Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: NGhhRGmA14FjN4DUY1FcgBoH/Y7uhce/zdyVIWlbpb4=
Subject key identifier: 12:C9:41:2A:E7:6A:DB:D5:4F:E2:F2:0C:20:23:8D:0D:71:BD:68:DD
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0198CCB9F3231DAC7FE61E62FE00FA2F8E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 164A
Signing time: Thu 21 Aug 2025 13:03:15 +0000
Manifest this update: Thu 21 Aug 2025 13:03:15 +0000
Manifest next update: Fri 22 Aug 2025 13:03:15 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: Xk6Pd9+76iYMKvMQTLvgy8ikFcYvhAYaRcpoYg4d1iw=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:b9:f3:23:1d:ac:7f:e6:1e:62:fe:00:fa:2f:8e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Aug 21 13:03:15 2025 GMT
Not After : Aug 22 13:03:15 2025 GMT
Subject: CN=12c9412ae76adbd54fe2f20c20238d0d71bd68dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:51:95:02:9c:f5:02:df:72:05:3d:44:17:
cd:bf:5a:84:6f:96:28:ac:ae:36:b8:a5:71:9b:29:
10:85:29:42:48:16:db:f7:2d:4d:ea:e0:7f:f0:d1:
a6:69:36:79:e2:3a:4d:6d:99:3f:82:2d:f4:75:12:
f6:0a:fb:ef:8d:7c:95:10:62:59:fd:2a:7d:5d:76:
12:20:54:d7:da:a8:93:85:4a:10:fc:4f:ff:b9:94:
31:4b:1b:c5:25:f5:2d:d2:97:36:07:58:1b:7b:5a:
64:70:05:04:4d:78:17:fe:99:41:15:20:de:d1:bf:
f0:e6:47:51:de:f1:5c:4c:3c:a7:c3:43:fb:a8:06:
cd:56:d8:be:fe:b6:29:4b:45:b4:3d:e0:39:a2:3d:
6b:58:c6:d5:10:51:ec:57:c7:91:fa:43:a6:be:12:
4d:f5:5a:e7:98:4e:b2:e8:fa:58:d3:10:da:a9:fd:
02:41:1b:56:ed:7f:fa:34:6a:4c:95:16:a1:ee:71:
1c:21:dc:0c:c0:78:24:75:f2:86:c7:f0:1e:3b:04:
f2:b0:e7:2a:f6:b8:74:b3:85:d6:55:1e:db:6c:2e:
ae:ab:77:c2:58:72:92:0c:02:5a:3c:74:aa:52:ff:
0f:42:e6:1f:53:a5:70:81:88:f1:dd:ca:e3:86:39:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:41:2A:E7:6A:DB:D5:4F:E2:F2:0C:20:23:8D:0D:71:BD:68:DD
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cd:00:bc:fb:82:2a:d2:05:a6:95:96:59:ae:dc:81:99:7d:
3d:ff:ef:b6:6c:5e:6d:c6:f6:e2:6e:ce:66:0c:4f:26:6f:c9:
54:c4:56:33:b0:6b:9b:a8:8f:3d:3a:74:2f:3b:85:a9:c2:d4:
3d:7a:fe:73:72:f1:cd:b8:84:82:f8:a0:cf:39:1d:5e:06:7f:
76:e5:a7:6f:56:91:ae:9c:c5:87:a5:e6:e9:fb:66:5f:4a:81:
06:48:1c:96:7d:73:00:42:81:01:94:30:a3:cc:19:04:2c:23:
b1:31:91:d3:7e:98:fe:ba:9c:14:72:fb:7e:55:d9:5b:b1:d5:
91:68:fa:7b:fb:56:d1:ef:61:15:68:20:4f:d9:ce:31:3d:20:
ab:87:f8:0b:6d:3e:a3:5f:be:6f:22:e5:18:b8:1f:0d:54:5b:
77:82:32:4a:cd:fe:ad:86:6d:77:9e:d2:1a:c1:36:b3:cb:9d:
49:b1:60:62:96:2a:9d:7b:c6:7e:0b:86:dd:11:9f:c6:58:0b:
f6:03:30:d3:9e:0b:7a:f9:a0:95:74:66:24:3e:ae:97:2f:95:
7f:ab:7b:8a:71:76:23:89:4f:44:18:ce:51:a0:02:43:e7:ed:
87:e4:6c:08:b6:96:a9:ae:4b:5c:07:24:b6:d4:66:84:eb:6a:
79:20:b9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjMufMjHax/5h5i/gD6L46eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjUwODIxMTMwMzE1WhcNMjUwODIyMTMwMzE1WjAzMTEwLwYDVQQD
EygxMmM5NDEyYWU3NmFkYmQ1NGZlMmYyMGMyMDIzOGQwZDcxYmQ2OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnStRlQKc9QLfcgU9RBfNv1qEb5Yo
rK42uKVxmykQhSlCSBbb9y1N6uB/8NGmaTZ54jpNbZk/gi30dRL2CvvvjXyVEGJZ
/Sp9XXYSIFTX2qiThUoQ/E//uZQxSxvFJfUt0pc2B1gbe1pkcAUETXgX/plBFSDe
0b/w5kdR3vFcTDynw0P7qAbNVti+/rYpS0W0PeA5oj1rWMbVEFHsV8eR+kOmvhJN
9VrnmE6y6PpY0xDaqf0CQRtW7X/6NGpMlRah7nEcIdwMwHgkdfKGx/AeOwTysOcq
9rh0s4XWVR7bbC6uq3fCWHKSDAJaPHSqUv8PQuYfU6VwgYjx3crjhjm6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLJQSrnatvVT+LyDCAjjQ1xvWjdMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEM0AvPuC
KtIFppWWWa7cgZl9Pf/vtmxebcb24m7OZgxPJm/JVMRWM7Brm6iPPTp0LzuFqcLU
PXr+c3LxzbiEgvigzzkdXgZ/duWnb1aRrpzFh6Xm6ftmX0qBBkgcln1zAEKBAZQw
o8wZBCwjsTGR036Y/rqcFHL7flXZW7HVkWj6e/tW0e9hFWggT9nOMT0gq4f4C20+
o1++byLlGLgfDVRbd4IySs3+rYZtd57SGsE2s8udSbFgYpYqnXvGfguG3RGfxlgL
9gMw054LevmglXRmJD6uly+Vf6t7inF2I4lPRBjOUaACQ+fth+RsCLaWqa5LXAck
ttRmhOtqeSC5fQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 16:13:36 2025 by rpki-client