Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File: IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier: 12T5ygpk836633jjq29dw+bKlsc/X8wP08ROrm08lc4=
Subject key identifier: A4:57:90:B3:3A:94:D7:FE:4A:13:8A:9A:DC:AE:79:19:9E:EC:DA:D4
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial: 019893DA9208B409F2B50DBB22BD6FD8C710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number: 01CA
Signing time: Sun 10 Aug 2025 12:00:31 +0000
Manifest this update: Sun 10 Aug 2025 12:00:31 +0000
Manifest next update: Mon 11 Aug 2025 12:00:31 +0000
Files and hashes: 1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: drpyGkHKQRi8QdYp3Gq86XDG9Vl3EW3Kypp0Tv4SMYw=)
2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:92:08:b4:09:f2:b5:0d:bb:22:bd:6f:d8:c7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20105484f187f2087d120cad971d682db3159965
Validity
Not Before: Aug 10 12:00:31 2025 GMT
Not After : Aug 11 12:00:31 2025 GMT
Subject: CN=a45790b33a94d7fe4a138a9adcae79199eecdad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:d1:89:27:ef:48:33:0e:6e:11:b1:84:e3:
52:5e:c9:41:ac:c1:f8:15:c7:4d:ab:e7:6b:23:5a:
c1:23:63:48:10:a0:53:93:65:b4:71:bb:96:d0:05:
23:20:66:7c:4f:f6:da:1a:c4:19:43:ee:d8:9d:ec:
a4:f2:98:0c:2c:57:9c:fb:d6:a7:7b:87:39:aa:fc:
a2:f6:d2:6a:dd:8f:32:d3:c3:94:c3:9c:46:56:31:
dd:09:41:ac:11:35:6c:39:5d:8c:c5:0c:bc:04:20:
5e:eb:b8:f2:86:04:49:5f:92:fc:ed:db:c7:1f:6a:
6d:86:68:3a:37:a8:b6:a2:51:eb:fb:be:cc:ec:99:
16:19:4c:83:7c:f9:47:92:c1:e7:05:c6:86:b5:fb:
e2:c9:9e:a9:36:4e:3a:76:2a:da:12:b7:b7:de:90:
fd:bc:04:de:75:1c:ab:f9:9c:4f:de:4f:33:a5:6a:
45:84:6c:05:d7:96:e0:44:29:c2:a8:27:16:6b:43:
ed:d5:f9:fe:3f:62:88:8f:47:b0:7c:1b:57:26:60:
b4:e4:63:44:8c:6f:21:58:53:5e:4c:9a:1f:ec:e9:
7d:b9:75:21:02:cd:21:91:64:b9:55:9a:38:40:1b:
45:22:31:b2:01:00:47:b4:da:b1:77:cc:c7:63:bb:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:90:B3:3A:94:D7:FE:4A:13:8A:9A:DC:AE:79:19:9E:EC:DA:D4
X509v3 Authority Key Identifier:
keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:2b:cd:c8:3d:27:bc:e7:a0:94:c8:5b:c2:cb:bb:da:b1:
01:63:4e:40:1a:b0:81:00:d6:87:89:d1:f4:d7:2f:61:4a:85:
0c:9a:b4:00:26:ae:83:c8:ef:9c:3e:ff:ad:95:f7:69:45:71:
b1:93:33:ad:4a:32:85:12:e6:f2:83:33:f8:99:ed:93:c3:ed:
e0:e9:9f:12:0b:0b:f8:39:43:70:7f:0f:fc:18:23:59:ef:5d:
8d:9d:09:30:e0:4f:7d:fa:4f:11:1a:5c:0e:56:8a:8f:0b:2a:
4d:8a:f7:83:4c:71:91:03:59:ef:fa:85:3d:61:5d:9e:d0:51:
ee:56:c7:5c:a5:91:d7:e4:1b:53:e2:fa:ac:ea:98:79:69:96:
e5:18:5f:7f:de:91:29:1f:07:92:18:a4:d0:cc:d9:c5:3b:bd:
a5:59:b5:a1:21:31:08:ba:8a:84:62:95:c9:52:da:e0:29:75:
e3:44:2f:37:a2:e1:0c:66:05:6b:c0:2e:f7:24:2b:8c:09:6c:
df:ef:0b:9c:b3:ba:42:34:30:e6:59:22:a9:58:e3:1f:e2:81:
a0:d9:c4:66:a8:5d:a9:89:08:0a:7f:b2:34:f0:18:de:15:93:
d3:fd:f4:fe:17:45:5d:f7:a2:f8:f7:99:1e:ec:a6:19:f5:f4:
c2:4d:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:34 2025 by rpki-client