Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: QbRLsFvev2J4a871zPfR3BOGTmusxNa6Tz3jWUkTkqE=
Subject key identifier: FB:15:32:AE:50:A7:E1:16:B6:D3:8E:BE:9E:03:A1:73:4B:24:0F:31
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 01976C2B0A93297CAA622142083F82BF8FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 02:00:49 +0000
Manifest this update: Sat 14 Jun 2025 02:00:49 +0000
Manifest next update: Sun 15 Jun 2025 02:00:49 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: 3k+KyNtr6+0o56b5R7GhC0pCkNJKaiXlPkWn7e7+B3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:0a:93:29:7c:aa:62:21:42:08:3f:82:bf:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jun 14 02:00:49 2025 GMT
Not After : Jun 15 02:00:49 2025 GMT
Subject: CN=fb1532ae50a7e116b6d38ebe9e03a1734b240f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:8e:53:ca:a9:ea:61:33:07:c9:f0:fe:ef:
76:ac:6a:84:1f:c0:23:2d:43:5f:73:59:34:50:92:
5e:cc:c7:75:47:df:98:c1:25:10:9b:59:61:4c:b1:
93:f4:8e:7b:bd:5e:2a:f0:22:93:e0:39:56:73:81:
35:a3:f8:ba:0c:bc:a7:9d:e9:97:0e:3a:ac:93:7a:
b2:2c:2a:ff:50:d4:bb:37:aa:8e:c9:2f:69:be:96:
65:e8:e0:f0:d8:17:a6:86:bd:06:57:f4:c4:cf:ff:
df:bf:bb:c7:b2:e5:e0:55:a2:12:34:db:f6:87:51:
ee:90:02:8e:93:84:34:20:b4:83:b7:16:ef:d8:b7:
83:81:c4:05:1a:18:4b:56:bb:ca:34:d3:96:60:87:
4e:9a:11:de:84:7d:0b:b8:e1:f4:e4:03:63:a7:11:
4b:cb:98:f3:53:a6:53:b9:ac:ff:5e:ca:af:c4:9c:
27:5c:67:c5:44:fe:f2:44:47:d9:8b:4d:8d:1b:9a:
01:0b:0a:f3:28:ed:7f:09:00:ae:68:7a:bd:59:11:
13:c1:c2:03:38:41:ad:ec:5f:66:f1:d4:35:c6:80:
78:29:28:25:fb:b2:88:d8:c2:1c:19:ce:53:42:bd:
14:f8:b9:4f:de:c3:48:82:40:e7:9e:f2:a0:0d:43:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:32:AE:50:A7:E1:16:B6:D3:8E:BE:9E:03:A1:73:4B:24:0F:31
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:50:b2:0d:45:3d:b0:07:55:47:22:3c:6b:19:72:ce:72:d0:
f8:26:01:04:75:0b:3d:d5:04:49:ae:48:44:ed:7d:14:77:33:
ac:e7:d7:de:73:64:51:69:86:56:33:18:bb:b1:05:2e:62:fd:
eb:c9:aa:d5:ee:8f:0c:7f:a4:52:9a:b5:f6:ab:86:42:f8:27:
ce:86:7c:36:45:4b:89:89:88:11:0c:39:4b:3e:3b:0d:95:c4:
42:64:dd:a7:d7:db:22:ff:3f:12:78:9a:78:3f:ab:e0:5b:08:
a5:55:0f:44:93:a4:11:b6:64:16:2f:95:9d:35:26:bf:48:c4:
da:50:6e:5c:80:c6:af:97:cf:4c:77:f9:27:8f:c5:93:0e:7a:
7e:64:23:9d:e6:6c:36:58:08:f2:b9:d3:ca:26:d9:09:c6:02:
cb:b6:c8:06:0d:61:9c:aa:d9:1f:ff:53:0d:ef:fe:00:3c:55:
e1:1f:36:c1:d6:3b:5f:23:bb:f4:9f:ec:1e:88:aa:4d:fb:70:
85:b8:20:b7:a5:9c:3c:d7:4a:46:c5:d4:4c:1b:9b:7d:d6:2b:
d1:eb:00:4e:e1:b9:ce:6f:32:0c:35:b3:35:ff:bc:30:da:12:
1a:b3:30:54:ab:e0:cd:a6:8a:71:fa:8a:4c:98:51:ee:98:02:
ff:dc:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:13 2025 by rpki-client