
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: Rld18bCas+P4mJN0yp25jSJGBikgAjyWniHxyFe/R3A=
Subject key identifier: DA:06:67:59:1E:E6:05:6F:C5:A0:1D:59:B7:47:91:C7:32:96:34:64
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 0199FBEB7F93657444B280C99CDE839746B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 13D1
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: +0H9LJxI7PA6Vc+6l16mFArNGxi/n5RtCCovBqtOtW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:93:65:74:44:b2:80:c9:9c:de:83:97:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=da0667591ee6056fc5a01d59b74791c732963464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:95:22:1d:75:3c:92:29:60:43:ad:e2:50:
f1:bc:fe:a2:62:bc:ed:75:0c:fe:b3:28:46:d8:d0:
d1:c8:e8:4c:a7:6c:3f:e9:52:cb:ed:94:f6:02:5e:
8c:6d:c4:81:b7:cf:c3:f8:4e:ee:fa:0b:ce:d6:66:
ad:f9:7c:fc:7f:8b:f1:b1:8a:ae:4b:e2:65:b2:ea:
b7:e2:3f:c6:bc:ff:72:b8:6a:0e:ae:f1:68:b3:73:
1f:ed:72:a4:3c:cd:28:3e:4f:7e:1a:00:8f:d4:66:
0f:ad:55:c1:5c:c6:c8:c7:06:22:a1:24:99:78:fc:
e5:58:d1:a3:86:00:79:ff:c6:c8:07:e1:cd:4c:2e:
b9:9d:d1:f9:47:9c:5d:8a:e0:67:5a:b7:2b:64:dc:
bc:6a:bf:0d:e5:f4:26:5e:90:85:ff:53:30:41:0b:
8d:ca:37:d2:2a:2d:5c:4e:f4:c2:d4:ca:28:d4:a5:
39:c8:ec:5c:c8:b4:7f:74:9c:b5:19:60:9a:e2:08:
81:e2:91:1d:73:1e:34:81:c5:67:9e:de:63:e1:ae:
62:bd:2d:5e:34:ed:6c:37:93:7e:2d:27:cc:46:b8:
d0:0d:6e:53:53:b6:1d:7a:8f:0b:33:d0:6d:ca:f2:
c2:19:ff:8f:bb:8d:38:c5:75:b0:0f:d0:34:8d:f1:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:67:59:1E:E6:05:6F:C5:A0:1D:59:B7:47:91:C7:32:96:34:64
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:48:77:9f:a8:36:b1:22:64:b7:4e:5c:55:7b:fb:e6:64:
88:a2:a0:96:b4:a1:1d:bc:9b:c9:49:04:8c:4a:9e:4c:e6:35:
7d:bb:25:8f:ff:ba:13:f1:71:cf:61:67:39:75:85:6f:ba:d9:
fe:ac:65:92:bc:14:22:0e:f3:5a:b7:9d:00:af:3c:39:64:5d:
81:93:93:29:bc:3e:d4:a6:73:c7:0c:95:88:98:c8:bc:ee:aa:
81:b4:66:aa:20:0e:8c:ec:6f:14:0a:ab:c4:ca:99:db:aa:f9:
7d:86:d1:1a:95:73:c9:22:c7:11:b0:5f:e0:14:8d:6d:10:24:
e7:99:8d:cf:d6:f1:bc:14:3e:03:7a:4f:f5:94:34:43:50:f8:
0a:89:4f:4f:3c:da:5f:54:d2:29:94:f1:7f:6b:1c:00:e0:0e:
de:50:ae:8b:ea:e8:3d:4e:04:2a:f5:93:4b:bf:21:3d:3b:3a:
97:98:d1:e9:0f:28:1b:75:18:c1:62:fe:5e:ef:4e:f6:fe:80:
f9:e1:a0:64:98:fe:47:a6:c1:72:56:3e:cf:ef:45:a2:7a:b0:
bf:41:61:67:f5:75:1d:52:9f:4c:b0:0b:fe:ec:27:e3:6d:68:
d1:0c:50:6f:64:e4:c7:a3:5f:ca:13:b5:cd:65:26:d5:d0:8e:
78:e3:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:38 2025 by rpki-client