Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier: 9QzOcAeA4+soCqXjbGCh+dYsHCelt7wr7nizY7iNC6o=
Subject key identifier: B9:14:F0:1F:02:1A:FC:E5:7A:83:58:3A:F4:6E:C7:6E:82:38:76:EE
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial: 019A01B6499FF49966697AAC607D320363C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 13:01:54 +0000
Manifest this update: Mon 20 Oct 2025 13:01:54 +0000
Manifest next update: Tue 21 Oct 2025 13:01:54 +0000
Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: MB3DayaM48LwOGLc0ZskwjRICssnYnr6l5F0d30iOZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:49:9f:f4:99:66:69:7a:ac:60:7d:32:03:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
Validity
Not Before: Oct 20 13:01:54 2025 GMT
Not After : Oct 21 13:01:54 2025 GMT
Subject: CN=b914f01f021afce57a83583af46ec76e823876ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:48:85:dc:f4:ee:33:ac:5d:78:e8:81:b6:
7e:56:00:ac:0f:c2:f4:4b:fb:57:63:be:5b:88:a2:
4d:97:43:41:ad:aa:1b:42:ba:4a:46:a2:25:a6:7e:
5d:31:61:93:20:4a:e8:23:d4:a7:4f:c4:10:30:5e:
3a:ca:30:00:4a:04:7c:a3:65:03:21:34:c1:f8:41:
08:22:fe:e6:12:78:b6:89:84:cd:32:a3:38:26:e0:
11:c3:43:b0:0f:53:df:79:cd:3a:5e:0b:18:69:7f:
43:e6:e5:06:7c:91:d9:9d:54:45:0b:77:71:65:ef:
fd:31:15:7b:e1:3a:3d:cb:0c:ac:a8:cf:4e:3d:61:
b1:7a:cf:1d:d1:cf:38:ec:7f:ef:4c:cf:fe:67:01:
99:30:41:36:2c:91:97:d4:3a:77:dd:58:3d:c1:e0:
0c:c3:5b:40:1f:a3:4f:d7:07:12:d2:38:44:c2:79:
d1:22:5e:b4:34:5d:26:5a:f9:f1:a0:c8:24:7d:aa:
0f:e7:8e:d5:4d:b7:5d:2d:14:2d:32:b2:f9:1f:3b:
bc:ec:f6:c5:30:f5:14:6a:79:8f:83:ed:4b:31:7a:
f7:9d:b2:3a:c1:a2:87:77:f6:90:b0:b5:b7:15:86:
b4:3e:50:5f:af:a0:a9:53:fe:9a:dd:ad:52:48:eb:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:F0:1F:02:1A:FC:E5:7A:83:58:3A:F4:6E:C7:6E:82:38:76:EE
X509v3 Authority Key Identifier:
keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:2e:93:1e:08:3b:6d:64:b2:c4:db:7c:fa:2d:d7:94:7c:
ba:3d:24:de:13:d8:9f:92:bd:67:e1:59:d4:1e:16:39:c2:3e:
02:95:95:23:99:1e:0f:c3:85:75:0c:5c:9f:e6:92:0e:6e:cb:
f0:c5:64:7b:48:ec:5e:ee:92:00:95:69:8e:c4:4a:7f:69:ca:
72:a3:b5:0b:91:9a:da:31:b2:ba:12:be:b6:0a:78:22:0d:e9:
1f:ed:b3:fe:cb:16:14:97:1d:15:d9:3d:a7:c7:ec:bc:b4:5b:
54:0c:83:30:75:ae:c0:42:de:ce:02:bc:c6:f1:7e:66:de:ff:
55:b2:53:6c:aa:e0:66:35:db:65:cb:1e:35:de:47:3b:25:26:
d5:18:77:d3:a8:1b:2c:1f:00:b3:47:7f:98:38:99:d0:c7:8f:
e9:12:dc:5e:23:89:c2:24:56:cd:e3:93:e3:1e:a0:c8:0c:63:
8e:84:82:32:19:fb:7a:e2:6f:0b:28:9d:e6:23:1c:c4:7e:e2:
ad:b9:1a:97:95:9b:8b:35:82:df:da:84:81:68:f8:76:00:44:
b4:8b:b0:7e:0a:62:d9:dd:bd:f4:34:0c:bf:6d:e6:c8:86:d4:
40:8e:aa:28:d8:d2:18:a6:5e:6b:36:34:d7:48:5f:83:fc:41:
a3:a3:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:09 2025 by rpki-client