Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: D7JO7i//A4ZhQtMcma2AV8+p46lpFJa0yIRpttDEKpg=
Subject key identifier: 0D:7F:3C:DB:95:79:4F:92:52:D3:7B:AD:0E:0E:2F:1D:12:3B:7E:8F
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 01988B0FE816AA54EEDB6B9C5B9E50628119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 19:02:12 +0000
Manifest this update: Fri 08 Aug 2025 19:02:12 +0000
Manifest next update: Sat 09 Aug 2025 19:02:12 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: zlHD0ljI2lvE8rOrkoSoUK1xLSawz2cllPgsc/+77r0=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:e8:16:aa:54:ee:db:6b:9c:5b:9e:50:62:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Aug 8 19:02:12 2025 GMT
Not After : Aug 9 19:02:12 2025 GMT
Subject: CN=0d7f3cdb95794f9252d37bad0e0e2f1d123b7e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:76:75:64:15:78:17:4d:9d:af:7b:86:f3:
9e:ec:9a:b1:fa:75:3d:17:51:37:a1:f5:33:1d:2c:
53:d7:b9:7a:e6:83:bf:a5:8f:b6:86:24:5b:c3:92:
f3:ac:25:95:ea:45:0a:e1:b7:0b:64:03:be:6e:2a:
0f:f6:cf:84:14:22:dd:83:5b:e5:90:53:05:de:17:
2f:93:76:0e:4a:90:00:ff:0c:b8:f8:d4:14:9c:54:
2b:83:90:f6:d5:60:59:66:23:6f:0a:ae:61:c9:d6:
c6:0b:a4:cc:e3:8e:28:d2:cb:d0:e9:d9:66:b9:c5:
23:8c:3d:fa:51:c6:ed:dc:ab:46:a7:88:10:28:2d:
2b:04:f1:9f:44:5f:3a:ce:9a:75:d4:92:8b:41:d5:
a6:59:c5:5e:52:e1:8a:26:02:db:78:b8:ed:af:79:
c2:0a:32:71:61:de:0d:88:34:ab:6c:e5:67:14:48:
ad:99:4b:b5:43:a7:55:48:35:02:5e:39:75:5b:2f:
10:88:2e:22:7e:62:d4:0d:75:74:b0:b8:08:95:39:
9b:08:43:4b:4d:f0:64:79:42:25:52:b7:74:2f:87:
b9:38:b3:b7:ec:1a:7b:cd:ce:14:81:94:5c:b2:c6:
d7:e7:d0:3b:47:af:af:be:63:c0:8f:41:c0:a2:01:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:3C:DB:95:79:4F:92:52:D3:7B:AD:0E:0E:2F:1D:12:3B:7E:8F
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:e4:64:a0:54:bd:19:ff:b0:a9:84:6f:97:9d:4e:47:43:
f3:3a:3f:0f:3c:db:3d:99:4a:a0:30:a4:64:6f:f4:50:30:a3:
f6:8e:21:60:9b:6f:09:07:f6:ad:3b:d6:de:39:b5:52:63:9e:
3b:3a:18:7e:a4:03:fa:c6:1b:0e:8d:49:07:16:f8:a4:da:2f:
5b:b5:58:55:8b:9c:3e:7c:11:ac:97:7f:ab:20:cc:2b:e6:6c:
6c:97:c1:79:f6:05:17:4d:9a:54:69:9c:42:88:48:7c:cc:b5:
4d:34:68:98:60:6b:7c:1a:06:d8:7e:de:1d:68:c4:7b:2c:b1:
2c:c2:a8:07:7f:4b:be:4a:ce:cc:7a:c2:6e:3e:f0:53:25:a5:
ce:a7:c0:28:8c:69:03:23:dd:08:84:3a:a8:7b:f4:3e:09:66:
2e:41:32:fb:2a:8e:9b:80:eb:18:bc:d0:94:49:b4:5a:12:db:
4d:69:68:b0:5b:94:1f:04:97:72:9f:bb:a0:f2:bd:2b:2c:aa:
03:d0:35:f5:50:5a:79:34:5b:2f:f5:41:0a:da:57:88:82:20:
4e:fe:e0:c4:23:dc:bf:9e:88:b9:74:d0:6f:01:35:cf:44:1f:
38:2c:61:19:a0:32:88:39:32:16:8f:d2:52:b3:92:23:3b:83:
a2:8d:63:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD+gWqlTu22ucW55QYoEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjUwODA4MTkwMjEyWhcNMjUwODA5MTkwMjEyWjAzMTEwLwYDVQQD
EygwZDdmM2NkYjk1Nzk0ZjkyNTJkMzdiYWQwZTBlMmYxZDEyM2I3ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKp2dWQVeBdNna97hvOe7Jqx+nU9
F1E3ofUzHSxT17l65oO/pY+2hiRbw5LzrCWV6kUK4bcLZAO+bioP9s+EFCLdg1vl
kFMF3hcvk3YOSpAA/wy4+NQUnFQrg5D21WBZZiNvCq5hydbGC6TM444o0svQ6dlm
ucUjjD36Ucbt3KtGp4gQKC0rBPGfRF86zpp11JKLQdWmWcVeUuGKJgLbeLjtr3nC
CjJxYd4NiDSrbOVnFEitmUu1Q6dVSDUCXjl1Wy8QiC4ifmLUDXV0sLgIlTmbCENL
TfBkeUIlUrd0L4e5OLO37Bp7zc4UgZRcssbX59A7R6+vvmPAj0HAogFKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1/PNuVeU+SUtN7rQ4OLx0SO36PMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaXkZKBU
vRn/sKmEb5edTkdD8zo/DzzbPZlKoDCkZG/0UDCj9o4hYJtvCQf2rTvW3jm1UmOe
OzoYfqQD+sYbDo1JBxb4pNovW7VYVYucPnwRrJd/qyDMK+ZsbJfBefYFF02aVGmc
QohIfMy1TTRomGBrfBoG2H7eHWjEeyyxLMKoB39LvkrOzHrCbj7wUyWlzqfAKIxp
AyPdCIQ6qHv0PglmLkEy+yqOm4DrGLzQlEm0WhLbTWlosFuUHwSXcp+7oPK9Kyyq
A9A19VBaeTRbL/VBCtpXiIIgTv7gxCPcv56IuXTQbwE1z0QfOCxhGaAyiDkyFo/S
UrOSIzuDoo1jrg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:24 2025 by rpki-client