Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: AqpiSsLOo6Wm4eqVihHM1DFFz/OgIpeUXpwpah+ro6Q=
Subject key identifier: 46:29:74:F4:62:33:42:B7:47:44:70:FD:23:0C:2B:E7:9E:E6:09:7F
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 019A71EEF094AB9D655CE6C396D671B7BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: EB
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: RhyIoqV9oV36QxYOCUGU8f4RB+NyvMP4F9HyQKmSezI=)
2: n-XtjIoUw7WLI1bK7hN10AAmms8.roa (hash: F4z08WGa9P7GE9/YhdJ4zMRMQN8PmIYLdikLkbYH10A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:94:ab:9d:65:5c:e6:c3:96:d6:71:b7:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=462974f4623342b7474470fd230c2be79ee6097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:93:36:4c:66:63:90:64:97:07:ae:b4:f5:
34:86:00:63:24:d4:78:0b:02:22:43:32:76:b0:dd:
80:66:ba:a9:65:f1:8d:05:db:31:1b:46:46:cf:54:
d5:ed:f7:6b:b1:34:2e:57:a8:15:3a:36:04:4e:c1:
98:fd:14:b5:bd:69:2a:97:ad:52:6a:96:6f:38:c6:
e3:cf:f8:e1:27:0e:f3:cf:a7:fa:d2:e8:4b:73:3d:
33:12:44:4c:4c:80:02:78:da:8f:a3:b3:1e:ac:e5:
54:ef:70:81:6f:b0:03:c6:fc:7b:8a:7c:24:b1:2a:
93:15:45:f9:ad:50:a8:b3:db:ab:b3:e7:23:be:25:
03:37:31:b6:10:b7:61:e5:c6:6e:3b:36:73:35:99:
92:f6:27:ba:25:10:07:8a:a9:76:29:79:9e:80:af:
e8:ed:9a:d7:ce:f9:cd:52:06:f3:33:28:5e:c3:b0:
f3:a1:07:50:ea:79:19:d9:2f:2d:2a:c9:d0:31:47:
d0:d3:ae:26:a6:50:2a:9e:8b:83:5f:cf:e3:bc:d1:
aa:22:c5:78:1b:7d:93:63:6a:39:42:58:7b:c6:af:
1a:c9:12:a4:45:26:93:45:72:25:0e:ba:13:54:7c:
ec:9b:16:ec:fc:4c:a2:c6:cb:6b:25:17:87:00:b5:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:74:F4:62:33:42:B7:47:44:70:FD:23:0C:2B:E7:9E:E6:09:7F
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:8b:5b:d1:e1:43:35:f3:3d:15:68:97:58:8c:1c:c0:8a:
0f:ed:76:82:1d:ec:79:c2:29:a9:d1:ee:61:00:d2:1e:5a:ba:
6d:84:fd:f1:dc:b9:e6:4a:3c:3c:e1:a2:03:9e:e0:bd:c5:c2:
22:29:78:05:42:fa:6f:28:38:7a:16:9c:9a:b3:f5:7d:b0:92:
02:07:b2:60:c9:24:e4:22:f0:06:ca:0b:bf:37:e5:d3:04:74:
dd:20:56:08:29:d4:97:9a:fa:81:eb:c1:84:71:5c:ae:71:20:
f3:16:7d:9d:f3:5f:ba:e7:a1:cd:81:c6:42:e8:2a:0a:d8:44:
2c:ea:54:5e:6c:b2:eb:62:ac:be:bd:90:f2:33:60:ce:79:ee:
9c:cf:07:3d:7d:98:54:d8:13:a4:90:d2:cf:f0:e7:09:a0:83:
34:df:fb:69:5d:63:19:6d:74:1e:b0:43:33:6f:f6:20:07:a0:
ec:af:4b:0b:20:94:a9:b1:bb:a4:bb:1e:1b:ff:76:d6:2b:3e:
8d:89:7d:d5:ed:08:76:fc:cb:fe:34:53:13:65:7a:c5:fa:ed:
9d:8e:fe:0c:f0:a8:cb:bd:94:fe:31:9d:7b:ae:0c:6a:06:1c:
1d:7d:e6:44:2f:92:31:71:00:b4:0d:6f:6d:03:4c:7e:0d:fe:
ac:19:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:29 2025 by rpki-client