Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: NY5WSoq33bw4dU2W22uTY77EMKAZZgL3VztB8xUSkj8=
Subject key identifier: 18:1C:CC:14:8A:9D:79:53:B8:89:D9:5C:12:60:69:51:0C:DF:F0:18
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01989C0221B662EC065C1C40002D2F7532E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 02:00:42 +0000
Manifest this update: Tue 12 Aug 2025 02:00:42 +0000
Manifest next update: Wed 13 Aug 2025 02:00:42 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: SeunqcpTKbadLHSxBKBiKlGmgmKru5q1C3WSo7Q1MCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:02:21:b6:62:ec:06:5c:1c:40:00:2d:2f:75:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Aug 12 02:00:42 2025 GMT
Not After : Aug 13 02:00:42 2025 GMT
Subject: CN=181ccc148a9d7953b889d95c126069510cdff018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:fa:96:f4:c3:69:47:87:a0:d7:32:35:8f:
dc:eb:17:1b:50:e6:75:62:1f:93:cb:9b:65:e8:77:
89:02:c7:5d:14:92:7b:53:44:e1:42:6b:8e:b8:84:
e7:ab:5f:51:fd:20:41:85:46:78:f8:9c:1e:ab:29:
4b:f1:c4:50:0b:a0:27:8b:04:5d:3f:65:43:16:9a:
ba:d7:86:5b:77:2f:f8:be:7f:12:f6:82:a7:77:35:
75:85:a1:e3:d9:b3:3a:ca:5c:84:b3:c3:1a:25:a0:
8e:b4:20:d5:02:e9:ec:86:c5:bc:f0:72:88:e1:57:
60:a9:28:84:5c:55:b2:7d:15:1a:89:15:fb:cf:cd:
ba:84:58:12:b1:15:0e:fc:ef:4e:fe:82:34:88:de:
c8:f9:cc:6c:dc:6c:d9:16:ac:e0:4f:2e:7c:f3:4e:
33:d5:4d:1a:c9:94:83:c3:3c:b9:8d:b3:34:03:66:
76:06:3c:4d:a8:39:a1:c2:7a:48:f7:9d:3e:7d:38:
28:da:20:36:b0:40:ea:07:fb:66:f9:18:37:a8:f2:
3c:16:42:fe:22:a0:f4:8b:16:28:62:9a:45:6d:d7:
7e:f8:be:78:46:93:ac:7f:fc:84:fc:19:4c:12:ef:
40:e0:fe:34:77:e0:f7:de:23:e4:3b:ee:8e:13:2e:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:CC:14:8A:9D:79:53:B8:89:D9:5C:12:60:69:51:0C:DF:F0:18
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:d3:64:7f:7a:b0:18:ac:c2:2f:24:8d:48:7d:23:02:0e:
97:96:ac:93:cb:6f:39:90:1e:2d:44:56:f3:24:38:40:44:c9:
41:0b:ad:2f:0b:69:ff:aa:5a:22:bd:be:de:01:a6:8b:ca:21:
52:e2:1c:8c:0f:c1:ff:34:98:84:10:6d:fa:47:e2:e0:89:17:
28:02:47:2d:98:55:7f:0e:6a:e7:bd:c8:ad:06:d9:26:a1:6a:
3b:f6:22:0a:1f:db:07:eb:18:91:d3:ee:ac:05:95:fc:fc:f8:
e8:45:c9:62:c0:de:fd:c3:2d:58:7d:44:07:2e:12:fb:82:06:
a3:94:ba:af:04:bc:c3:1d:91:8a:ea:25:3b:b3:e7:7b:3a:0e:
24:cc:75:74:9a:d1:10:5b:78:aa:14:50:b6:ac:c5:ba:0a:af:
58:92:cd:1c:51:0f:46:e6:bc:10:59:05:b5:e1:1f:a0:a8:66:
11:06:17:db:ea:bb:1f:93:eb:d3:7d:f4:87:c8:c6:b6:b6:99:
41:bc:59:30:0f:a2:8c:b9:b9:c6:89:c7:db:8e:aa:30:43:9d:
cb:9d:3d:59:76:74:ee:8d:4e:17:5e:e7:eb:97:13:a4:46:b5:
6e:97:e3:32:56:a2:54:72:f5:8f:a1:ee:40:c4:53:2d:9e:ac:
f2:9d:c9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZicAiG2YuwGXBxAAC0vdTLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk
Y2EwZTEwHhcNMjUwODEyMDIwMDQyWhcNMjUwODEzMDIwMDQyWjAzMTEwLwYDVQQD
EygxODFjY2MxNDhhOWQ3OTUzYjg4OWQ5NWMxMjYwNjk1MTBjZGZmMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0b6lvTDaUeHoNcyNY/c6xcbUOZ1
Yh+Ty5tl6HeJAsddFJJ7U0ThQmuOuITnq19R/SBBhUZ4+JweqylL8cRQC6AniwRd
P2VDFpq614Zbdy/4vn8S9oKndzV1haHj2bM6ylyEs8MaJaCOtCDVAunshsW88HKI
4VdgqSiEXFWyfRUaiRX7z826hFgSsRUO/O9O/oI0iN7I+cxs3GzZFqzgTy58804z
1U0ayZSDwzy5jbM0A2Z2BjxNqDmhwnpI950+fTgo2iA2sEDqB/tm+Rg3qPI8FkL+
IqD0ixYoYppFbdd++L54RpOsf/yE/BlMEu9A4P40d+D33iPkO+6OEy45PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgczBSKnXlTuInZXBJgaVEM3/AYMB8GA1UdIwQY
MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt
NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl
LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMvTZH96
sBiswi8kjUh9IwIOl5ask8tvOZAeLURW8yQ4QETJQQutLwtp/6paIr2+3gGmi8oh
UuIcjA/B/zSYhBBt+kfi4IkXKAJHLZhVfw5q573IrQbZJqFqO/YiCh/bB+sYkdPu
rAWV/Pz46EXJYsDe/cMtWH1EBy4S+4IGo5S6rwS8wx2RiuolO7PnezoOJMx1dJrR
EFt4qhRQtqzFugqvWJLNHFEPRua8EFkFteEfoKhmEQYX2+q7H5Pr0330h8jGtraZ
QbxZMA+ijLm5xonH246qMEOdy509WXZ07o1OF17n65cTpEa1bpfjMlaiVHL1j6Hu
QMRTLZ6s8p3JjQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 04:14:30 2025 by rpki-client