Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: Uc0NPavIeaLDtM+UtWmsdd7erQssxZSr0bvqzVLoL2Y=
Subject key identifier: 13:6F:56:84:61:94:96:E8:E0:2D:1D:53:00:00:23:5E:0D:21:4E:AC
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 0198D51584FDCC99F46B002D5B1EED56D3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1345
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: 0c5HuABadZHyRHjo/QhfCa+3mYSEdYG1EkR9fLxEnZA=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:84:fd:cc:99:f4:6b:00:2d:5b:1e:ed:56:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=136f5684619496e8e02d1d530000235e0d214eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:41:b1:f2:eb:b5:60:2c:da:1f:21:50:cb:
04:7f:0d:b8:70:8a:cc:a1:8f:be:94:a3:79:28:be:
12:1f:d9:9b:f2:78:7c:7e:09:30:5e:37:ca:90:09:
56:f4:87:8d:9c:fa:c5:ab:79:7c:16:f4:c5:28:e8:
73:d9:07:82:0f:72:f8:cf:23:33:ac:96:02:44:13:
75:76:9a:22:18:4a:91:6f:1b:be:ab:d8:c8:07:60:
4b:20:9d:82:b8:0d:5e:02:9e:f6:d7:08:34:b6:cb:
be:8e:2f:8c:aa:dd:24:60:be:48:29:de:9d:4e:e4:
1e:92:09:4d:6b:bf:35:68:ed:91:c8:59:ee:a2:15:
55:57:c1:01:7c:c3:ee:1e:a1:17:8a:4d:bd:b6:45:
88:78:2b:a2:53:8d:7f:0d:9b:18:af:29:79:92:3f:
40:f9:54:97:f3:09:6a:f8:c0:3f:bf:e2:ca:8c:8f:
58:cc:90:9e:d3:35:35:fa:a7:21:37:b1:fd:4f:8e:
ad:77:b8:94:dc:fb:70:57:37:07:ef:e9:55:0f:39:
27:f8:d8:c3:14:fb:6f:94:88:0e:98:fc:5a:d4:cd:
84:e0:e6:10:47:0a:c5:50:31:c4:79:eb:0e:12:a8:
09:0c:09:7f:a4:9d:b2:ce:1b:53:62:7c:26:ed:d3:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:56:84:61:94:96:E8:E0:2D:1D:53:00:00:23:5E:0D:21:4E:AC
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:2b:5a:fc:5e:09:c7:21:a1:24:93:5c:d5:63:14:e0:60:
a7:b2:03:5f:a6:fb:d1:cf:ed:c3:9b:98:78:0c:a2:8b:cc:4f:
e2:d5:7f:dd:ad:f6:29:70:ba:68:f9:33:78:74:24:7e:f1:21:
75:1e:30:35:8e:17:64:d7:83:1d:cb:7f:7f:b6:83:2a:50:24:
fe:e2:d2:c7:31:d2:d7:55:06:99:50:6a:3a:9c:3c:e1:5d:05:
b7:c0:c6:cd:93:c0:0b:a9:e0:55:68:14:38:2d:e9:d5:8b:9a:
df:b4:1e:dc:2e:ad:5a:c0:29:a8:d5:e4:d3:da:c5:92:0a:7b:
97:80:41:50:63:c3:a7:a8:3e:ad:36:20:f1:d0:51:49:dd:47:
1d:a4:79:38:ae:cb:3c:56:96:2f:08:3a:c0:6e:47:5a:0c:f4:
54:8c:d0:ad:b8:5f:ad:45:ad:40:4b:1c:95:5a:59:74:1a:28:
e9:47:a9:6e:78:6c:3b:71:88:07:bd:1b:c5:42:a6:72:20:88:
e3:bb:08:e3:c1:8a:39:ef:3d:51:71:7d:2a:49:5d:00:e1:5a:
ae:3f:f7:ba:28:54:07:e6:54:37:23:6f:a5:ce:fa:e9:30:a7:
a8:3b:5f:79:d5:41:c8:cd:7a:8c:9b:88:fa:52:1f:11:cd:f5:
05:19:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:07 2025 by rpki-client