Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: 9WE0Msow4+CQ1mytrJswfYdnIbBps3oQQXBsnyelKuI=
Subject key identifier: 37:35:45:34:9C:B3:21:B0:43:20:90:67:B1:13:7E:B1:14:41:84:0E
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019847E535976DDE185F1C0B0B193FE4175D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:01:00 +0000
Manifest this update: Sat 26 Jul 2025 18:01:00 +0000
Manifest next update: Sun 27 Jul 2025 18:01:00 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: SN+N/LpenQM69rfamgMJ0KkkoOR8p5pNFq+rAO1rnGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:35:97:6d:de:18:5f:1c:0b:0b:19:3f:e4:17:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jul 26 18:01:00 2025 GMT
Not After : Jul 27 18:01:00 2025 GMT
Subject: CN=373545349cb321b043209067b1137eb11441840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:15:4a:65:e9:f4:13:93:b3:9b:c4:49:b2:
1e:81:cc:dc:75:cb:86:11:03:df:10:71:aa:51:5b:
8a:5f:25:2b:1b:23:88:0d:df:05:87:86:0d:f0:db:
65:d5:b1:b3:bc:35:a8:d8:26:d3:64:73:c0:70:af:
a1:6b:0d:c1:3f:76:4f:39:49:ed:30:79:1b:d1:4d:
9c:83:a6:e8:52:ad:4c:43:1b:23:73:e8:66:db:5c:
30:4d:a3:59:b3:35:16:13:17:aa:aa:06:7f:e9:e0:
83:d2:69:69:c2:02:23:c2:e4:68:a0:38:ab:84:c6:
ca:89:58:42:0f:99:20:70:f4:75:f3:64:69:3a:0f:
d5:5d:25:ff:53:1d:4a:33:af:f2:9b:b8:93:ee:ce:
3f:42:e0:8e:a2:c0:45:2b:2b:a1:22:09:ae:8c:3e:
6b:1a:f1:94:60:19:7a:c7:7b:4f:71:5f:71:fa:fe:
3d:e5:51:00:ee:1e:de:b6:0c:d8:e1:a3:01:99:b7:
fc:2e:1d:79:dc:e2:e7:2a:cd:1b:d6:2d:8b:1f:6f:
51:ef:21:50:dc:d4:59:4c:88:04:5a:c8:c9:26:a9:
43:73:67:cf:61:cd:8d:39:86:69:cd:c6:42:2b:3f:
8d:3c:1b:df:46:4b:c0:9b:12:f5:88:0a:db:ad:5b:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:45:34:9C:B3:21:B0:43:20:90:67:B1:13:7E:B1:14:41:84:0E
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:dd:a5:27:69:ce:6e:7c:05:49:b8:60:20:c0:e0:e8:55:
10:dd:ad:e8:3d:ee:a8:ec:a9:6c:4e:da:e0:13:71:64:e8:73:
47:94:c7:e0:5d:a4:ab:58:a9:ce:66:96:1e:ed:94:df:93:6f:
3c:47:db:9c:03:f8:47:97:f5:81:dd:e5:ba:e8:96:dd:e3:3e:
13:fa:ff:81:55:d2:54:71:d2:45:03:8d:66:96:f8:d0:ca:1a:
09:80:83:b7:f8:b1:c1:6c:8a:40:c1:48:ae:a9:83:ea:f3:51:
a9:10:2f:7d:56:17:6b:84:ec:d9:e2:5f:96:9c:0d:d9:be:09:
8b:05:8f:5f:5f:0a:46:65:47:18:59:f7:a5:1f:59:67:a6:e3:
87:57:66:8d:e9:f1:0f:64:78:8d:82:d3:e0:d7:15:d8:86:48:
19:22:97:f5:b8:41:84:6d:1d:31:c0:cd:1f:19:7c:d3:93:53:
20:b1:0e:f6:18:c5:8e:54:e3:70:f5:e5:f7:96:fe:37:24:96:
a0:09:42:21:46:1b:36:20:31:84:72:1f:3b:48:9c:7e:bc:9e:
a2:65:d4:e9:46:a2:9f:8d:fa:5c:ac:5c:a3:34:66:43:60:ad:
88:af:ab:de:b5:4b:56:24:d6:5c:30:a6:a4:73:43:69:7f:79:
20:a1:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:58 2025 by rpki-client