Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: H7g9M4G1/j/iNRhgJNMEgGHjO2a5Abr6oHf3+FETW1I=
Subject key identifier: 15:B5:86:B2:99:E2:57:06:42:E1:D7:35:5C:F5:FD:B7:B1:27:F6:CE
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 0199C5695BE785B41AE1DC1E4C79BF3D9A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 1173
Signing time: Wed 08 Oct 2025 20:00:40 +0000
Manifest this update: Wed 08 Oct 2025 20:00:40 +0000
Manifest next update: Thu 09 Oct 2025 20:00:40 +0000
Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: SxvQQqNYUl+niljkDGFpuAXC6abqopn4+em4lk52tS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:5b:e7:85:b4:1a:e1:dc:1e:4c:79:bf:3d:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Oct 8 20:00:40 2025 GMT
Not After : Oct 9 20:00:40 2025 GMT
Subject: CN=15b586b299e2570642e1d7355cf5fdb7b127f6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:2f:d3:b1:83:e3:52:cd:23:6b:18:d6:12:
9c:d0:03:fb:a0:93:8a:60:81:b0:a5:86:91:ff:28:
e5:15:f1:15:6a:2c:a8:f8:e8:a2:eb:78:40:e7:d7:
3f:97:14:8b:9b:8f:b7:ea:6b:4b:f2:2b:a0:1d:a4:
ac:9d:75:15:26:33:b7:0b:6f:aa:6e:30:67:08:bb:
05:db:f4:f5:89:e2:f2:a6:41:54:35:a2:2d:63:62:
51:38:f3:23:54:f0:65:11:97:99:25:f9:54:1d:42:
e1:54:3d:e8:7f:0c:2f:27:66:ca:08:a3:72:fc:93:
16:7b:09:b3:ce:15:e9:ef:3c:e9:97:fc:cf:0e:2e:
7d:88:22:8d:ca:24:d9:fb:d5:fe:01:11:b4:09:b7:
6a:5e:86:ff:92:62:42:c9:94:1d:2e:56:43:f9:c1:
ec:3b:c3:e1:e4:4d:47:3c:e4:12:8b:56:92:6e:5e:
af:09:0a:af:7f:b5:ba:96:41:e5:ad:43:25:43:ea:
d8:8f:03:c0:f2:4b:6a:13:91:83:e8:30:10:a8:cf:
ca:c1:02:34:07:6b:46:b2:7f:de:8a:b1:70:8f:ba:
9a:2d:95:09:71:a0:2b:40:08:93:62:61:ce:55:03:
0f:17:41:b8:8c:23:92:03:77:a5:57:2d:c9:d8:ae:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:86:B2:99:E2:57:06:42:E1:D7:35:5C:F5:FD:B7:B1:27:F6:CE
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6a:59:cb:f5:94:6a:9f:35:e4:df:3f:21:df:92:a2:cd:7c:
48:9a:da:0e:77:8d:13:7d:b1:d2:4f:08:35:3a:28:02:02:64:
2b:c8:d2:91:10:48:a2:2b:4f:7e:b3:66:b3:ce:aa:00:c9:20:
67:0a:f2:dd:0f:7b:46:97:88:e8:1a:f9:c8:ec:c7:7f:b9:a7:
a2:e8:1d:f0:bb:2f:4b:50:13:0b:76:67:cb:a1:86:dc:ee:f1:
6d:e0:19:66:50:5f:22:39:cd:ab:69:ce:3e:6d:92:12:96:be:
e2:9f:fb:d4:22:a7:c8:46:bb:ef:9e:d7:31:26:e8:4f:0c:12:
f5:a3:d7:9e:7f:68:51:6a:6e:43:97:00:e9:99:19:6e:30:89:
94:46:68:47:6f:b8:c6:64:66:ba:96:e7:db:89:20:30:17:ff:
18:f9:90:f1:63:bc:d6:66:8e:7e:81:4b:3a:e1:ac:e2:8d:7c:
15:d1:95:5c:de:93:14:22:32:13:a6:42:d5:3a:73:5f:9a:65:
6c:9a:32:13:f0:26:05:14:1e:58:67:cf:82:07:4c:8f:8a:3c:
d4:37:83:89:af:2a:fa:c4:84:17:6e:04:95:57:ce:4b:98:0e:
41:5d:76:55:9f:be:6c:27:0d:17:84:c2:e8:1c:76:93:01:24:
55:0e:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:09 2025 by rpki-client