Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: jODAArjhpoxnLcB3c4gUgy+mFLFRoZdidat4cd/apJE=
Subject key identifier: 76:30:EB:FF:95:7F:08:25:A7:2D:53:9B:6A:F1:2F:74:12:8F:A1:33
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019874F4A3086CE80E29374AA426E4599904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0C93
Signing time: Mon 04 Aug 2025 12:00:46 +0000
Manifest this update: Mon 04 Aug 2025 12:00:46 +0000
Manifest next update: Tue 05 Aug 2025 12:00:46 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: znbgPvdp6wuOIKC9WYrU52GGlveyE/JdB637jVklnSw=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:a3:08:6c:e8:0e:29:37:4a:a4:26:e4:59:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Aug 4 12:00:46 2025 GMT
Not After : Aug 5 12:00:46 2025 GMT
Subject: CN=7630ebff957f0825a72d539b6af12f74128fa133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:8b:9b:af:61:37:b0:43:2e:9f:db:e1:b9:
a4:86:50:8a:39:b8:66:0d:ee:8f:8d:50:e7:87:dd:
58:93:b1:60:84:e6:d5:8f:33:7f:0f:e0:7b:bd:0f:
30:95:23:b7:2d:f4:24:20:fe:02:a3:be:05:7d:9a:
5a:0b:aa:53:d9:41:f6:80:01:1c:ef:f5:c1:9e:a0:
4e:35:7b:02:a8:a1:b4:55:dc:91:4c:f1:10:8c:a0:
01:08:0d:a8:f1:ba:b7:11:fe:2b:ad:1d:f9:0d:b6:
18:c4:c8:de:b1:d2:91:e7:77:4b:3c:42:3d:54:7a:
b8:07:36:ec:cf:b2:41:61:76:52:d7:d8:58:ba:d7:
55:00:94:ec:cb:9c:83:14:47:9e:22:1c:0a:a4:34:
99:b1:89:36:f4:23:c7:2d:c9:12:5a:5b:65:d9:04:
8b:e6:fd:c5:0e:2c:6d:fc:c4:64:95:8b:18:79:e3:
27:6f:7b:82:18:eb:08:16:34:02:69:5f:a0:d0:31:
7e:d4:1c:0d:31:d0:12:57:60:41:86:ef:f1:da:e5:
cd:98:97:7f:5e:6e:48:ce:8a:ad:24:0b:04:39:39:
90:f2:75:49:56:29:7f:ac:3b:82:10:76:e3:d1:d7:
83:1e:6e:67:89:06:55:f3:7b:e0:d0:02:e8:20:ac:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:EB:FF:95:7F:08:25:A7:2D:53:9B:6A:F1:2F:74:12:8F:A1:33
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:22:78:30:5f:6c:de:c6:68:c7:d0:cb:51:fa:91:ed:0b:27:
9f:66:b0:53:97:90:86:07:45:f3:5c:88:76:09:ed:aa:8c:a8:
16:d5:fc:02:64:dc:de:01:20:51:8b:2d:5d:bd:5a:38:28:ac:
80:20:6e:ac:4a:42:d2:c3:02:60:3d:20:18:c8:6d:aa:ab:66:
e6:b8:53:97:a2:a8:d9:06:2c:59:fa:04:d0:cc:85:64:af:12:
d5:54:dc:1b:f2:c8:8b:2d:52:b6:88:e9:c0:5f:92:11:4a:a4:
f9:6a:c6:16:29:2e:f4:e4:c5:9e:bf:90:d4:fd:2c:f8:12:54:
0e:da:29:15:8c:5b:da:80:88:78:45:40:d0:75:80:a0:87:40:
89:ef:51:55:d3:f8:16:5f:4e:80:31:54:c6:ca:7f:d3:1c:3b:
f9:fd:88:24:e3:a6:a5:49:ae:09:17:ed:ba:eb:41:02:ca:b7:
7a:81:73:d5:2a:5f:20:eb:32:ba:bf:a2:3f:9c:cb:34:23:10:
84:5f:0e:3d:7a:d7:b1:9a:e6:06:5b:98:73:13:f2:1b:72:be:
2a:26:9b:10:69:4e:51:22:2d:12:fd:f2:87:83:bf:28:2c:d9:
9e:98:a9:c9:08:33:c1:76:c9:65:da:11:2a:0e:8d:e2:06:be:
6f:ce:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:43 2025 by rpki-client