Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: pOvxLurtRsz+GAM3CwZSwZAnJoT0loG/8CVv6JMpJzs=
Subject key identifier: EB:41:A5:86:41:A6:EC:6F:F1:7F:5B:90:0A:0F:4E:20:E1:87:EB:5E
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 01984A4167D29CB303247E6CFE77958A1DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 05:00:56 +0000
Manifest this update: Sun 27 Jul 2025 05:00:56 +0000
Manifest next update: Mon 28 Jul 2025 05:00:56 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: qzu2/Kn6KglUN71+V9AdVgJnxEf/544fKHwfwr5A14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:67:d2:9c:b3:03:24:7e:6c:fe:77:95:8a:1d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jul 27 05:00:56 2025 GMT
Not After : Jul 28 05:00:56 2025 GMT
Subject: CN=eb41a58641a6ec6ff17f5b900a0f4e20e187eb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:eb:c9:d4:5f:83:0e:1e:73:7f:ab:2e:1b:
b1:aa:73:5f:1b:1c:a3:19:57:b6:12:d4:7d:b5:e6:
49:20:cb:19:1b:e9:f2:ce:17:b1:c4:fe:46:5a:fd:
67:d5:4f:ae:ba:f6:b8:72:84:56:6b:9a:93:98:c6:
da:08:8d:c6:98:74:40:b4:eb:7c:a3:68:6c:9c:12:
45:a5:84:c9:ee:a1:f0:b3:b1:5c:b1:71:79:f4:fe:
6b:0f:be:d9:d6:ea:e0:24:3e:d4:ba:06:77:a1:9a:
c0:d1:20:c5:26:68:c6:de:d8:58:55:cc:0f:83:d5:
ae:42:23:e0:13:a5:ca:5e:04:c0:c4:3b:73:f0:f7:
eb:74:4d:98:0e:c5:dc:33:83:d6:32:86:04:72:94:
e0:e5:23:a3:bc:d2:55:17:09:67:db:d4:75:5b:e8:
b5:18:df:ce:52:81:75:bb:d0:3b:c6:26:70:52:b4:
49:34:76:da:fc:d3:8c:20:4e:93:4e:44:0a:b0:6d:
ed:d4:f7:ff:42:9e:9d:d1:e6:39:77:f1:92:92:bd:
17:63:b2:b5:31:e1:a5:6a:83:51:2d:cc:64:86:cd:
21:58:28:fd:87:f8:e1:2b:73:bd:ed:63:f5:9a:22:
07:b6:bc:a2:92:7c:4c:cb:fd:42:4a:3a:bb:ca:18:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:A5:86:41:A6:EC:6F:F1:7F:5B:90:0A:0F:4E:20:E1:87:EB:5E
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:56:87:71:af:22:20:0b:e9:4a:b1:0d:22:c8:89:31:60:
b8:a1:3f:6e:21:11:69:1d:a2:be:14:f6:c0:fc:f9:ad:3c:44:
6e:65:74:47:66:6e:05:c1:2d:13:46:1b:1c:2b:29:e5:32:3b:
32:dd:04:99:35:36:0c:f7:7b:b2:3d:e9:a5:17:02:33:1a:01:
35:b0:fb:53:2c:c5:2a:39:7e:9c:8f:dc:b7:1e:9b:bd:31:88:
59:86:e4:c0:a2:83:6b:61:98:b9:54:38:83:21:80:2f:c3:4f:
3f:42:b8:cb:5d:ca:c2:82:0c:e0:31:fd:01:59:43:17:90:4a:
ed:1f:f4:be:81:56:99:74:3f:a9:fc:0a:8a:5d:a9:eb:81:48:
d8:6a:b1:4d:8f:75:09:31:5c:8b:6b:da:7a:b9:12:96:cd:32:
a3:4f:8e:e0:34:a1:b3:20:d0:6a:23:0c:0b:7c:fc:87:de:88:
52:89:61:5e:cf:10:57:d9:04:4b:df:4e:f0:e3:27:15:4e:21:
70:be:19:4c:64:a5:82:67:04:ea:b0:dc:1f:b4:4b:58:8b:37:
14:f5:ae:81:d4:e9:0b:a7:db:0a:ea:87:91:85:3c:3a:3c:63:
a5:a8:4a:f4:5a:53:d4:22:95:be:c4:15:7a:a6:82:da:59:92:
24:0c:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:13 2025 by rpki-client