Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: Si+JR2BFf59SlDEGHpUxHLlElDGcKU2gWk5MZamucso=
Subject key identifier: 01:23:2E:18:D3:D6:6D:B5:4C:10:30:2D:C2:0D:4D:DA:CC:EB:E0:EF
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019A23650E1B220A7D8F0C9E73F3D3157341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0D72
Signing time: Mon 27 Oct 2025 02:00:16 +0000
Manifest this update: Mon 27 Oct 2025 02:00:16 +0000
Manifest next update: Tue 28 Oct 2025 02:00:16 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: ZOW6treLZLE9IvRu1VS7ANSdnb6PVVCw0n7BY0vkDg0=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:0e:1b:22:0a:7d:8f:0c:9e:73:f3:d3:15:73:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Oct 27 02:00:16 2025 GMT
Not After : Oct 28 02:00:16 2025 GMT
Subject: CN=01232e18d3d66db54c10302dc20d4ddaccebe0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:93:94:32:ff:a3:8a:d0:31:35:b5:e6:f1:
f9:3d:9c:59:8e:e2:b5:6d:3c:f8:e9:6c:1b:64:9e:
a6:4e:b2:90:aa:b5:e8:be:7a:04:fc:f3:75:5e:09:
da:be:f0:5d:92:eb:06:cc:d6:2c:5b:a6:2c:1e:05:
26:84:3a:d0:3e:9c:d6:23:87:1a:a6:e8:5a:f9:fc:
d2:ff:3d:8a:96:54:89:80:89:34:a2:bf:b0:14:3f:
07:73:1c:d9:a2:7e:00:8a:ae:40:ed:89:84:0d:f4:
6b:66:4f:0d:43:61:f1:04:85:3c:be:ed:d9:1a:8b:
ab:38:16:23:c6:e8:73:4e:0b:bb:0e:de:f2:6b:d3:
82:51:42:f0:01:d5:f0:51:57:2d:d6:7f:9c:b6:cb:
2f:5c:d8:6c:4d:d3:70:60:e3:cb:81:7d:f7:26:37:
67:c8:aa:7c:95:d6:cc:4b:a8:95:c2:45:0a:71:5f:
44:77:96:f2:3b:57:06:c4:c7:31:89:d5:8a:2e:f2:
54:da:96:2e:17:04:86:0e:8d:0f:7f:90:a1:37:4f:
4a:b3:97:d3:b8:f2:20:32:49:d1:45:be:74:23:5e:
07:3c:93:07:6e:17:76:28:e5:67:9f:8c:24:f3:17:
b6:3e:84:5d:ed:8a:43:4c:32:73:ab:47:93:bc:48:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:23:2E:18:D3:D6:6D:B5:4C:10:30:2D:C2:0D:4D:DA:CC:EB:E0:EF
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:45:4e:d2:f9:e0:06:78:56:66:c8:bb:0b:bb:98:49:6d:96:
98:bd:e6:16:ab:bb:4a:d0:30:e5:a3:b1:5c:d2:9b:0d:36:2e:
0e:22:ea:13:a6:b8:11:33:02:02:09:e9:09:5e:37:63:7f:be:
4c:e4:8d:b4:d0:02:96:ab:cb:40:b7:b9:4d:2e:f1:78:62:b4:
dd:53:e7:9c:46:e5:d5:6c:73:a2:f9:19:82:10:3e:59:85:e6:
0a:65:ca:0f:69:75:2e:92:3e:78:5b:bf:8b:1b:23:9f:c1:28:
3a:dd:33:67:40:ea:29:bf:72:99:b5:b1:80:f0:0f:02:31:98:
4a:eb:e1:9e:45:3c:6a:d2:39:b3:19:ef:03:a2:bf:3a:0b:e1:
bb:60:d4:dd:63:5a:23:7e:0c:12:68:6e:16:b5:48:25:bd:7b:
db:25:78:d0:4e:bc:a1:4a:e8:fd:6f:33:21:2d:a5:27:dd:50:
14:42:40:f0:00:a3:a2:ee:0d:be:aa:6a:60:c5:d6:ac:bb:f1:
0a:c6:e0:17:7a:b7:75:d6:50:a5:b8:03:14:eb:ed:34:f6:5b:
fa:84:9c:17:63:f3:e1:47:94:9d:1c:f1:a3:9f:26:41:3d:bf:
fb:5a:35:c9:45:b7:fe:fb:14:ac:e4:12:67:a5:d5:ed:f8:5d:
7f:99:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:14:59 2025 by rpki-client