Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: 1biF4hTraaRGrYCgK1k5/UwpSrvVvGHajfuyGZzAqmA=
Subject key identifier: 22:28:E0:AA:09:CE:82:B1:D2:7A:10:28:1A:F6:D1:F6:26:67:91:4C
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019875D0DBDB5E3698F97557D397DF985BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 16:01:18 +0000
Manifest this update: Mon 04 Aug 2025 16:01:18 +0000
Manifest next update: Tue 05 Aug 2025 16:01:18 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: QTjy/B8pQwGr70i341MebqWdnDGE/SKG49BpgP5PU5k=)
2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:db:db:5e:36:98:f9:75:57:d3:97:df:98:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Aug 4 16:01:18 2025 GMT
Not After : Aug 5 16:01:18 2025 GMT
Subject: CN=2228e0aa09ce82b1d27a10281af6d1f62667914c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:00:b9:ad:97:b6:06:83:fa:8b:13:69:18:
f2:25:d0:81:d6:92:ed:f8:b1:04:09:84:01:91:2a:
fd:24:d0:2b:a7:4a:08:fe:97:f0:6c:27:c5:b7:6a:
11:0c:d3:6b:37:6a:fc:70:e6:ee:0b:52:a4:ef:2e:
c0:1a:c0:c6:83:26:4b:48:86:f6:9e:50:dc:68:a8:
53:26:0b:1f:68:ef:52:db:eb:75:e5:b7:3c:20:f6:
ee:44:e0:76:c0:23:df:29:1f:3e:50:9c:3d:4f:d8:
31:11:5e:6f:fd:36:78:1b:dd:8f:31:33:02:51:4c:
9b:45:32:89:3b:7a:68:fb:0c:2b:4b:0e:da:fe:99:
ab:89:72:61:20:5f:d7:e3:5c:17:87:42:7d:b1:4a:
c8:a0:6c:57:de:34:af:67:ad:c6:5c:e2:97:a2:bf:
e6:db:17:58:b3:4e:f9:df:5b:34:1b:37:07:c7:e2:
48:6f:4c:6b:c0:7d:7e:20:9c:2c:3a:1b:d5:6f:c2:
5f:cc:d8:48:a1:05:b2:42:33:7a:12:1d:f1:d0:b6:
e7:2a:ed:0b:13:1a:bd:eb:83:3d:fc:47:21:b3:86:
fc:cb:29:41:98:77:2b:fd:f1:fe:d0:3f:4e:e4:4f:
92:ac:98:e2:3a:6f:fc:d8:9a:56:26:8a:4e:da:b6:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:E0:AA:09:CE:82:B1:D2:7A:10:28:1A:F6:D1:F6:26:67:91:4C
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:fb:0b:6c:96:92:3f:aa:de:4b:48:40:ba:f1:04:ac:9d:
91:be:cf:37:1c:cf:a8:73:0c:8f:d4:95:db:14:55:45:8f:c2:
bf:0d:ae:60:1d:87:3e:42:85:38:02:1d:12:a6:52:b5:a0:62:
e1:9c:e9:95:84:cd:94:9e:3f:ef:d9:9e:a0:81:7f:b9:8c:2e:
91:e4:a8:94:e8:ea:c2:bb:d2:dc:87:ca:fe:cc:f0:cc:53:4a:
62:3b:fa:de:be:75:cd:a1:e5:5c:a4:d8:4e:e9:34:20:4f:38:
35:50:7d:59:48:cf:e2:fd:c4:86:94:45:15:96:34:ac:20:7e:
44:e5:bb:a5:4a:fb:98:4c:d3:43:77:4c:da:1d:63:c7:d1:fa:
13:2f:8d:aa:9c:8c:d8:31:a7:c5:5e:32:be:6a:a1:92:8b:7c:
76:d8:c2:69:0a:ba:be:89:31:99:f4:b1:bc:76:02:a7:f6:c9:
7a:9f:8d:64:16:ac:da:9f:7d:72:f0:09:ae:d0:16:33:10:63:
14:d8:e2:72:e2:32:5e:52:98:86:93:47:a9:c9:f5:08:60:0f:
91:86:60:39:a3:9b:78:f9:f0:9f:92:d9:39:22:92:15:61:ea:
2e:10:95:c9:20:60:80:e0:ea:ac:6f:77:c2:9d:d2:87:ba:86:
8f:6e:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:21 2025 by rpki-client