Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: sLpDkY8VQPK7OZ/bHpLw5XiuSZxeB6lIUl6SYp3Vs8o=
Subject key identifier: 9A:0B:71:D5:A5:10:98:83:07:99:2F:DE:ED:6B:45:7F:9D:85:12:80
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01984AE585EDF40DD572DE47F457367AFC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:12 +0000
Manifest this update: Sun 27 Jul 2025 08:00:12 +0000
Manifest next update: Mon 28 Jul 2025 08:00:12 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: ZqK/YK9kQrZna2eA+RjzpA1EKYKmr+KcbaUNYJ3t0Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:85:ed:f4:0d:d5:72:de:47:f4:57:36:7a:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jul 27 08:00:12 2025 GMT
Not After : Jul 28 08:00:12 2025 GMT
Subject: CN=9a0b71d5a510988307992fdeed6b457f9d851280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:27:95:ce:ef:f8:0a:65:87:11:e9:86:1a:
50:c7:02:51:71:ea:73:2a:6d:62:0a:2a:33:92:a0:
05:7b:d9:75:81:63:95:a1:c3:9b:21:8c:ff:7d:7f:
fa:9e:86:e6:9c:ef:33:a7:4f:ea:fa:7f:57:5d:61:
7d:5d:30:aa:a2:43:50:82:16:00:4c:d5:36:de:e4:
b8:50:bd:f4:a5:98:4e:d4:d3:36:ac:24:d6:72:ca:
87:7f:15:cb:b9:61:67:77:e0:72:e8:7b:38:03:52:
3b:f1:7a:4e:87:13:07:55:e1:3c:97:30:fc:ef:87:
3a:da:58:57:42:64:5e:91:9e:08:d2:e8:2a:2b:84:
13:78:48:39:a1:83:c6:b8:b9:36:97:9d:82:ae:c8:
5e:82:cd:92:02:69:ee:49:b2:c7:3b:a7:19:92:5f:
e1:63:68:ef:d3:d3:bf:ed:66:1d:82:f4:35:eb:e1:
32:78:ee:dc:8e:79:dc:57:9d:9d:09:12:18:82:94:
cb:7d:3c:a3:44:50:f1:bb:5b:5f:95:86:95:a3:1e:
cb:d7:f0:1f:77:98:64:00:3e:92:01:a0:cc:eb:a6:
97:3a:f6:00:2d:f4:20:ff:bc:7e:67:fe:2e:93:26:
55:1c:a9:36:21:a9:3c:6c:a3:9b:69:71:68:ce:cc:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:71:D5:A5:10:98:83:07:99:2F:DE:ED:6B:45:7F:9D:85:12:80
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:cd:09:b0:30:3c:86:2d:4f:98:d1:66:9f:e1:43:83:0c:
0c:71:53:3d:ab:13:cf:63:4e:be:42:f9:73:83:70:bf:c7:3e:
a0:90:04:2c:df:87:a3:45:0c:89:9b:e0:af:63:14:72:9b:be:
50:e8:1e:2f:80:09:51:85:cb:a9:18:85:eb:7e:21:b4:52:76:
a7:83:23:0c:66:1b:dd:2d:dd:33:6f:a0:ec:4f:bf:1a:d9:6b:
89:1c:b7:86:89:ec:a3:42:ef:c6:b0:b2:54:1c:7a:0d:7d:bc:
7a:ff:ff:6d:b2:32:24:ab:c9:6a:f3:11:4b:b6:9c:48:6c:c3:
b3:0e:aa:38:0f:fe:38:14:3c:d9:78:52:a9:0f:72:f6:70:69:
1f:ac:7f:39:a8:79:99:54:88:68:d8:b2:67:cf:bf:8f:be:5b:
8f:8c:76:da:64:45:4e:5c:ff:e1:81:31:e8:66:8f:cf:40:a6:
96:6a:cf:ac:fc:cc:57:cd:54:a0:aa:f5:69:2e:ed:ac:d7:a8:
5b:8e:5e:7b:4b:87:9d:ce:08:47:4b:79:bf:26:df:a2:13:63:
60:7e:83:36:d8:02:a8:06:91:80:0f:45:e1:5b:4a:a2:b8:84:
3c:b3:09:fa:4a:47:75:86:21:ea:c5:ee:f6:22:45:e0:41:4d:
78:88:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:18 2025 by rpki-client