Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: 5eZZBypJgDYrdzYqfMIw6XLFYAvEs+tQmwPUI1R9fK0=
Subject key identifier: C8:6C:03:07:91:A9:46:E0:E2:72:8F:2B:6B:65:5B:73:E0:1B:71:C9
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 0198D5BBBDD36A72F149B67FE60CE0C46AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1358
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: 5Y0NW12aj+T7r1qDNPVul+/4fy696NQiEoEnPmDl86Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bd:d3:6a:72:f1:49:b6:7f:e6:0c:e0:c4:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=c86c030791a946e0e2728f2b6b655b73e01b71c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:13:fd:25:f6:d4:d4:37:57:0b:06:ed:69:
5d:2e:ab:14:48:d7:dc:39:f0:8b:a2:47:9e:f3:c4:
95:e3:3b:45:2e:8d:8c:0e:32:2c:cf:05:e5:c2:dc:
da:f3:46:12:28:07:3d:01:0b:c2:b3:78:47:5c:b2:
96:77:de:c6:33:98:9a:40:89:2f:82:4e:f1:26:9a:
d3:03:8c:b2:e7:2e:7d:16:87:52:a2:fa:ab:91:df:
a6:7f:10:76:f2:da:b9:05:71:6e:05:97:c8:d9:8f:
77:2d:1e:cb:bb:25:93:14:b9:2d:61:72:f7:b4:bd:
e1:e3:61:8c:09:2b:e4:24:1c:fc:9b:35:46:3b:38:
5e:f3:4b:a5:84:1e:77:6e:de:d7:31:73:d9:c8:cd:
c9:ee:23:6a:65:6b:0f:9a:30:d0:4c:9d:e1:7d:f2:
44:5f:39:32:1d:24:84:ab:00:4c:e6:5c:05:38:86:
d6:a7:c5:1a:7d:29:fe:73:a8:4c:4f:8d:e7:c7:a7:
de:98:d2:25:89:a4:bb:15:d2:a6:44:66:c6:6b:49:
fa:19:db:9f:74:ea:e8:4e:71:22:50:69:7a:16:f1:
4f:12:a7:be:d5:0a:51:6d:aa:1a:cb:40:0a:29:44:
ab:e3:d0:39:fd:88:be:ea:18:38:d5:95:bc:c7:30:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:03:07:91:A9:46:E0:E2:72:8F:2B:6B:65:5B:73:E0:1B:71:C9
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:a3:8d:4b:16:b3:cb:41:77:41:fe:2f:b6:93:b0:eb:f3:
17:69:6a:8a:71:6c:65:60:6d:1b:f3:16:73:a6:b2:82:e3:e3:
6c:a0:59:d6:05:b6:5f:ea:81:b6:be:dc:60:ea:e2:6f:20:7c:
88:f7:98:fa:34:c7:40:e8:49:50:74:cc:3e:38:79:8f:fc:73:
83:7e:93:d0:c8:49:b3:07:a3:cc:8b:7c:c5:40:86:c1:e5:db:
7d:11:57:58:9f:8b:5b:54:a5:66:33:0e:14:90:a0:cf:b6:5e:
69:7c:db:2b:05:ae:0c:59:95:73:09:35:e2:79:9b:3a:0e:3b:
8c:ad:a9:f5:97:2c:85:b8:f3:0e:df:f4:32:62:4a:79:38:d4:
4c:15:8a:9b:d6:7c:d7:c3:86:55:5e:2d:e0:52:b0:1a:c3:69:
86:55:48:e4:e6:b2:de:f3:b3:39:1e:07:72:10:b3:b9:ad:54:
6d:c0:e5:cc:26:8c:59:6b:23:21:b7:fb:6d:ed:a1:e2:46:a8:
1c:79:5c:21:1f:06:d7:7a:b2:47:06:6d:8a:98:79:3b:30:74:
e9:67:a5:ed:80:74:f7:2b:78:7a:a0:15:e9:7d:a6:ab:ad:e5:
33:b6:5c:30:80:b6:5b:2f:23:fb:2a:05:a5:0d:bd:48:51:6e:
34:6c:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:35:53 2025 by rpki-client