Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: xzITk4ha8hSuORQpfkRfjJ9nfUnwrfTmVHFbIzEAgDI=
Subject key identifier: 70:B6:AB:4A:C5:37:FB:74:EB:90:79:09:E1:71:A1:C9:9F:57:1F:16
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 0198D4E0A9D99300488468B7EAFFF684BBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (hash: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: ES5nSTsTKh610yq8se/tZS9nMw+4o2ympV5sfNBL+DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a9:d9:93:00:48:84:68:b7:ea:ff:f6:84:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=70b6ab4ac537fb74eb907909e171a1c99f571f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:e4:24:a6:cf:77:f3:0c:5b:39:e2:3d:8c:
af:26:75:d9:ff:9d:82:1d:b7:0a:22:48:01:84:6c:
3c:62:90:2a:81:c0:8b:90:38:0b:2b:d8:32:63:15:
34:8b:34:25:a4:fc:b1:5e:e7:a1:27:73:2a:0c:9c:
a2:87:97:90:11:1e:3a:b7:32:00:f4:1e:c9:86:ed:
2a:79:64:e0:72:a1:39:69:9a:be:56:7c:a0:94:ed:
7d:82:3d:8c:53:3c:3f:61:bb:96:25:73:35:4d:f9:
eb:3b:d4:96:70:80:fd:ab:9b:57:39:2e:d3:fd:1b:
55:e6:f5:a5:2a:86:2e:b5:a2:9d:d3:e2:a7:96:9a:
dd:3e:42:b8:b2:c8:97:5a:b5:bf:2f:ad:00:32:78:
12:96:77:d0:a6:18:4e:9d:c8:e1:d0:22:ea:54:27:
7d:c2:c4:79:29:ab:3f:ec:bd:8e:7f:15:80:97:b7:
36:6b:b7:73:73:2e:f4:71:ab:df:1c:25:23:11:05:
68:fa:0a:13:35:32:78:fa:8a:84:a7:c0:0c:8b:17:
ad:be:1c:e1:9a:b8:0e:55:63:b2:55:bd:b5:7c:5b:
fb:c9:28:e3:9e:24:7a:bf:19:cd:04:ba:f5:a4:be:
14:c9:a2:4e:a4:a4:4e:3f:70:aa:47:29:6e:17:47:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:AB:4A:C5:37:FB:74:EB:90:79:09:E1:71:A1:C9:9F:57:1F:16
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d0:93:15:01:8c:49:3c:fb:11:00:1d:20:1f:40:97:11:d0:
aa:f4:6d:1b:4f:f4:1c:c3:42:ee:64:8d:c7:49:eb:0c:6b:87:
2b:ed:11:82:2a:bb:a5:ff:28:ea:80:31:05:62:67:f2:d0:d3:
34:cc:36:e7:10:26:65:12:c2:07:30:5b:ad:3b:fc:59:a3:d8:
b3:9d:c6:45:e7:60:31:b0:86:7d:94:4b:44:da:85:4d:e8:9f:
b3:86:bd:51:be:fd:27:6a:c3:2f:94:77:cd:4b:e9:65:32:db:
fc:fb:66:a9:b9:84:33:67:d7:0a:59:6e:a1:75:6f:dc:d3:bd:
11:3d:78:cf:bf:4e:63:2d:93:98:a7:9b:6f:3d:51:23:b7:5d:
46:7f:1a:b1:a9:81:cd:5e:e4:c7:2b:11:a2:0c:f1:94:b4:ce:
74:7b:d6:87:8b:51:c5:c2:f3:72:43:a3:d6:2d:f0:9a:2e:f2:
12:8b:96:1d:8c:a7:b7:1d:a6:c1:3c:8b:b6:83:ef:d9:4d:05:
2a:a5:37:5e:72:9a:39:5c:7e:29:9c:b1:90:2f:97:98:c1:1b:
af:fe:0d:fa:20:6f:ae:bc:d0:c6:df:53:64:6d:ae:34:fc:45:
75:83:bc:de:9a:45:ad:b2:05:f5:86:27:3c:63:35:b9:7d:d3:
55:a4:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:21 2025 by rpki-client