Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: /Gg8a6LhSqqnJuxZYZxqNVyuupoGUYJj0VmY0phjIgM=
Subject key identifier: AE:08:92:26:A4:F2:AE:A6:66:DC:A7:15:2D:97:04:C2:C5:AE:AB:A8
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019A209C70FEE4CC8F0EE568704C21B7D6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 1708
Signing time: Sun 26 Oct 2025 13:01:54 +0000
Manifest this update: Sun 26 Oct 2025 13:01:54 +0000
Manifest next update: Mon 27 Oct 2025 13:01:54 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: QMs6oCddfrjqTm2ujbNJh5IZasEKgBnbyJ8MxmPVOlA=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:70:fe:e4:cc:8f:0e:e5:68:70:4c:21:b7:d6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Oct 26 13:01:54 2025 GMT
Not After : Oct 27 13:01:54 2025 GMT
Subject: CN=ae089226a4f2aea666dca7152d9704c2c5aeaba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:ca:6d:c3:d9:bf:04:e0:84:23:36:48:07:
75:82:e8:c8:86:98:52:d9:b7:cc:fc:c3:a7:5d:f9:
a7:de:0f:24:5e:5a:5d:97:75:fb:5c:ee:4b:10:f7:
c1:d2:30:2e:22:b1:18:bd:a9:9d:3f:c7:2a:37:e8:
9a:c8:b9:3d:be:40:ff:ca:3b:48:d5:50:87:6c:e6:
e4:7a:23:73:57:48:b3:f6:97:7b:17:dd:68:8f:92:
9d:86:0b:e9:c9:6b:07:a1:e6:22:62:c5:88:8d:a9:
0a:25:ea:36:79:be:8b:1f:bd:b7:e5:29:ac:b7:ff:
03:8b:62:a7:d5:7d:4d:98:43:68:b7:ad:b0:00:e4:
12:14:93:44:99:40:bd:97:4b:ab:86:26:ba:c1:5b:
92:64:e5:3c:51:08:07:3a:a4:7e:f2:99:b6:a2:4b:
59:2e:4a:ba:86:35:8c:10:08:23:81:d0:21:9c:65:
da:47:cc:8d:e6:37:7d:e5:e9:db:c4:7c:04:5a:5b:
bf:26:ad:e7:88:e8:8e:00:83:a7:8c:57:28:f8:b0:
5c:cb:f0:54:24:dc:ba:69:eb:39:41:18:43:f8:51:
f5:4d:a4:e2:15:e2:14:67:c6:52:e8:a0:ae:60:f2:
72:67:78:e3:c5:e3:95:2f:a7:0f:09:34:f4:e0:3e:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:08:92:26:A4:F2:AE:A6:66:DC:A7:15:2D:97:04:C2:C5:AE:AB:A8
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d8:94:ec:f4:3c:14:68:e1:12:0f:77:ef:2f:8d:39:c0:a7:
3d:14:6f:1e:3f:b7:d7:28:c5:3c:2e:ac:a5:0c:88:8d:df:21:
b7:1f:fb:b4:c2:62:e2:38:00:d1:32:b2:e1:fc:37:fe:89:88:
16:6a:2b:7f:11:19:b4:26:60:60:f1:da:da:d2:2b:85:c3:15:
95:00:99:fd:8c:6b:c0:cf:c1:f8:26:1f:f1:bf:61:93:5c:3b:
dc:14:e5:59:71:90:d0:a2:b3:eb:3d:99:e7:08:4c:51:e8:af:
4d:22:a7:6d:18:d8:93:89:1c:13:88:3f:22:33:d1:a6:4b:7d:
07:ac:e5:ba:60:d5:06:66:e3:92:af:9f:af:5c:d7:6a:4d:e1:
ed:41:a8:13:ad:30:78:d0:15:83:71:52:a7:4f:c2:e2:20:b6:
1a:2a:c5:08:d1:2b:e8:63:0e:eb:9a:1c:11:95:5e:a9:2a:a7:
c2:45:13:c6:8e:8f:8c:94:bc:db:2c:a5:11:65:8a:41:ae:9b:
b2:fc:2c:5c:82:50:7d:71:ff:b3:c2:c2:2a:e6:2d:63:b1:81:
c6:28:ba:ab:51:1d:b3:15:2c:17:c1:71:1a:75:11:80:c1:37:
c7:28:37:e4:dd:88:08:9b:c7:6f:70:de:01:3b:18:0b:13:66:
93:5f:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:11:01 2025 by rpki-client