Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: mEJeSiNyHCmHrf2EyoqN8zQdmhPgGsS5Ymdb1jCrudU=
Subject key identifier: 8F:DA:79:42:9B:64:6A:A6:3A:A5:3E:36:8E:6F:6A:19:02:F0:42:8C
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 0197B5FBE5498431FDA0D26DA8EF55685FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 10:01:13 +0000
Manifest this update: Sat 28 Jun 2025 10:01:13 +0000
Manifest next update: Sun 29 Jun 2025 10:01:13 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: kT+DNND5m+WctNprWzXd5rvMhvCIrUbejC0JrTZ7UoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e5:49:84:31:fd:a0:d2:6d:a8:ef:55:68:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Jun 28 10:01:13 2025 GMT
Not After : Jun 29 10:01:13 2025 GMT
Subject: CN=8fda79429b646aa63aa53e368e6f6a1902f0428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:02:b6:94:83:71:2a:bd:c2:f7:8a:b4:57:
59:7f:9b:52:9f:03:b3:1e:50:c2:af:6d:91:f1:8b:
fb:22:ff:99:3d:58:79:a8:c9:56:e8:64:ce:a6:83:
07:47:28:23:6c:86:f0:52:81:35:d9:c6:8f:d6:6b:
26:c4:c3:6b:0f:70:21:22:a0:50:c4:81:84:3e:14:
8d:70:84:00:f3:bd:3b:ac:05:44:bf:9e:90:36:35:
e8:c4:17:1e:46:ab:bc:99:16:38:af:17:66:87:b0:
a9:b7:be:02:00:e8:05:33:bd:e6:0c:27:a4:74:3d:
a2:8e:06:0d:ca:f9:48:01:75:99:e1:4b:de:e1:a4:
f8:43:38:12:e1:3c:ee:14:19:72:8c:e9:fd:d9:e0:
5c:32:61:ca:a7:41:d8:be:5d:2b:93:88:3a:b3:1a:
fc:a2:49:79:6d:db:b6:2c:f2:87:ff:64:dc:24:08:
c9:c3:c5:e2:95:b2:66:b3:46:63:70:d9:81:8d:5c:
8c:ee:e1:b5:dc:e3:d1:49:21:25:c3:ec:a9:a4:5e:
8e:2c:65:4e:56:3d:6a:72:56:34:0f:69:c6:2b:f1:
3a:cc:2d:97:d0:50:b6:1d:e6:04:29:e3:23:e4:cb:
9e:e2:2f:dc:ab:f0:b1:bb:c0:59:8b:53:4e:9b:c4:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:79:42:9B:64:6A:A6:3A:A5:3E:36:8E:6F:6A:19:02:F0:42:8C
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:82:8b:c4:ae:14:93:71:42:cc:43:82:6d:27:c4:33:0c:
cc:e2:0e:96:c2:c2:3e:e4:13:ad:12:0e:54:e9:11:98:41:fa:
c6:ff:a6:a4:72:12:53:dd:7d:03:64:3e:02:29:1c:79:dc:54:
5a:37:84:d8:cd:6f:0b:04:28:2d:92:9f:07:22:d7:12:a8:2a:
83:a5:43:cb:09:d0:ab:ea:09:c5:4f:75:0f:4c:52:8b:3f:7e:
01:24:c8:33:30:3e:3f:af:c1:a1:73:f7:9a:f7:a6:c5:dd:91:
38:9d:71:61:17:28:c7:8b:82:24:51:f6:38:b2:59:f2:d0:70:
52:08:54:77:97:be:7f:4e:13:37:57:da:d4:c6:fb:9b:30:64:
61:63:6e:d4:ca:6a:49:f9:19:ee:41:c2:50:f0:ea:6e:41:ea:
93:18:32:aa:a4:bf:65:fd:6f:85:43:60:80:99:e6:7a:54:b5:
bc:5f:80:f8:6e:ed:a0:cc:de:28:8c:83:94:15:13:0b:6f:9a:
11:de:04:07:09:bb:e4:86:98:03:29:ca:43:02:b4:92:6b:6e:
08:0b:b8:58:74:bd:0d:0a:c4:73:c8:ce:f1:a2:18:ea:a8:67:
55:7a:33:ac:bc:75:92:39:41:e2:08:0b:64:9a:1f:3f:36:88:
2c:9a:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:49 2025 by rpki-client