Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: ctU+gPHn3bmougmfYYOsqbtROrBv/BlJXVWqVx+ccmA=
Subject key identifier: 27:34:6C:01:8E:9C:8A:34:49:53:B0:1B:E8:64:3C:A2:FD:11:45:A1
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 019A13170FE314FC9BED1183C2ACBCD84583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0AF3
Signing time: Thu 23 Oct 2025 22:01:09 +0000
Manifest this update: Thu 23 Oct 2025 22:01:09 +0000
Manifest next update: Fri 24 Oct 2025 22:01:09 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: aeMA79Jbza2YWhunEeHOSZurCayDgH83UADg+19jjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:0f:e3:14:fc:9b:ed:11:83:c2:ac:bc:d8:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Oct 23 22:01:09 2025 GMT
Not After : Oct 24 22:01:09 2025 GMT
Subject: CN=27346c018e9c8a344953b01be8643ca2fd1145a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:43:2c:c9:26:8e:46:24:cf:a9:42:06:1a:
f9:45:fe:94:10:54:35:8a:cb:b9:ec:ec:84:88:c2:
04:93:91:03:34:5f:9a:ab:cc:2b:16:83:8f:72:ef:
6b:f6:7d:39:df:4f:71:4b:6c:20:19:f3:cd:8e:9f:
10:aa:e4:e2:cb:90:b7:ce:b4:d9:5e:81:7e:6f:36:
b7:3f:6b:8d:52:fe:b0:7b:cb:b0:c0:01:28:de:3a:
6e:e9:e2:5d:a7:d1:48:a7:08:08:cc:af:79:ac:21:
21:b5:4a:6f:99:5f:ff:ee:e4:2e:7c:18:c2:97:75:
bf:2d:22:29:13:78:77:10:75:f0:dc:ce:46:56:71:
3f:f3:d2:fe:f5:f2:f5:2c:4a:24:fd:87:1d:62:47:
2a:98:a2:74:3c:7f:af:89:3e:b7:02:6c:5b:cc:e3:
33:84:16:c9:2e:9c:f8:70:d1:7c:6c:6b:f6:30:1d:
87:b4:d9:f7:8b:fd:f3:f0:ff:7d:b8:56:c7:34:a7:
bf:d3:8e:60:63:2a:1a:4e:d2:63:f2:a5:7e:a3:14:
62:46:6b:7a:ee:cc:0c:c7:19:ef:34:c4:12:d2:3d:
be:7e:fb:eb:83:74:5b:5d:e5:3a:62:25:97:85:cf:
b0:51:cd:e4:8c:f0:00:e2:f2:26:12:d4:78:93:45:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:34:6C:01:8E:9C:8A:34:49:53:B0:1B:E8:64:3C:A2:FD:11:45:A1
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:49:8d:66:c4:f7:58:0e:70:83:a9:34:5c:65:58:a0:2b:
c4:32:a4:20:bc:9a:f3:a6:fe:c6:8d:67:d8:91:2e:be:39:d9:
ec:e4:f0:31:73:ba:37:41:3e:1b:33:95:59:47:31:73:cc:46:
ff:49:ac:63:74:b2:e2:0d:d3:04:4f:81:d7:60:02:a1:f9:82:
4e:86:75:76:60:69:78:ff:f8:9c:d3:39:fd:46:71:41:17:0d:
06:4b:1f:d8:67:29:72:8c:69:66:91:1a:a8:d6:50:08:75:93:
e8:c5:12:d8:59:c0:15:91:df:85:4c:37:f8:1a:cf:76:86:22:
a5:a6:bd:8c:6f:f9:4e:04:81:b2:fd:d7:0d:db:7f:39:09:0c:
b1:a7:84:89:c9:5d:da:fb:cd:18:8e:9b:bc:41:11:eb:99:87:
63:1d:e4:f4:29:9d:d6:dd:2a:40:cf:94:7e:d7:e9:86:9d:12:
b1:aa:7c:17:51:65:a4:3a:7a:a9:dc:19:96:d5:46:29:59:ae:
a9:c9:2b:51:04:07:84:ee:44:0d:c0:d5:b1:05:ad:62:92:40:
b3:9c:2d:3d:e3:08:ae:a2:1b:93:d3:7b:2f:be:cd:76:7a:5d:
a2:ec:80:31:e7:f9:bd:c4:26:e6:b4:84:4c:8d:32:d8:5e:87:
8c:04:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:47:47 2025 by rpki-client