Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: qiITF2KAwN31EXdz0yB0Nf1ExyYrdtqBqcl3Eqwaubg=
Subject key identifier: 6C:D2:99:B1:87:D4:C9:05:C7:5A:E2:E5:2A:E3:68:C8:45:FF:C3:54
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019A4DE1F691685AED8C027A3BDFCF846B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0D88
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: P+pN0Mi+llqnW/oiQ6WMeQe30Zeg8ixGey/bmhG4MK4=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f6:91:68:5a:ed:8c:02:7a:3b:df:cf:84:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=6cd299b187d4c905c75ae2e52ae368c845ffc354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:45:90:12:2d:ba:4f:38:b7:c1:5f:1b:8e:
f2:b8:52:df:81:17:46:10:39:68:a6:04:26:14:03:
00:a6:36:fd:42:aa:0c:a6:5e:96:b5:c4:8a:6f:e1:
ff:dc:e3:4f:e3:ee:12:f1:bd:34:4f:0c:1d:b3:02:
8f:7b:e8:92:04:8d:40:c5:76:1e:81:fe:ff:89:d6:
68:3d:df:c1:d5:f2:b5:8c:32:51:82:1a:fd:21:43:
9d:4d:b0:da:69:be:52:b8:55:83:09:40:73:1c:53:
0d:89:c4:d5:ae:bf:da:97:12:d6:fe:0e:b8:cd:6c:
37:e7:cf:6c:59:c3:0b:b0:b2:62:92:1a:42:39:18:
0b:0c:e6:1f:f4:71:3c:3b:12:aa:c0:7e:15:d3:13:
cd:09:d6:04:76:0d:e1:d8:b7:e3:ce:54:2e:52:2c:
f3:92:1c:24:6d:47:65:cf:09:3e:21:9c:37:32:09:
d2:82:eb:1c:4f:7f:14:b0:a2:b3:36:f8:e0:df:c3:
f9:d8:e1:59:14:11:b2:b5:7c:b9:1a:24:77:a2:a9:
ec:f1:12:69:3f:b0:37:4e:59:a2:85:c3:04:f0:99:
77:a6:fa:d9:24:98:8d:42:e0:2a:39:77:5f:d3:1d:
3b:19:ab:24:ef:67:d0:e6:64:d5:2b:f2:f2:40:20:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:99:B1:87:D4:C9:05:C7:5A:E2:E5:2A:E3:68:C8:45:FF:C3:54
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:67:ac:66:24:ec:5a:d3:b6:9c:a8:ab:b6:40:8a:47:e4:
1f:f9:b9:9c:33:2a:ed:77:eb:13:4e:a5:eb:a4:a2:85:d1:89:
51:4c:53:6e:0e:4a:74:fc:d9:bf:94:ca:2c:2f:bc:cc:57:09:
c1:87:c3:3c:f4:a4:a1:da:60:07:3c:9b:39:cb:8c:86:23:1c:
4b:fb:55:07:09:d6:8f:0d:48:ce:e0:4c:64:4d:eb:86:04:a9:
2a:fc:bd:c2:68:1f:b0:cf:3d:63:b7:35:bf:92:a9:12:80:b5:
31:6b:95:fc:27:3e:15:06:f8:e6:e9:40:a6:90:97:66:0e:3f:
f7:7d:c7:04:18:11:80:b1:8b:06:93:83:35:27:07:1c:40:7e:
08:25:89:ac:80:2e:02:76:e9:05:30:64:76:29:a5:cd:fd:3e:
ef:c4:bf:4d:bc:06:18:56:83:40:93:7c:53:76:f4:fb:b6:ed:
9e:04:c3:99:1c:cb:9b:89:24:6c:67:62:a2:bb:68:82:21:57:
c1:52:a0:4f:a6:1c:99:6b:49:9f:dd:b9:57:b2:97:eb:ba:3e:
61:71:6f:e2:10:b9:04:7a:e4:dc:c6:94:e4:8c:ae:90:1a:0a:
2e:10:81:f2:bf:fb:40:1a:a4:ce:b3:54:77:f5:46:f9:c0:03:
f8:9c:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:03 2025 by rpki-client