d:4a:55:
f4:3e:79:da:e0:e8:35:37:11:2c:70:42:b5:6e:8e:
6a:47:0d:45:61:e2:3f:75:40:23:71:64:9a:bd:db:
90:3e:94:fe:c7:d5:0a:ae:aa:85:b5:f2:1c:48:6c:
36:dd:14:2f:47:17:41:37:91:ea:ec:f9:c2:60:d4:
55:bb:ef:a6:e4:c9:d9:48:55:5d:17:60:88:52:f0:
f9:e0:29:d6:90:a4:23:c0:48:be:3b:a4:cb:63:62:
54:c4:1b:6f:1c:d0:f2:0f:18:f7:76:86:79:80:1a:
fa:43:19:1b:1f:01:36:e5:68:59:4e:63:57:53:06:
c1:2f:e3:16:71:36:0f:49:fa:4a:ec:ca:3c:b3:b2:
49:89:66:3c:9d:d7:de:94:19:3c:70:2e:32:38:44:
c8:c7:5d:aa:45:9a:c6:4f:a7:dd:a5:26:d5:fa:08:
c5:3a:ee:ce:65:e5:55:a1:4a:d1:92:a9:47:d8:15:
93:f0:67:e8:24:97:15:dc:d1:bc:9b:52:a6:bc:b5:
ce:9e:9a:8f:25:c8:3a:47:f8:07:8f:fd:2e:d6:5b:
7e:6b:1c:f4:33:4b:c5:d8:66:af:ec:c6:23:6e:8d:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:CC:C1:C5:4E:79:20:F5:24:EB:7B:BC:BA:9C:B6:69:B0:8B:01
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:f0:4b:46:b2:1a:d3:fb:f4:08:fc:e6:3f:8f:2c:a3:60:
12:a6:c5:ba:09:f6:60:14:f9:10:9f:41:79:39:39:88:45:f8:
17:91:aa:38:73:86:0d:05:1e:33:e3:b0:5a:45:23:ed:9c:7f:
a0:1e:bd:b9:6d:ff:4a:c1:49:1f:d3:dd:7d:49:65:11:ad:cc:
4c:ad:a0:ed:ab:c2:41:e1:31:49:ad:f1:28:50:dc:0a:7a:2d:
ff:0f:a8:37:ad:fe:d7:bf:69:1e:bf:89:8e:00:1b:2b:f1:1b:
69:a5:15:cc:67:a2:e5:12:6b:7b:a5:61:66:46:7d:0e:1a:45:
12:66:55:5c:e1:f0:3a:56:5e:57:51:49:ae:f4:ad:cf:6d:a1:
1b:66:95:d1:dc:58:83:e3:a7:c7:90:b8:b1:a5:89:bd:7a:f5:
a0:90:a0:a2:c3:01:80:35:6b:38:4a:10:6c:57:0f:63:4f:f9:
d6:c3:02:6f:1c:24:7e:d6:25:29:fc:7e:6d:fe:98:ee:b4:f4:
fc:7b:88:0e:72:3c:d8:a0:a3:ba:ff:2f:f2:44:c7:53:d7:65:
0a:3e:5e:79:d2:2e:d8:b1:e8:45:0d:f0:b2:85:1b:ed:23:f6:
ff:a2:91:be:23:fe:05:d8:59:dd:79:f5:bf:c2:6c:b2:25:79:
9d:eb:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:43 2025 by rpki-client