Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: DSLXSE21DXj3te6X+lsZ7p/nnFT/DBbGyhVTldNTg88=
Subject key identifier: 19:4D:C5:7C:B5:E8:DF:51:EB:7B:9A:A4:32:C9:9D:9F:EB:FA:6A:61
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01984B542980C7EB5485E62D8367595B0DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0D8E
Signing time: Sun 27 Jul 2025 10:01:03 +0000
Manifest this update: Sun 27 Jul 2025 10:01:03 +0000
Manifest next update: Mon 28 Jul 2025 10:01:03 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: +Z/A70vCIDTA90sjTym4gK5uqIQK4g8OMoBQ8988XjI=)
2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:29:80:c7:eb:54:85:e6:2d:83:67:59:5b:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Jul 27 10:01:03 2025 GMT
Not After : Jul 28 10:01:03 2025 GMT
Subject: CN=194dc57cb5e8df51eb7b9aa432c99d9febfa6a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:53:ec:95:fe:dc:10:56:65:2f:c1:73:3b:
30:e5:23:f8:73:b2:7f:6f:df:d6:32:40:9a:bd:b1:
28:0a:ff:28:f0:e5:9f:2a:76:29:48:f8:32:1b:64:
2e:c0:ba:52:99:fb:0b:79:f6:aa:92:02:05:9b:b1:
9b:b5:dd:f8:80:62:d9:54:96:45:83:57:1a:23:72:
f9:0b:66:50:a3:dc:a5:13:28:cc:33:08:46:ab:c9:
0d:22:e3:9b:db:18:01:03:39:79:8b:6c:4e:bd:8b:
15:c3:a5:dd:c4:77:0f:b2:f8:99:fa:0c:7e:b8:d8:
00:0a:3f:e0:ad:4e:7f:ae:de:5e:f2:f9:89:9c:16:
bc:b7:12:c3:4b:8d:b9:c2:b7:ac:f5:88:2a:cc:d0:
90:5e:46:33:61:80:85:80:9b:bb:7b:42:b2:d4:e0:
ad:fe:3c:19:cd:53:38:2d:de:e8:20:64:9a:d7:4a:
1e:26:af:9c:5b:a1:82:c1:8f:cc:bc:1c:32:3e:e2:
30:f6:29:a1:4c:ab:c0:77:96:e7:01:44:f0:f5:03:
e7:06:7a:e0:eb:b0:1c:15:66:6e:44:d2:c5:e2:46:
b8:c6:cd:14:de:79:72:1a:5d:3b:59:3f:f5:4e:30:
ff:f5:6c:76:d9:b2:fb:8e:32:19:b5:bb:cb:31:7f:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4D:C5:7C:B5:E8:DF:51:EB:7B:9A:A4:32:C9:9D:9F:EB:FA:6A:61
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:e7:9b:e2:8e:66:bb:02:ae:39:c7:35:c2:6d:49:f9:32:
85:27:cb:c7:83:12:c6:19:3e:65:4a:36:9f:85:88:48:15:5c:
eb:b0:b4:d0:bb:44:f4:47:9b:d6:99:77:15:42:2b:45:ec:72:
21:1d:ac:30:e0:87:b2:b0:89:43:f7:e1:e8:c3:5b:59:f4:62:
a3:ea:76:11:91:7e:04:94:9c:26:d3:73:a2:71:c4:48:04:79:
74:0b:dc:2a:60:53:38:ed:e1:73:d0:0f:41:86:d0:68:12:77:
1c:bb:56:84:fc:b3:40:4c:a1:fa:b7:9e:7e:20:30:64:af:33:
62:0b:00:03:77:a0:73:b2:50:03:bf:b1:0e:6b:db:b1:df:25:
91:46:0d:a9:2c:3c:fc:e0:80:c6:72:7d:85:ed:25:80:32:54:
74:4c:51:d6:d1:32:9b:b1:20:0c:44:11:4a:d8:28:01:ff:51:
d2:14:db:32:0a:d9:39:42:98:cc:01:47:ac:12:ec:0f:7e:3a:
c2:15:eb:63:97:53:3f:fb:8d:73:ee:2b:5c:24:a2:87:68:28:
54:5f:34:5a:66:b1:7b:ad:68:41:26:79:a5:40:24:5d:bc:46:
40:3f:ce:f8:bc:89:4f:7d:73:e5:91:c0:ab:22:a9:25:84:02:
bf:3b:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:52 2025 by rpki-client