Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: pBdMxmofsZ7MJ9fI1kRkFTdZsWK/m+NgioIsv1U3FNI=
Subject key identifier: CC:88:59:84:7C:A3:6C:23:9A:CF:37:4B:24:29:D8:52:68:64:D7:52
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 019875D20892610A39AF0F98A1DA39F9ACA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0DA4
Signing time: Mon 04 Aug 2025 16:02:35 +0000
Manifest this update: Mon 04 Aug 2025 16:02:35 +0000
Manifest next update: Tue 05 Aug 2025 16:02:35 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: K4Z8YFxah0aV/zi0fFcYZTxQgCiJ8SolfJJELt0FTSw=)
2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:08:92:61:0a:39:af:0f:98:a1:da:39:f9:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Aug 4 16:02:35 2025 GMT
Not After : Aug 5 16:02:35 2025 GMT
Subject: CN=cc8859847ca36c239acf374b2429d8526864d752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:32:47:46:19:7b:05:b7:dd:97:d2:b1:51:
3c:c0:46:d7:33:b8:6e:7a:4b:c4:98:0e:39:3a:45:
33:c7:53:f0:1c:6d:45:3d:79:1e:82:da:89:99:02:
74:f8:73:86:bb:1f:98:4c:cb:45:7c:7b:db:02:26:
ab:84:85:35:59:d6:de:87:46:33:d0:96:95:07:e7:
30:70:d2:5c:81:e0:c8:ca:64:00:b3:6b:7f:f0:62:
91:0e:81:c8:94:85:07:8d:fb:18:a9:c3:29:14:e6:
f1:dd:c3:9a:9e:6d:b3:79:db:11:60:a3:99:aa:f9:
b6:a9:fd:79:5a:34:01:c7:8f:5d:bb:2a:f4:68:83:
3e:6b:c9:4e:a5:df:6e:42:02:6d:b2:4e:4b:21:fa:
a0:03:03:b8:5a:3b:45:a9:9d:a1:b3:8e:94:9d:77:
a4:b4:70:c6:2d:30:43:0c:cf:a4:4b:1b:a2:ef:bf:
53:32:a2:18:5a:10:47:52:61:69:a3:9b:a8:fe:32:
ff:28:9e:9c:b3:8e:f8:97:90:92:9a:76:1d:ec:c5:
82:31:6b:64:28:ee:40:f9:14:03:52:db:04:a2:5f:
38:9b:76:41:68:85:23:0a:fa:3e:7a:15:98:77:a8:
03:cb:a5:ec:65:82:fe:ba:31:64:3b:83:53:b3:6d:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:59:84:7C:A3:6C:23:9A:CF:37:4B:24:29:D8:52:68:64:D7:52
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:49:98:05:74:59:a7:27:2b:95:da:79:44:7d:20:fe:6f:
07:ca:22:31:66:e6:78:5e:6a:07:72:64:81:95:7e:4f:88:75:
78:07:b5:9e:6a:44:90:51:6b:65:e7:59:6c:f7:7f:6c:52:69:
16:38:a5:ad:47:6d:2c:27:8e:5c:ab:c5:c0:6b:14:23:b1:66:
7b:fa:3c:fc:cf:b6:4e:d4:4c:7f:29:5c:2f:2e:5f:21:4a:70:
41:e8:0e:28:6b:63:9e:65:d3:26:67:b4:40:d1:24:3e:59:0c:
2f:71:c5:4e:45:b7:6c:3f:91:a6:7b:64:2c:96:fe:c8:7d:9f:
b5:b1:3b:08:1b:ec:bd:94:2b:9f:e0:c9:b0:08:2a:c5:42:a8:
c0:76:38:13:21:f8:98:22:11:fb:61:80:21:25:20:cd:82:0a:
5b:48:38:f9:b4:f1:bc:2f:5e:cf:ea:62:49:4f:53:f4:f1:86:
8d:06:a3:bc:56:bb:66:7b:29:98:2c:6a:0c:11:8b:e5:e9:d3:
72:25:33:74:a2:9d:e4:61:9f:2f:31:20:c0:4a:16:b7:9c:c0:
82:b7:0a:d0:6e:8e:1e:5b:a4:5b:a6:14:40:97:8c:b6:4d:6d:
86:bf:0e:08:33:19:00:b7:81:e6:58:d3:74:f3:f4:f3:51:d5:
06:af:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:54 2025 by rpki-client