Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: 7u2aaLfgUBTarF16jloEI6c0NLc+Fx3WxKVIFPWLMME=
Subject key identifier: 5A:53:E4:37:94:67:C4:E1:B3:5E:C2:E3:FF:59:8F:D6:8F:06:F2:56
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0198D5163DD1653B32D8A9AA4437C5DEDC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 04:01:01 +0000
Manifest this update: Sat 23 Aug 2025 04:01:01 +0000
Manifest next update: Sun 24 Aug 2025 04:01:01 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: 6GVPifmxeQcLqddutJu1fcG7jWm58CC3rYMrXTQs5Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3d:d1:65:3b:32:d8:a9:aa:44:37:c5:de:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Aug 23 04:01:01 2025 GMT
Not After : Aug 24 04:01:01 2025 GMT
Subject: CN=5a53e4379467c4e1b35ec2e3ff598fd68f06f256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:9e:0a:df:f4:98:ae:67:5b:c2:db:b8:a4:
50:31:56:ff:c5:80:9e:dc:33:54:7e:5a:67:f4:6c:
05:e0:ed:a8:6c:72:a2:73:7f:d4:2b:06:9d:ed:67:
ec:8f:e7:04:e7:e1:57:f4:c2:96:1d:7d:a7:44:f4:
f1:53:f9:a6:72:c0:66:26:b2:ff:93:48:a0:af:e4:
a0:40:8c:fd:88:f4:40:a5:54:4f:fa:f0:ea:68:62:
04:ef:29:f7:9a:7e:39:3a:ad:42:f4:39:be:c9:ba:
80:55:24:f9:5a:d4:6c:71:be:3a:fc:4b:f1:a7:0b:
b0:44:e7:c6:a3:b8:ba:16:d1:c3:74:42:26:2e:c1:
e3:04:81:6c:2e:a4:e4:2d:aa:05:2e:00:7c:4e:be:
ab:17:e2:50:b1:fc:eb:83:6b:5c:57:be:59:59:fb:
28:25:d8:2b:87:05:69:6c:12:69:ee:89:25:ac:ab:
7f:18:56:b5:a3:5b:81:b4:70:20:9b:40:e7:a5:a7:
05:d9:ed:59:84:42:8a:4c:d4:1d:19:a5:0f:e9:ae:
25:2c:e8:d7:a8:07:6e:fd:d0:49:40:aa:0b:2e:82:
f4:51:ca:2e:77:b2:91:21:f7:ad:e4:53:cb:d0:4d:
6e:a7:26:a0:11:1c:78:c8:84:d1:cb:0f:0e:c7:fc:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:E4:37:94:67:C4:E1:B3:5E:C2:E3:FF:59:8F:D6:8F:06:F2:56
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:f4:ae:df:3f:30:ac:de:ec:5a:93:e1:1c:a5:a6:99:a3:
39:eb:2d:29:2d:00:e3:57:6f:bc:3d:69:3f:fa:5c:59:af:ce:
21:ac:b6:52:4a:f8:1f:f1:af:de:97:f2:af:a1:a2:9a:f6:38:
c3:22:4f:e2:6a:1b:58:ce:53:99:67:34:c2:1d:fa:58:ff:83:
7e:bd:86:34:03:1b:fa:74:ab:e3:ae:5c:4f:3f:d0:70:96:99:
48:01:0f:b9:70:c3:94:f0:d1:f7:eb:fd:e8:e0:39:71:d7:26:
46:21:e4:45:a7:4d:66:5e:10:4b:c0:27:38:86:d0:f9:99:32:
32:ea:b0:4e:b8:58:81:c8:18:53:5f:1c:27:79:53:52:62:2d:
0d:d9:60:65:1d:bd:57:cb:7d:64:57:ea:27:6a:cc:e4:6c:dd:
90:8a:95:2c:ae:aa:af:ee:9c:76:66:a3:37:ca:50:fd:06:aa:
18:f2:49:0a:4d:2d:a1:1f:17:12:5a:b9:75:0d:61:fe:d1:47:
cc:ad:1a:d3:27:45:21:8b:eb:b8:14:81:88:35:26:2c:95:29:
4f:10:57:22:1a:4f:39:1c:cf:cc:9a:db:c5:95:2a:20:bc:4a:
26:d0:20:de:79:8e:fe:1e:d8:3d:d4:13:82:cc:f3:25:f4:6c:
9d:a6:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:45 2025 by rpki-client