Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: UGWvjWtcj1zcnMS/S9Gg+k4q8PnVe8bGRlFMGZI1yYY=
Subject key identifier: 84:0B:11:31:26:35:8B:5F:C6:22:23:EC:2A:7A:5B:48:9D:C5:E3:B5
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 019849656A8A6F11009B4B3D1CFCC11AF550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 04EE
Signing time: Sun 27 Jul 2025 01:00:39 +0000
Manifest this update: Sun 27 Jul 2025 01:00:39 +0000
Manifest next update: Mon 28 Jul 2025 01:00:39 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: YzstAU5RFnVMHdhCzJnrKZ1mz9kSTCo7XrxW3AvvHes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6a:8a:6f:11:00:9b:4b:3d:1c:fc:c1:1a:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Jul 27 01:00:39 2025 GMT
Not After : Jul 28 01:00:39 2025 GMT
Subject: CN=840b113126358b5fc62223ec2a7a5b489dc5e3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:8a:0f:4b:91:cb:67:6e:1d:3d:9d:7d:7b:
96:7b:99:f4:55:ed:e5:5b:b9:7e:89:ca:b0:5d:aa:
ca:3d:b7:20:2b:54:d4:b6:14:34:87:ca:30:17:e1:
90:90:b9:49:38:01:dc:f9:67:72:f3:d5:01:ca:dd:
7a:b4:40:d9:a0:82:c7:62:4a:6a:18:25:a0:40:af:
e9:14:d3:3e:a9:15:f4:bd:39:8e:07:90:fe:9a:61:
3a:45:ad:71:7e:88:c8:68:a5:c3:97:d2:c9:6c:c1:
81:bd:a1:86:ed:ab:6a:d3:49:04:9a:f8:bf:27:92:
1e:56:73:5c:d5:b4:90:af:df:31:46:60:fd:66:4a:
89:5c:a2:5d:b5:38:bd:4c:e2:af:37:8f:ef:5d:42:
74:19:70:d0:83:a5:f1:a8:63:bc:1b:83:5f:75:de:
de:bc:7d:7a:f0:62:59:c2:5a:67:64:c6:0b:bc:25:
20:0f:c5:de:34:9a:0f:2a:b0:da:3e:64:15:31:d5:
4b:c4:7c:12:40:92:3b:95:8e:32:13:fb:29:f9:37:
b2:09:16:86:b1:de:eb:98:fe:7a:6a:81:d4:8c:a8:
d5:b8:6a:76:21:68:8a:79:ce:4b:a9:90:08:47:3c:
e9:86:21:ac:1d:97:a3:c6:0d:01:c7:b1:a0:e7:94:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:11:31:26:35:8B:5F:C6:22:23:EC:2A:7A:5B:48:9D:C5:E3:B5
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:ee:56:bf:25:bb:7a:d6:66:46:20:93:ef:e2:db:02:ce:
c9:80:93:c8:3a:ee:a2:c4:b8:a4:74:d0:77:37:14:60:7a:3b:
49:58:66:98:d8:ed:4a:1e:6a:3b:cf:9a:2d:e7:8d:0c:ba:70:
6e:62:78:fc:51:94:eb:79:d7:9b:b8:0c:6c:62:4a:26:54:73:
50:14:f1:32:3d:c5:7e:ad:11:76:9b:5c:7a:00:30:81:3e:ec:
97:83:07:d3:74:13:24:51:78:6a:77:85:fe:61:d0:b9:28:15:
82:bf:48:e9:91:59:eb:a5:a5:fc:58:d3:2c:67:71:ed:46:2d:
6c:32:0a:7b:4e:56:a3:01:03:ae:db:ca:73:20:29:df:ad:c9:
82:40:66:de:ae:bd:cc:84:71:11:b8:4e:c7:e2:23:70:b2:62:
6a:e8:33:20:93:41:8f:28:ad:e4:37:35:86:c4:5f:af:1a:75:
07:bf:01:83:ff:cf:59:65:16:f2:63:0f:eb:aa:d8:ac:a5:46:
18:4f:8a:4e:ef:89:27:b2:60:8b:3e:75:0d:7a:4d:ce:67:44:
5d:b6:b1:89:2b:ec:e7:de:1e:cc:16:63:4d:d1:0e:62:54:ff:
93:61:b8:86:2f:9d:be:7e:8d:0f:1d:36:ea:40:d2:a8:09:fd:
67:a4:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:55 2025 by rpki-client