Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: EGgSbNUbe+NIhdTWV2MtO27mPJFFZAQU7z0VUsPc1zA=
Subject key identifier: B5:31:93:18:3D:C9:01:9D:29:90:40:25:82:E6:86:D6:59:79:64:5D
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 01988E46C3B569745D40E614CD8B6BBE11BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1333
Signing time: Sat 09 Aug 2025 10:00:58 +0000
Manifest this update: Sat 09 Aug 2025 10:00:58 +0000
Manifest next update: Sun 10 Aug 2025 10:00:58 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: 6cUOXv/lfbiPmBRZsAlaGSS/3OLcW9PsvPEOkTwSM3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:c3:b5:69:74:5d:40:e6:14:cd:8b:6b:be:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Aug 9 10:00:58 2025 GMT
Not After : Aug 10 10:00:58 2025 GMT
Subject: CN=b53193183dc9019d2990402582e686d65979645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:05:81:ac:f8:16:ad:66:7c:72:57:c3:d7:e6:
8c:b7:73:b1:68:89:b4:fb:39:a2:a2:61:e2:d2:92:
c0:d7:f7:0f:3e:a8:fe:1f:dc:fe:18:f8:7b:a2:9e:
99:cb:eb:5e:5d:c8:70:b4:d8:c9:3f:0b:cf:01:f1:
7e:28:19:e1:93:18:dd:78:f5:ad:00:44:2e:18:2c:
75:05:7a:2d:16:06:e3:2e:82:a7:2b:ae:1e:5e:42:
58:a5:e5:69:4e:3f:82:d1:9f:54:fa:74:65:63:dd:
b6:13:2d:e1:2a:7d:a3:ac:c1:86:a3:8a:9d:ee:83:
55:53:a3:70:1c:4e:23:c6:ea:82:3b:2a:0e:3a:38:
bd:fd:6d:42:f6:b5:df:81:95:29:81:8d:63:a8:76:
cd:0b:ca:a4:69:36:74:c3:28:93:64:06:5d:61:cb:
0b:1d:34:44:d0:be:f7:e0:71:07:67:01:10:dc:08:
49:f1:36:6d:dc:bd:b9:4a:78:42:ff:5b:d4:08:65:
00:9e:cd:9d:e1:40:23:89:39:5d:ec:12:ac:4f:9a:
70:5a:7a:88:1b:65:03:51:5b:1a:61:de:7f:b6:b1:
f4:6a:fd:cf:3e:3e:53:5f:44:fc:ab:cc:15:42:e7:
a2:0e:16:08:a7:46:2f:e3:df:d4:03:4a:fe:a1:4b:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:93:18:3D:C9:01:9D:29:90:40:25:82:E6:86:D6:59:79:64:5D
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:3b:52:b4:d0:d6:e0:e6:63:57:ce:d9:26:32:72:c2:43:
27:25:19:1e:99:06:80:c6:fe:51:24:5b:8a:0b:83:64:94:4a:
1b:d6:f8:b7:d8:1d:ca:02:ab:04:78:a0:30:0b:60:68:86:ef:
dc:d3:00:e1:67:e0:ef:0f:60:15:7e:8b:b8:74:8f:ad:d5:0f:
c4:29:f1:7c:81:2d:2a:f4:ab:e8:cb:b0:ad:a2:e5:e3:24:f8:
6f:e9:00:8f:44:3b:2d:1c:d2:f3:93:51:d6:7e:4a:a3:8e:74:
cf:38:92:19:80:d7:1e:94:37:36:68:14:09:e9:bc:c3:63:a0:
c2:b6:33:f1:12:f1:19:84:de:8d:58:ac:6b:f8:18:97:c3:9d:
de:69:79:2f:78:34:3f:cc:5c:32:3d:ba:63:3c:cd:ac:fd:ee:
45:2f:4d:68:c7:16:20:41:28:0e:97:1b:4d:3a:7b:11:96:7d:
65:c4:38:68:23:3c:ed:9c:95:45:a7:0a:3d:1d:0d:5e:8a:28:
a6:d4:1a:69:85:7d:04:ad:a8:94:06:12:ba:31:c3:0a:bf:38:
55:b5:d9:d5:d4:ab:74:58:1a:1b:6e:4c:3d:49:88:18:2d:c5:
af:96:53:7b:5d:19:c6:3d:2d:27:1c:3f:aa:e0:9f:d5:91:d1:
c0:f5:fd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORsO1aXRdQOYUzYtrvhG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTA2MDM1YjMyY2MzM2FmMDU4OWM1NWJlODQ5Nzc1ZTky
YzQ2OTMwHhcNMjUwODA5MTAwMDU4WhcNMjUwODEwMTAwMDU4WjAzMTEwLwYDVQQD
EyhiNTMxOTMxODNkYzkwMTlkMjk5MDQwMjU4MmU2ODZkNjU5Nzk2NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gWBrPgWrWZ8clfD1+aMt3OxaIm0
+zmiomHi0pLA1/cPPqj+H9z+GPh7op6Zy+teXchwtNjJPwvPAfF+KBnhkxjdePWt
AEQuGCx1BXotFgbjLoKnK64eXkJYpeVpTj+C0Z9U+nRlY922Ey3hKn2jrMGGo4qd
7oNVU6NwHE4jxuqCOyoOOji9/W1C9rXfgZUpgY1jqHbNC8qkaTZ0wyiTZAZdYcsL
HTRE0L734HEHZwEQ3AhJ8TZt3L25SnhC/1vUCGUAns2d4UAjiTld7BKsT5pwWnqI
G2UDUVsaYd5/trH0av3PPj5TX0T8q8wVQueiDhYIp0Yv49/UA0r+oUttqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUxkxg9yQGdKZBAJYLmhtZZeWRdMB8GA1UdIwQY
MBaAFCFQYDWzLMM68FicVb6El3XpLEaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUt
MGM3YTg3MTk2YzM1LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUtMGM3YTg3MTk2YzM1
LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnY7UrTQ
1uDmY1fO2SYycsJDJyUZHpkGgMb+USRbiguDZJRKG9b4t9gdygKrBHigMAtgaIbv
3NMA4Wfg7w9gFX6LuHSPrdUPxCnxfIEtKvSr6MuwraLl4yT4b+kAj0Q7LRzS85NR
1n5Ko450zziSGYDXHpQ3NmgUCem8w2OgwrYz8RLxGYTejVisa/gYl8Od3ml5L3g0
P8xcMj26YzzNrP3uRS9NaMcWIEEoDpcbTTp7EZZ9ZcQ4aCM87ZyVRacKPR0NXooo
ptQaaYV9BK2olAYSujHDCr84VbXZ1dSrdFgaG25MPUmIGC3Fr5ZTe10Zxj0tJxw/
quCf1ZHRwPX9fg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:12 2025 by rpki-client