Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: IaWotA6iAgnkRuGQ6o8D5rY4cu80EaITO7jpw5uHT4Y=
Subject key identifier: 91:A5:32:98:56:11:8A:93:B1:F9:F2:A3:C1:F7:58:67:42:F2:10:D9
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 0199239FD13E64E41CFB5AD1FD2C43EA0B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: 3C
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa (hash: mLKIDtdNErnqIL5hnzMx6CpSHF/6qunSx1xGrtmVRzc=)
2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: HX+BjhUyH5FH9P2hbZXyvmJk3+H8ggG2Fh//xKWopeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d1:3e:64:e4:1c:fb:5a:d1:fd:2c:43:ea:0b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=91a5329856118a93b1f9f2a3c1f7586742f210d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:0b:8c:35:44:e6:62:d8:17:87:4d:f5:0e:
20:8a:0d:e1:4f:ba:18:20:04:df:56:83:65:ff:b9:
c5:25:1d:49:a9:26:d6:5a:54:04:be:f5:09:c0:00:
bc:c6:4c:62:1a:21:85:98:f7:ab:08:5b:ac:4d:4b:
df:61:da:10:41:66:58:8f:3b:07:bf:4d:93:da:f6:
a0:13:77:1f:4b:21:ba:98:65:53:2f:c8:de:07:6d:
a2:bc:b7:6c:6b:24:09:cd:32:2b:34:2b:27:05:b9:
c1:c9:c1:b5:73:42:9a:e3:46:c3:c2:68:35:dd:f1:
d4:92:ec:b8:7e:8c:ea:7f:a4:5a:b9:b0:0f:bc:5e:
2c:9c:2c:bd:cc:68:35:86:fe:82:46:69:76:f1:03:
8b:80:8d:97:b8:a2:94:4e:02:9e:02:3e:34:26:71:
19:98:bb:c8:1d:61:2f:30:8f:b4:0a:2b:fb:dd:9b:
5a:18:e1:4c:70:e9:db:de:35:c8:fd:cc:de:95:3e:
80:08:9e:8a:24:b6:00:dd:8e:ee:69:8a:ca:a5:d9:
94:fd:a1:f5:41:6d:52:42:ba:3b:0e:d6:1a:68:ec:
f2:f8:14:c6:0a:dd:c7:18:bd:0c:4e:2e:c5:eb:4c:
44:e5:09:d2:28:5b:01:59:75:85:a0:e2:d7:c1:ea:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:32:98:56:11:8A:93:B1:F9:F2:A3:C1:F7:58:67:42:F2:10:D9
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:22:b1:b7:82:9d:ac:22:bb:06:11:ca:39:84:be:4a:a4:
6a:49:aa:f6:96:0d:ca:16:e4:34:4e:94:f9:16:92:93:a9:b1:
95:85:8a:df:73:8a:2d:6e:a4:e7:63:b3:8f:67:7a:b9:80:70:
33:3e:22:a7:a0:85:59:df:5c:38:59:37:84:4d:ad:18:69:8d:
73:7a:08:4a:dc:5d:f2:59:2d:96:98:20:b4:3c:dc:9f:16:62:
ab:72:f4:35:b3:c8:64:2d:23:fa:e8:c5:83:82:35:25:de:86:
00:6e:77:4c:40:86:0c:26:4d:cc:dd:f8:3a:39:1a:1f:94:b0:
a2:62:85:b3:f9:0b:74:99:e6:76:9c:a9:b3:26:5f:fd:19:48:
07:1e:c8:77:e9:7d:16:59:d4:02:61:43:d0:eb:55:57:56:a0:
cb:d5:e2:ed:0b:13:4d:7f:0d:7f:ad:d7:81:a7:23:6f:b2:77:
f1:24:0f:19:3f:6f:07:3e:f2:b0:86:89:15:5d:21:35:f5:35:
1b:0a:bd:ef:5f:87:fb:cc:38:45:8e:78:fb:e4:11:61:fb:02:
df:df:c2:8a:42:d6:c4:fd:ab:c1:c0:d2:8d:a9:ee:97:6b:ca:
0e:c7:19:52:8f:83:fa:d5:e8:c6:1c:3b:00:38:61:8e:66:c4:
25:8b:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:41 2025 by rpki-client