Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier: HGmaG9I2+O+AKBUTZWJjBTT6u9YYCNTEGEbXvNg3RMI=
Subject key identifier: 46:A4:7E:21:01:AE:76:26:90:EE:BF:8A:23:5E:EC:4E:C7:E5:23:CE
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0198D70634DB2EB28240D347199748764A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number: 1635
Signing time: Sat 23 Aug 2025 13:02:44 +0000
Manifest this update: Sat 23 Aug 2025 13:02:44 +0000
Manifest next update: Sun 24 Aug 2025 13:02:44 +0000
Files and hashes: 1: 5igPCN9X0bgxG5uECn6Ix_J7HO4.roa (hash: pevu2Sy44NywHg7YV7OVl6vYE/WCVHhk1qeVOAIs4Q0=)
2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=)
3: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=)
4: RCBkFFwBEsQ7ba3phjJnBaHWzQs.roa (hash: dQAPkn8OvvoRT06i7f3Wfx+4CzwKeoY4qVg/zCKUGxs=)
5: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
6: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: C5TZyuWahtS0vQ/DyKVt4PpHMaL3S1yL1KCUvFGtk+w=)
7: jgHkgotwUlDa7vyV8NwpOKOQ3Bg.roa (hash: CARcq+MM79jGs0AyYYQWuKyff+oBzRUmXWJMUB4WUF8=)
8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:34:db:2e:b2:82:40:d3:47:19:97:48:76:4a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 23 13:02:44 2025 GMT
Not After : Aug 24 13:02:44 2025 GMT
Subject: CN=46a47e2101ae762690eebf8a235eec4ec7e523ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:85:5a:c1:27:ba:18:a1:64:0f:9e:d0:5c:
ab:aa:ec:1c:62:bd:95:e0:9c:3c:f3:a5:51:79:b6:
d3:ac:78:9e:79:a7:ea:62:70:85:13:e5:2f:af:54:
14:42:85:b6:19:d7:50:4a:c1:b2:90:8f:a4:28:56:
fe:8d:db:ad:13:be:f1:4e:17:18:9e:c7:bf:03:ac:
c9:10:f1:c2:e9:08:f0:e5:84:b0:e4:a1:8a:d6:36:
ec:37:69:fd:70:c5:1e:f1:0e:96:a4:52:1e:04:e5:
e8:38:0d:b6:b1:62:30:1e:99:d2:6e:ba:ed:d6:b5:
7e:ff:7d:11:e5:5a:2b:5c:5b:97:76:2a:89:4b:b8:
1f:af:08:c9:29:48:f1:f4:03:bf:2c:15:56:2f:0c:
4b:99:65:48:5a:73:aa:ed:45:2f:62:ce:40:ec:f5:
a8:43:23:be:f2:bd:56:81:06:1a:8a:df:62:10:9b:
56:c2:7e:c4:b0:cc:f9:ce:e0:e0:9f:63:ee:29:7a:
e9:82:49:4c:a8:a9:1b:84:26:46:85:d0:60:84:f0:
8a:7f:cc:3c:ac:87:3b:58:66:35:a1:98:45:a2:2d:
ae:cb:1c:12:79:8f:db:cd:a9:c3:73:31:ff:9b:22:
2f:40:7f:26:6d:7a:82:82:b9:99:c5:d7:62:56:af:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:7E:21:01:AE:76:26:90:EE:BF:8A:23:5E:EC:4E:C7:E5:23:CE
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:bc:7a:49:1f:c0:ac:ea:27:17:37:f4:53:5d:7a:ef:22:
5c:97:10:37:14:dd:84:72:8b:a3:41:30:64:d3:d4:03:40:15:
3a:c2:72:d5:77:6a:d5:72:c8:24:eb:d9:57:b3:78:80:ed:37:
70:dd:2d:e5:cf:23:b5:b5:c8:af:85:a5:24:dc:24:68:4f:a1:
ba:6d:77:89:4a:1b:45:cc:f3:70:aa:56:9c:ec:a4:14:24:89:
e5:f9:1b:c3:98:68:6a:e5:49:e1:80:79:3d:53:b8:87:e2:31:
67:71:4e:53:7e:ef:76:22:2d:ed:e9:45:dc:8d:e2:78:04:32:
e7:27:31:8e:cd:d4:c2:dd:f4:26:02:62:25:78:81:8d:55:a2:
40:99:30:4c:46:01:15:60:35:b6:7e:d3:69:99:f5:ed:ea:47:
28:bc:ce:b1:08:66:13:50:a9:e0:66:e1:ad:f3:03:16:c2:07:
fc:4a:57:21:10:e2:da:35:d5:ca:58:19:88:3b:ee:5c:eb:20:
27:9f:d3:53:8e:2a:db:95:be:68:88:b5:34:6d:7c:57:b4:35:
f6:2e:60:38:1c:ae:a7:c9:f1:43:50:83:e2:db:ac:94:f0:8c:
8e:7d:22:75:98:e6:9c:f6:3c:c8:2e:41:4c:cd:a7:9f:52:66:
0f:8c:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:48 2025 by rpki-client