Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: wzSYOH1jTzdEfUXNV15xjnRoL93i2/MnEK07RnqHqOo=
Subject key identifier: 21:F3:4A:4D:C7:7F:CF:AC:5C:F4:F0:94:9A:1D:D2:32:B3:1D:7B:D9
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 0198D65F64223254CC8AF61EF8817BEEFC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1339
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: 7Rryn7N6rNVfsJlzVUrBioUp2WfaYeluGqFHzCvwK0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:64:22:32:54:cc:8a:f6:1e:f8:81:7b:ee:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=21f34a4dc77fcfac5cf4f0949a1dd232b31d7bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:4c:1a:bc:5e:8f:6b:26:24:a3:2f:dc:6e:
ee:d1:05:86:87:11:ab:db:0d:30:66:4c:97:91:97:
65:ca:d9:24:66:7b:37:42:6e:37:92:13:a5:5c:5f:
3a:23:fd:19:62:3b:0f:63:5b:20:63:3a:8d:6b:38:
43:e8:1f:eb:73:96:29:ce:18:aa:0f:09:8a:13:26:
e4:c2:7d:00:5e:e8:63:7f:da:54:3e:8d:47:7a:e8:
12:a9:4c:0d:65:4e:63:b3:09:e7:7c:1f:d1:19:e5:
04:b7:25:af:57:a3:1e:0d:b7:54:58:1c:56:29:cd:
ab:73:dd:65:56:43:89:33:43:66:f0:93:81:4c:c5:
ff:05:a4:36:f4:69:c1:91:e3:2f:80:45:7a:46:cb:
0d:6d:60:7b:02:5f:7d:d3:18:ad:76:a0:60:5a:a6:
e5:4a:f3:22:15:e1:fb:15:3e:39:3f:2f:24:04:14:
86:9e:00:d1:60:42:3d:70:90:05:39:6c:77:81:57:
a3:f0:9f:b1:88:12:3c:07:e7:29:d5:b3:60:b0:cf:
65:a4:2c:1a:f6:ae:17:c0:79:0f:75:5a:1f:dd:8c:
e5:6c:c8:9f:8a:f1:35:61:0d:9b:34:51:0a:a9:d5:
dd:e5:b3:3c:07:e4:61:db:f6:ee:e6:8a:b4:75:ac:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:4A:4D:C7:7F:CF:AC:5C:F4:F0:94:9A:1D:D2:32:B3:1D:7B:D9
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:7a:51:e7:5e:e1:b4:fd:f2:84:97:62:da:7a:aa:82:73:
77:81:7a:ab:e2:41:35:c1:16:b2:29:88:2c:96:fc:e3:cd:2d:
cb:cb:27:f7:0f:e2:7a:94:40:b9:4c:e1:f1:f1:cf:d6:d8:e1:
79:4f:04:9a:32:bd:b3:45:d0:32:9a:dc:49:bc:92:00:cd:0a:
05:ee:f7:bd:e9:51:69:63:0e:1c:bc:a1:93:24:a9:8a:d6:f6:
20:1b:9f:93:be:d3:e8:85:cb:8b:c3:24:af:b4:b3:47:03:cb:
f9:4c:f8:dd:ac:b4:32:3d:9e:a4:5e:b1:65:15:69:d2:e1:5f:
f5:3c:14:68:a7:b3:46:c9:94:ed:25:50:03:a3:0a:cf:d8:e4:
05:e0:e3:52:b3:e3:0c:4f:ab:21:86:a6:1b:53:bb:6d:aa:c0:
8f:78:f8:73:d8:e7:af:b9:82:3b:e7:26:3a:cb:67:a6:de:8d:
9b:28:51:18:cf:a9:14:cd:cb:56:38:f6:0a:5b:d8:e8:45:a1:
2f:25:9a:b9:03:58:2d:e3:f0:0d:dd:58:ac:c4:9e:bc:7e:85:
c1:e2:0b:0e:c3:a7:41:4a:a9:89:bd:27:e9:f7:67:bc:1a:ca:
91:e0:e2:6a:e1:e5:b6:16:25:46:a0:68:b6:3d:d5:fd:04:be:
c0:b8:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:17 2025 by rpki-client