Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: o62jL5vfEC+ruu+3kBw0VHjLpOfS6Uj1xzWx5Mg/RRU=
Subject key identifier: ED:C0:E0:9B:81:BA:9C:ED:26:D3:C2:04:43:13:FF:24:AA:05:E9:9C
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 01987D1C3FFDDA632B72B9F39A71C379E64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 10C9
Signing time: Wed 06 Aug 2025 02:00:59 +0000
Manifest this update: Wed 06 Aug 2025 02:00:59 +0000
Manifest next update: Thu 07 Aug 2025 02:00:59 +0000
Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: BgIs1hqX2OiVi3xKpgYEIO+dTjrtsd33tbaEUH0e37E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:3f:fd:da:63:2b:72:b9:f3:9a:71:c3:79:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Aug 6 02:00:59 2025 GMT
Not After : Aug 7 02:00:59 2025 GMT
Subject: CN=edc0e09b81ba9ced26d3c2044313ff24aa05e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:ee:4e:45:0a:f4:f2:75:42:c4:8f:37:27:
a5:56:7d:6d:4b:d8:fa:e9:cb:e4:60:cc:ce:3e:04:
e5:94:cd:f1:69:64:8a:e3:87:5b:90:d1:a3:13:0e:
61:6e:21:f7:ba:54:1d:40:29:47:5a:c2:b8:e3:d9:
94:39:11:b8:e4:58:d3:89:2f:e7:19:30:10:65:5b:
0d:29:e8:ee:c7:e6:f1:e6:a6:ad:e0:3b:f6:76:4c:
06:10:83:2e:34:e2:ed:bd:eb:86:07:0a:93:64:66:
0b:1f:c1:b6:39:db:ad:1d:07:fe:c9:c1:4b:91:2f:
c9:eb:73:e1:63:58:50:ef:bf:9a:b1:05:9b:f3:30:
ea:af:a9:96:82:19:b9:a3:74:68:c5:14:24:69:67:
cd:0c:1d:94:50:a5:92:d3:68:23:a0:54:e2:ad:f1:
67:bc:e3:a4:e4:b6:e6:bb:a7:93:56:22:62:49:ce:
ab:92:69:6b:7c:f0:6e:91:f0:de:6a:23:98:ff:3c:
09:0e:b0:ba:ff:07:95:df:4a:2a:bc:e3:66:1e:8e:
e6:ad:b0:e6:f4:92:e3:92:38:79:65:9d:da:ec:d0:
0d:76:f2:ff:d0:9e:69:2b:37:bf:3b:f8:d8:b9:2b:
57:5f:ee:69:81:ff:e9:8e:8b:65:4a:95:6c:ad:d9:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:E0:9B:81:BA:9C:ED:26:D3:C2:04:43:13:FF:24:AA:05:E9:9C
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6e:5f:6f:d1:29:b7:ca:84:87:bc:c6:8c:6f:76:61:f7:34:
8d:2b:b0:20:45:bd:c0:5a:f1:4d:ee:61:72:61:d0:80:72:36:
8a:65:17:56:4e:12:04:29:4a:cd:ef:ab:24:e1:71:75:ad:e7:
2b:b1:64:7b:66:61:81:be:f8:88:b3:32:34:a1:75:8f:6a:aa:
86:f8:9a:d2:19:32:e4:ac:98:d3:d7:ca:12:75:89:0b:a7:5d:
59:c8:6b:cb:ad:60:0d:34:ab:26:83:6d:14:86:c0:69:7d:31:
cb:a5:d3:c6:0d:e4:5b:9c:53:6d:37:8f:8a:9b:84:99:de:93:
ae:16:4d:73:10:cc:de:7a:a9:a2:10:8c:df:3b:72:4b:ce:f5:
60:93:fc:70:16:5b:9f:46:08:9c:46:6c:2e:81:dd:4e:73:10:
60:86:a9:70:43:f4:c5:ff:34:63:87:15:5d:80:23:41:0e:32:
12:d7:01:aa:23:2a:fb:2b:a1:f3:54:86:09:f8:73:73:7d:db:
01:d3:b4:36:d5:4c:ad:b0:4e:38:9f:d1:78:40:92:ec:3a:ab:
2f:30:b9:b7:e6:9e:d5:a4:5b:43:4d:3f:7e:06:70:ab:06:75:
b8:4e:fd:d0:34:0f:43:c0:ee:20:c9:ec:aa:22:29:fc:fd:d4:
b4:6f:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:39 2025 by rpki-client