Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: 3Zs3gDtY6XSnYzpYJhT8BdHqIZ3rA1T/X6cdYCFLKLc=
Subject key identifier: 0C:80:1C:EE:18:32:D7:EB:DF:D9:2A:42:C0:87:FA:59:B5:22:26:6B
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019937CAA2BE734A072B7CE464A70C9D0EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1686
Signing time: Thu 11 Sep 2025 08:00:50 +0000
Manifest this update: Thu 11 Sep 2025 08:00:50 +0000
Manifest next update: Fri 12 Sep 2025 08:00:50 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: kVYj2wPdKGniwmHkVTgLSi1c9/WzDHSsJBckL1TbzNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:a2:be:73:4a:07:2b:7c:e4:64:a7:0c:9d:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Sep 11 08:00:50 2025 GMT
Not After : Sep 12 08:00:50 2025 GMT
Subject: CN=0c801cee1832d7ebdfd92a42c087fa59b522266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:9a:33:0d:8a:84:7d:2e:93:6c:dc:87:1f:
28:01:6d:03:41:5d:e0:58:c3:a5:81:51:bf:01:c6:
02:65:cf:e8:3a:8e:a4:53:63:f7:71:6d:8e:01:17:
ca:b4:24:0f:60:8b:fc:c1:01:0d:c3:c6:82:10:6e:
61:da:62:36:1c:77:1c:1b:c8:42:4a:5f:93:8d:f6:
bc:b3:aa:16:99:0f:25:94:14:9b:f0:54:51:55:7f:
74:ac:78:fa:ff:ab:69:de:14:2f:00:fd:51:ab:e2:
98:6e:c6:5e:73:24:8c:86:b9:77:41:6f:27:5b:82:
da:ed:1f:db:9b:99:07:39:42:9b:0b:9c:95:81:6e:
be:73:ad:c8:3b:ac:da:0a:ff:72:4f:7d:15:db:95:
31:46:af:ff:0d:06:d3:27:7e:2a:21:3d:1b:d4:8e:
41:e7:a9:80:2c:c7:21:fd:af:e0:7a:e2:45:a4:22:
6d:77:a7:d1:37:98:bd:ed:17:c9:37:fa:64:b8:49:
ae:cc:ea:5c:68:be:82:b4:be:95:58:94:c4:cf:f1:
e9:b8:35:bc:cc:f2:f4:cc:68:ea:37:09:78:f4:1b:
f0:bd:b8:ee:44:f8:47:1a:da:96:09:5f:e9:bb:f1:
59:e4:16:af:23:f3:00:8a:9d:0a:f0:5b:81:47:51:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:1C:EE:18:32:D7:EB:DF:D9:2A:42:C0:87:FA:59:B5:22:26:6B
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fc:ee:58:36:bf:9d:f6:6d:42:29:09:a0:fd:43:62:6d:7d:
1c:ea:34:83:b1:cb:84:2a:df:55:9e:53:fa:6d:fe:56:12:1a:
e7:7d:80:f4:cc:66:72:26:40:ca:ab:29:2c:ce:51:f4:df:ba:
11:54:6e:7f:35:ea:9e:7a:4f:8c:00:49:5c:33:59:0b:39:40:
c3:03:45:0b:68:5b:17:ae:74:a6:93:55:85:c8:78:38:a5:79:
4a:b7:20:4d:42:86:22:59:67:23:44:11:42:7a:87:35:c3:5f:
e2:84:ee:ee:a2:ff:21:e6:f2:2f:46:38:37:98:a2:41:cb:17:
6d:5b:ad:27:e2:01:65:87:83:c0:be:c5:83:48:58:48:a0:0b:
cc:f2:0c:0c:32:ad:81:37:3c:44:d7:c2:47:a6:57:54:9d:ee:
ef:26:78:07:c5:cb:44:0b:33:8e:22:23:f0:58:69:69:ed:27:
21:de:e3:af:36:b6:83:d7:9d:22:7a:c2:df:a9:89:f9:fc:8d:
5f:9e:d3:f1:f2:4e:0f:bf:9d:50:d6:c0:5a:39:de:dc:3c:b8:
6a:a7:f9:8f:65:4e:ef:df:1d:84:44:9b:29:be:91:4b:1c:56:
e2:b5:91:3e:2d:dd:ce:70:5c:08:0a:e0:b8:69:66:90:73:aa:
1a:a4:74:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3yqK+c0oHK3zkZKcMnQ7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj
NzRhODgwHhcNMjUwOTExMDgwMDUwWhcNMjUwOTEyMDgwMDUwWjAzMTEwLwYDVQQD
EygwYzgwMWNlZTE4MzJkN2ViZGZkOTJhNDJjMDg3ZmE1OWI1MjIyNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZSaMw2KhH0uk2zchx8oAW0DQV3g
WMOlgVG/AcYCZc/oOo6kU2P3cW2OARfKtCQPYIv8wQENw8aCEG5h2mI2HHccG8hC
Sl+Tjfa8s6oWmQ8llBSb8FRRVX90rHj6/6tp3hQvAP1Rq+KYbsZecySMhrl3QW8n
W4La7R/bm5kHOUKbC5yVgW6+c63IO6zaCv9yT30V25UxRq//DQbTJ34qIT0b1I5B
56mALMch/a/geuJFpCJtd6fRN5i97RfJN/pkuEmuzOpcaL6CtL6VWJTEz/HpuDW8
zPL0zGjqNwl49BvwvbjuRPhHGtqWCV/pu/FZ5BavI/MAip0K8FuBR1EZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyAHO4YMtfr39kqQsCH+lm1IiZrMB8GA1UdIwQY
MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt
NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx
LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfzuWDa/
nfZtQikJoP1DYm19HOo0g7HLhCrfVZ5T+m3+VhIa532A9MxmciZAyqspLM5R9N+6
EVRufzXqnnpPjABJXDNZCzlAwwNFC2hbF650ppNVhch4OKV5SrcgTUKGIllnI0QR
QnqHNcNf4oTu7qL/IebyL0Y4N5iiQcsXbVutJ+IBZYeDwL7Fg0hYSKALzPIMDDKt
gTc8RNfCR6ZXVJ3u7yZ4B8XLRAszjiIj8Fhpae0nId7jrza2g9edInrC36mJ+fyN
X57T8fJOD7+dUNbAWjne3Dy4aqf5j2VO798dhESbKb6RSxxW4rWRPi3dznBcCArg
uGlmkHOqGqR07A==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:43:07 2025 by rpki-client