Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: /hKy9RoMF2xm47BQcW9MTgTYkt2BTH74W86n5lNqni8=
Subject key identifier: EC:A9:1B:94:38:02:09:59:72:32:57:C8:B3:1E:BA:44:41:B0:1F:14
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019921E7F0FEDD15B73A9176622F354FCF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: sPN9B1SB1L+X4foLoriWtM1wrSb4ti+OnzgUSHhcumM=)
2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f0:fe:dd:15:b7:3a:91:76:62:2f:35:4f:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=eca91b9438020959723257c8b31eba4441b01f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:dc:e2:0f:ad:e6:c0:21:e8:f6:26:e4:02:
48:f0:a4:19:65:a0:50:e4:67:2d:3c:0e:70:25:b8:
ef:bd:bb:4d:ed:e5:b0:91:27:3b:c7:5e:ca:38:b5:
85:c6:61:03:c1:87:ca:61:82:8b:47:64:52:c3:95:
28:86:d6:f7:77:1c:e6:46:a9:85:53:ed:6b:47:31:
94:f1:2a:fd:53:7a:d5:f5:28:f3:bd:d3:d3:31:7c:
5d:3d:0f:46:d1:0f:92:9e:7b:90:ae:f0:f1:50:23:
54:6e:e6:fd:24:db:93:dd:8d:ef:f6:a3:bc:bd:f5:
d1:34:37:94:34:4b:4d:75:38:f5:c8:24:09:7c:91:
c7:81:cd:5f:27:d3:14:b8:43:53:dc:57:f0:a4:5b:
23:90:8d:bb:03:4d:6a:28:f0:8e:9f:96:60:90:a9:
53:18:cc:2e:32:79:88:d3:7b:16:49:ba:c4:45:d7:
0f:4e:7c:0e:ab:c5:72:ea:25:2f:4a:9b:96:5d:21:
e9:1b:23:5f:b4:21:b0:1b:73:b3:f1:67:99:cb:82:
25:06:53:1e:2f:c4:4c:53:f4:c9:a2:ce:7e:43:30:
62:2b:6e:f9:ce:94:af:67:d5:92:e8:7e:10:75:31:
83:81:a7:43:e4:5e:1c:d9:a0:5e:ad:a8:76:ad:71:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:1B:94:38:02:09:59:72:32:57:C8:B3:1E:BA:44:41:B0:1F:14
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:0c:82:84:8e:c7:c2:12:13:3d:dd:9e:af:c6:f8:16:d7:
69:76:2a:ca:2f:40:d1:2a:69:a9:dc:28:96:ef:0a:62:2e:3b:
ff:24:07:94:7d:25:fc:cd:14:a7:d2:c9:96:51:7a:6b:83:00:
28:27:03:11:51:e2:c6:5f:43:cf:21:aa:f5:17:fa:48:64:65:
9d:bc:6f:d7:a9:9d:2b:56:20:11:f6:ab:d6:70:9e:2c:86:4d:
ad:1b:b3:1c:c0:f8:bc:f2:4f:09:88:31:09:ea:fe:18:7f:e2:
67:6a:ec:27:73:c7:f0:f6:a2:a5:07:a3:d6:b8:a1:f3:45:41:
3d:4f:20:d4:6c:b9:a3:15:d5:5d:b9:18:dc:00:9d:c0:2d:31:
a1:da:66:5a:7b:af:d9:f3:22:36:da:28:ff:65:bf:ca:c6:18:
d1:6b:0e:94:88:b3:ff:73:cd:9e:f3:7c:2b:d7:e3:e3:1e:46:
df:2e:3a:5b:ed:16:99:5c:d4:62:9d:9f:62:1d:6d:ed:57:49:
93:44:90:8a:8e:e0:78:d3:4f:3e:3b:11:8b:b4:b4:10:07:3f:
93:a8:11:eb:89:73:6a:0e:0b:bc:d8:71:51:39:76:fc:64:d9:
d5:87:b9:c5:a5:15:0f:4b:a1:95:dd:93:9a:7e:84:aa:66:bb:
e5:10:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:09 2025 by rpki-client