Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: zb/cDZJTluhI7G063bcEHF/JwcI9bovfCFZQOhYWHrw=
Subject key identifier: EF:BC:12:DC:23:A1:12:F7:95:4E:98:C0:FC:D8:85:EA:A7:07:97:00
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 019A4EF58858B9309F259175DCF6D0DB3BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: 27etQm7BjXk1Z2PHbM1p5Gj26VTHkha4uotb9070uVQ=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:88:58:b9:30:9f:25:91:75:dc:f6:d0:db:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=efbc12dc23a112f7954e98c0fcd885eaa7079700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:37:2a:91:15:78:8c:3e:6f:6c:84:63:4e:
08:c4:18:e8:e5:65:43:75:38:61:f8:c1:8b:83:3a:
82:65:e0:b2:5f:78:ae:95:fb:eb:5d:0b:65:fa:a3:
e5:60:6a:ac:f4:47:15:4e:56:a5:ad:01:df:a8:a1:
94:14:bb:f0:d8:07:88:17:2e:63:38:a4:14:83:34:
5d:83:5f:b5:19:23:77:d5:d5:4c:ec:40:c2:ee:e4:
77:15:9e:41:26:d9:41:ec:34:31:d1:09:b5:44:63:
3e:37:44:54:0e:76:27:10:61:be:ad:f3:49:1d:40:
10:34:0a:60:11:a3:8e:59:95:d4:05:bc:3e:dd:e3:
ad:81:09:27:19:d1:45:f4:6f:b0:bf:44:ef:04:fa:
51:f0:81:eb:35:08:b8:d0:ed:0c:24:a2:cb:a4:44:
40:2e:df:2f:04:39:a2:3a:e1:f4:91:9f:e9:ba:b0:
86:07:b2:9a:4a:d3:ba:8f:b5:25:af:01:1b:19:cf:
e4:23:13:76:95:92:ac:76:2f:5e:c4:47:31:ad:d3:
96:71:72:f5:cb:da:94:2c:59:a4:4e:72:ea:3d:9c:
56:a4:db:4c:15:06:4e:69:d4:5b:48:52:36:9e:f5:
f2:80:a3:c9:e2:14:22:81:e8:0e:99:97:e4:92:b5:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:12:DC:23:A1:12:F7:95:4E:98:C0:FC:D8:85:EA:A7:07:97:00
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:45:07:9b:ed:6f:83:aa:fe:07:af:11:e1:53:3d:33:69:
86:37:ce:74:5a:07:3c:4a:b5:52:01:d5:32:77:eb:f9:4e:03:
a7:e8:d5:b8:6e:37:c2:d4:69:c8:b1:28:c7:9f:65:3e:c8:e7:
9b:a3:42:31:6f:7f:b1:e5:c5:e4:0c:e5:fd:c8:c7:54:e4:0c:
1c:68:7c:ac:e9:a0:62:f3:7a:f9:b5:ae:08:a4:86:19:58:7f:
d4:e4:4c:40:d3:2b:6d:e8:fc:11:eb:60:6b:23:22:0d:da:ed:
d3:f5:7e:8a:9b:4b:49:fd:09:7c:d6:36:d0:27:05:18:b7:69:
f7:17:9c:1b:85:52:24:32:54:bc:bc:69:1c:be:0e:7a:74:2d:
58:5f:0e:f1:7e:64:31:4a:3b:d9:57:35:7a:9c:93:68:5f:9b:
46:17:78:59:4e:d3:81:67:d4:a7:77:e2:82:7a:2b:ad:64:fd:
a9:32:bd:fa:8d:52:bd:5e:5e:ba:3d:d7:bf:74:38:57:2e:2d:
d1:d0:b5:54:72:49:ea:53:3a:8a:7a:25:74:61:2b:71:64:8f:
3c:53:06:9f:14:cb:e8:68:92:74:1c:ea:f7:d2:ff:36:23:11:
ff:95:c4:83:f4:0a:c7:0a:d0:21:d7:81:90:8a:5d:bb:02:91:
25:3f:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:48 2025 by rpki-client