Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: FOiBnVO8PrOecJydyIroWeHg7V3ckOPY1S8YpX7537U=
Subject key identifier: 50:82:F2:A2:BE:37:38:5D:1C:A1:0D:09:5F:35:72:F1:BD:DA:F0:C5
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 019A50E2B26D22F5E92DE5578AB65F2BF225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0B13
Signing time: Tue 04 Nov 2025 22:00:25 +0000
Manifest this update: Tue 04 Nov 2025 22:00:25 +0000
Manifest next update: Wed 05 Nov 2025 22:00:25 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: x32PncYzgqRGiMsM8t13FMn1GbHZT1BfpCwInIRs7NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:b2:6d:22:f5:e9:2d:e5:57:8a:b6:5f:2b:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Nov 4 22:00:25 2025 GMT
Not After : Nov 5 22:00:25 2025 GMT
Subject: CN=5082f2a2be37385d1ca10d095f3572f1bddaf0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:39:1a:cc:49:3a:18:ae:0d:22:89:da:33:
a5:e5:64:a9:75:0f:b1:83:e8:f6:42:3f:19:24:ac:
41:95:a3:f1:92:37:a4:68:b3:db:8a:bc:6d:4a:f8:
63:40:31:e9:6f:bd:21:ec:4b:85:da:c3:4c:99:c8:
ce:dc:0c:0b:92:2d:cc:eb:4e:1f:c9:92:a3:39:ba:
eb:3d:99:ab:cb:ed:6c:ad:3e:0e:fd:a0:80:41:e9:
06:2e:a0:a5:92:7c:2e:a5:8a:64:6b:f1:25:c1:3a:
16:09:ed:01:de:b1:84:a6:51:9f:1f:7e:6c:7f:c8:
d2:55:23:95:5a:a3:e5:cc:16:d2:1c:23:91:e0:89:
ae:93:6f:6a:89:f6:26:55:30:05:73:6d:d6:cf:de:
22:0b:a4:75:57:d4:b2:76:26:ff:3c:ac:8e:66:9c:
8b:dd:52:4f:39:d1:29:ec:ce:bf:ff:0e:a2:a5:18:
c3:33:32:43:ba:63:8f:f0:8b:59:6f:fa:6b:5d:98:
ef:5a:c6:0d:89:c2:84:a6:20:ee:8e:21:d0:6b:68:
1a:d5:7b:e2:f0:16:db:89:37:eb:1c:f0:6f:c3:c1:
1b:28:29:c5:e2:f9:cb:fe:44:35:d3:66:f2:80:99:
65:58:ad:cf:1d:83:00:3a:06:b3:75:f3:b6:43:ca:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:F2:A2:BE:37:38:5D:1C:A1:0D:09:5F:35:72:F1:BD:DA:F0:C5
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:90:40:32:af:f6:54:f7:e4:7f:51:e7:ed:96:b7:d9:d9:
2f:86:56:b7:79:4b:3a:a2:1b:3f:7e:d1:2e:24:78:45:cc:38:
92:4a:61:00:79:60:2e:52:a7:94:7b:86:99:d8:e1:2f:23:ae:
35:30:b0:5d:c4:50:cb:e0:95:ae:28:f1:8e:cf:5f:5e:0f:ee:
af:85:62:93:99:ab:22:cf:90:41:70:8b:b3:4e:5a:f7:87:f1:
46:f5:71:18:b7:91:47:62:f4:4e:ff:0f:26:51:26:d0:65:04:
fc:9b:31:0c:ba:73:9b:0b:0d:62:f3:64:82:61:62:7d:03:52:
60:60:37:18:1b:42:36:3d:6d:02:77:c1:ca:8a:55:5d:e0:26:
a5:1a:9f:8e:be:d1:c6:7a:29:da:f5:e8:e0:09:21:0d:c5:32:
7a:77:05:22:c5:18:62:c5:a2:fa:29:e3:bb:5e:01:8e:3a:d4:
bf:38:3c:79:f9:a1:6f:20:67:eb:95:24:dc:f8:76:63:38:81:
5f:19:06:e1:ae:10:25:8e:5b:b8:94:c2:33:ca:98:85:f3:50:
63:2f:91:dd:49:09:80:77:8d:03:7e:05:38:70:01:32:e1:57:
85:b3:54:2d:3d:4c:05:4e:6e:bc:86:fd:dd:e3:f8:ad:3f:87:
76:cd:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:42 2025 by rpki-client