Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: 2oa/HVUEK85Zjt6l9qVZPBOdDDJdo6bwF7+G8Ha8ar4=
Subject key identifier: F9:3D:4F:B2:2E:C9:89:EC:C8:24:4C:9D:A2:26:07:FE:B5:57:09:0E
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019933120A1E6E9372C67F8084FCDF429C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 168D
Signing time: Wed 10 Sep 2025 10:00:44 +0000
Manifest this update: Wed 10 Sep 2025 10:00:44 +0000
Manifest next update: Thu 11 Sep 2025 10:00:44 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: O0qZVy5yrTwwv9ysX/hiWweCEXxKs6Ds12rpAyZTK5c=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:0a:1e:6e:93:72:c6:7f:80:84:fc:df:42:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Sep 10 10:00:44 2025 GMT
Not After : Sep 11 10:00:44 2025 GMT
Subject: CN=f93d4fb22ec989ecc8244c9da22607feb557090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:3d:89:f7:d2:59:96:32:70:47:f1:1c:f2:
67:ae:dc:07:5a:b5:97:a6:a9:2b:e9:41:e0:4c:c2:
fc:22:c1:4c:7b:e0:c1:98:b3:98:56:e4:8e:23:6b:
5c:63:15:3b:05:30:f3:5c:f7:b7:71:52:0d:da:a8:
16:fe:d9:58:65:aa:57:11:9c:15:de:6d:fc:93:5b:
97:49:42:6f:d3:d0:57:0a:7c:ab:eb:1f:cf:1a:22:
82:b1:6f:d5:c6:8f:f6:15:14:75:20:a6:d7:81:57:
e1:a5:4c:91:fc:f5:01:bb:2e:c5:b1:15:7a:5e:0b:
f6:68:5f:df:ad:27:6d:90:e8:c2:a8:75:11:8a:a5:
71:a0:5e:06:b7:ee:19:a9:64:2c:a9:1b:0f:a2:f7:
0d:c0:55:21:cd:30:d4:c4:5e:40:91:38:fd:d8:85:
15:46:70:7e:c8:b6:a6:31:7f:9d:e5:51:c9:e7:58:
66:15:9f:0f:72:3b:8f:69:f5:24:61:85:6e:b0:ed:
c5:83:37:fc:47:2a:9d:9f:95:96:76:bc:9d:ba:90:
e8:dd:11:3d:1b:d9:13:c4:49:05:61:40:a0:20:14:
af:fc:29:0c:45:92:03:e8:0d:c0:cc:1a:48:aa:a2:
b0:b5:9e:b2:2d:94:cf:ab:2e:ea:e9:4e:ae:95:ac:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:4F:B2:2E:C9:89:EC:C8:24:4C:9D:A2:26:07:FE:B5:57:09:0E
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:c5:d8:e9:3f:06:b4:5d:48:5a:a2:06:62:38:be:62:42:
ab:84:ed:62:f4:06:a8:05:43:ed:b5:a3:b6:cd:64:e6:e7:5b:
69:f4:ad:86:05:f9:4c:77:99:dd:41:3e:0d:bc:6f:e5:c1:32:
5d:44:84:65:7a:03:d5:b8:f9:8d:c4:21:04:a2:bd:4d:8e:39:
6b:5d:a3:39:e9:d4:7c:b5:b4:ef:ae:1e:47:95:61:82:ed:58:
06:6c:bf:d9:4c:79:b7:f7:f8:68:7a:e9:63:b3:b0:70:d4:68:
80:a0:df:36:fb:44:d6:bc:13:dd:93:04:d1:ba:6e:dc:e9:4c:
c6:dc:b7:21:7a:81:c1:db:5e:ba:6a:d6:a0:7f:32:f8:a8:94:
ed:5c:e4:1d:bb:ea:cf:fd:90:35:ac:06:09:7a:8f:df:e7:3b:
5b:fb:74:a3:2e:7d:17:e8:37:33:cc:39:93:c6:95:99:63:8e:
b2:ef:48:03:09:d6:cd:f4:c8:77:c0:6b:20:db:a9:a5:34:ee:
9c:f2:f5:64:64:4d:cb:bd:7c:7a:bf:29:ba:53:97:25:f5:9d:
18:40:42:e5:3a:1e:23:fb:6c:a4:60:57:bf:bb:c5:e4:20:56:
a3:da:38:37:31:8d:90:8a:82:48:96:57:28:e8:51:d2:c4:cd:
e0:36:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:58:14 2025 by rpki-client