Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier: VmR8QBgusrkn/mvkEl92xs3T3JjxnJ3HysGMmvy6Ie0=
Subject key identifier: 4B:92:16:5F:F0:AE:FE:EF:15:49:80:3F:7B:00:97:45:C4:1D:E1:E5
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial: 0198D65F69A35CBFCDDC3C255914132E2E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: Yw7FEngst6Ot1igGRtVoHElCIyB7adzY4d0ntSnj9yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:69:a3:5c:bf:cd:dc:3c:25:59:14:13:2e:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=4b92165ff0aefeef1549803f7b009745c41de1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:a0:4f:fa:7c:2a:71:5c:c2:d9:fe:e8:46:
c1:83:44:42:cc:81:ca:04:21:1b:d5:ac:d3:4d:4a:
6d:24:52:d7:63:57:7e:f0:c2:ea:e5:83:b4:d4:18:
bd:93:ed:db:a7:d6:04:c0:2b:91:c7:7d:12:8d:72:
f1:02:3e:f0:4c:b1:0e:d5:63:17:ff:4e:2a:4e:38:
5d:09:0e:10:a6:77:c9:af:06:dc:e8:7f:c8:bb:d9:
31:fe:0c:0b:e6:54:36:84:d7:5c:c7:6a:3e:2a:a3:
c8:b2:10:5b:30:c0:72:27:ca:92:fd:ad:e9:a0:86:
ed:fa:05:56:a3:1f:18:23:6f:1b:d7:b4:4b:2c:76:
57:8c:40:03:9f:54:b9:15:66:48:29:1b:e0:e3:f2:
3f:92:92:8a:1b:f6:97:ae:c0:69:ea:43:97:5e:ea:
73:ef:21:71:bb:f3:91:22:82:5e:a9:4d:e6:d7:82:
df:38:9f:a4:67:e1:16:33:44:9d:48:6c:9d:62:04:
08:98:ea:d8:2d:9c:57:9e:c5:68:5f:09:6e:3c:46:
50:4a:ca:7f:e3:17:81:60:97:95:42:c2:b3:e3:e0:
a5:1e:66:aa:dc:8e:f0:dd:64:85:fb:8b:12:ed:45:
db:4b:04:e6:cc:97:f4:0c:da:83:18:50:79:7e:ee:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:16:5F:F0:AE:FE:EF:15:49:80:3F:7B:00:97:45:C4:1D:E1:E5
X509v3 Authority Key Identifier:
keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:83:4a:ee:2b:42:0e:c4:c1:53:5b:2f:1d:a5:32:fa:dd:4d:
23:9e:a3:40:97:7e:35:73:fc:0b:1c:0c:f5:e3:d2:03:b5:c9:
9d:a1:2e:db:78:84:1b:ab:3b:c6:85:5c:97:36:6f:a9:1b:4d:
60:7c:46:6b:11:d5:dd:1f:ca:05:26:6c:5f:7e:5a:0e:dd:f8:
62:30:01:48:0b:45:09:2d:29:80:b2:8f:da:10:fd:1a:7c:8e:
53:73:ff:cd:4e:be:37:26:80:97:01:81:00:ee:ad:12:9a:f6:
f5:b8:20:dc:15:d6:c9:68:16:d7:87:9d:50:fc:08:c7:31:44:
9c:03:e7:03:ae:cd:cd:04:e5:8f:a4:ab:27:20:f7:0a:7e:a1:
7b:11:b6:c2:2a:24:6d:cd:6b:bc:02:11:27:f1:00:7e:c0:c1:
01:a2:c3:62:35:d9:6f:c3:9b:77:37:3c:c9:72:f9:d8:eb:4d:
e2:6d:d6:cd:80:83:2a:15:73:1d:ca:54:33:08:ae:32:44:2a:
5d:2c:74:7a:73:61:b7:ca:3f:1e:0f:15:e0:4b:74:88:e7:a0:
d0:51:81:fa:73:b5:bf:7b:d4:9e:5a:f0:e6:de:5a:9c:d8:a1:
ad:98:62:6b:3e:98:56:b4:e6:89:f1:42:de:7e:00:f2:99:ca:
c1:ff:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:20:11 2025 by rpki-client