Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: iyVs+H8XTMwD6lWDz6Wd+qhUvnyx8OrN8lR7lnZh0Aw=
Subject key identifier: 29:76:31:2B:3B:63:2A:B4:F9:46:7D:8C:B0:C2:22:8C:7B:ED:40:21
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 0198879FCD28D5A26DD5F1B8068199204964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 03:00:53 +0000
Manifest this update: Fri 08 Aug 2025 03:00:53 +0000
Manifest next update: Sat 09 Aug 2025 03:00:53 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: Wmd9I9DjOVHkWE+1yJBTUKjCBYoT56SNBBmVXI3DbWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:cd:28:d5:a2:6d:d5:f1:b8:06:81:99:20:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Aug 8 03:00:53 2025 GMT
Not After : Aug 9 03:00:53 2025 GMT
Subject: CN=2976312b3b632ab4f9467d8cb0c2228c7bed4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:b4:51:3d:83:cc:c5:6e:3a:30:39:35:48:
60:ae:d1:f9:c8:db:cb:e0:c6:df:a1:37:71:d0:8b:
27:e2:d9:0b:92:5a:7b:95:f5:a0:9b:eb:dc:c7:4b:
99:96:1a:d8:82:9b:ad:ae:51:a3:c4:d1:22:e5:80:
83:7c:06:0b:91:1f:79:f1:09:47:bb:a0:a9:c9:13:
1f:a3:ed:b6:a7:8d:c8:05:9d:2d:3c:8b:28:2e:44:
5a:a1:67:df:e8:ca:19:13:da:2b:dc:d9:a0:fc:93:
94:36:0a:53:80:1d:f9:8d:60:a1:5b:c8:ef:4e:a5:
ed:2c:4a:02:c6:17:88:5a:e8:e2:15:e3:21:48:a7:
c8:67:63:a9:ca:c4:d9:12:f5:ce:aa:96:bf:f0:d7:
b4:60:3b:46:66:9c:06:8f:93:f9:b9:2b:fa:10:20:
f1:d9:91:59:63:57:e6:7d:09:54:f5:11:70:81:3a:
1c:f9:11:c3:00:73:81:41:7e:0a:6f:27:e6:d9:2e:
63:81:cd:88:33:9f:94:2c:41:34:68:3b:0c:20:3e:
ed:72:9f:d6:8d:7c:79:b4:7f:94:2b:78:90:d2:4d:
a8:9c:ba:a4:8d:34:18:bc:9b:10:20:16:3c:d0:aa:
ae:5d:66:01:b3:c9:b1:37:45:16:cb:08:91:20:cc:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:31:2B:3B:63:2A:B4:F9:46:7D:8C:B0:C2:22:8C:7B:ED:40:21
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:82:46:9c:98:a6:55:09:3f:8b:79:ab:8c:d5:e5:3b:a9:79:
b4:cd:ff:5e:75:c1:d9:5e:34:10:35:54:b5:f7:2b:c5:dc:6e:
e7:b3:21:cd:85:e7:80:3f:03:21:73:11:dc:f2:26:08:ff:93:
e1:ab:d4:79:6d:21:53:bb:ad:1c:76:8a:72:18:3b:67:00:c6:
68:42:29:c5:71:32:65:62:ee:cb:9d:89:a9:e5:da:de:28:5b:
77:4a:7d:96:9e:34:75:ef:8d:ee:a9:e8:13:b3:c9:78:53:a8:
65:49:14:3f:e7:e0:10:ea:0a:39:19:d3:c7:b7:dc:41:19:c4:
2c:12:b7:5c:4b:13:ad:dd:6f:1b:05:ed:04:1d:cd:ad:42:ab:
77:7f:2e:ae:89:f0:b6:73:8c:7f:c0:61:f4:aa:ff:fa:cb:a5:
9b:a4:2b:be:a1:d1:6b:12:43:8f:fa:d9:a6:a7:35:f9:bf:76:
60:56:ce:3e:94:be:9a:60:84:f6:ae:65:0f:13:01:32:93:03:
b9:d8:b1:32:b1:72:10:04:bf:7d:91:9c:cf:0f:e1:6e:1e:6a:
99:83:5f:26:a7:88:73:a5:b8:f0:3c:8c:4c:3a:6b:8e:1e:bc:
b4:f5:08:dc:79:b5:27:3a:1b:27:bf:55:36:5a:29:c5:1e:89:
1a:ca:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:38 2025 by rpki-client