Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: l6XMzKU96DprnGnm4j4BlUlIEOtbC63UisqcrTHG0Tc=
Subject key identifier: CD:1E:23:2D:D7:2F:BA:73:96:F8:E5:56:3F:D0:6D:0F:4F:3F:B5:DD
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0198D6986C5CD9ABC40E3E47661F9017E2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 126D
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: ctWyYTwFwz4egW06/059nE7Q5c/t3XXNEI5s+NMfrNQ=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6c:5c:d9:ab:c4:0e:3e:47:66:1f:90:17:e2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=cd1e232dd72fba7396f8e5563fd06d0f4f3fb5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:ad:3a:3b:0b:66:40:bd:cf:83:af:8d:a2:
a9:f0:11:29:3b:66:a5:49:08:e1:e8:b9:fa:0b:fb:
75:33:65:84:25:c9:68:8f:e0:93:8c:3a:57:01:95:
c0:18:c9:4f:55:15:ad:bb:9c:8c:e9:46:06:35:d9:
c9:ef:f6:96:1b:dc:4f:13:81:63:2e:c4:6a:51:ef:
a2:17:17:8d:d8:0b:2a:a9:c1:28:f8:c6:26:27:0d:
6f:93:5b:45:dd:8d:44:20:3d:e8:8b:bf:d0:32:0d:
85:27:91:86:c4:a7:79:9b:c8:f4:94:cf:56:28:a6:
9a:86:86:53:be:13:8c:fd:bb:82:79:18:ed:5a:c7:
8a:c1:65:80:08:84:89:96:1c:b2:ac:c1:23:8d:53:
67:8e:96:4d:0d:2b:7b:9d:5b:5b:7f:f2:e4:d0:39:
13:49:ff:3d:53:34:c3:b2:ae:5d:09:d1:1f:ec:68:
60:af:04:70:df:ef:78:0d:83:37:af:4c:be:ca:ba:
4f:5e:06:10:08:7d:39:57:c4:eb:c4:48:a2:0c:62:
16:a9:e8:62:f5:a5:3d:a6:8a:66:62:9b:1d:10:34:
ef:ee:84:cc:69:7f:cc:9d:30:48:49:ca:05:d6:7a:
3a:0f:81:0d:86:0f:dd:d5:80:2f:f0:18:6e:3e:ee:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:23:2D:D7:2F:BA:73:96:F8:E5:56:3F:D0:6D:0F:4F:3F:B5:DD
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:06:48:a3:7f:da:a6:21:3b:ad:9b:db:11:d0:2f:11:9f:
2c:50:36:3d:15:2f:de:b5:dd:25:6b:74:e8:c3:ab:78:da:5e:
ca:c7:b9:7e:cb:80:32:ca:42:5d:ba:99:63:0b:46:c5:27:d3:
b5:9b:08:b7:74:48:67:fb:56:d5:c1:7f:5b:4c:ca:c3:6a:90:
5b:21:23:96:b3:1b:94:61:0d:33:40:e3:f8:7d:b0:09:53:e0:
14:0d:bf:fe:0f:4e:93:a3:35:76:2c:33:b2:b9:a3:ab:42:cc:
78:43:e2:d4:b3:e3:04:c5:ba:5e:69:b8:67:41:fb:67:c4:03:
cf:ff:50:6e:8c:2d:e8:29:6d:ea:4d:85:e7:a1:80:c8:a8:57:
39:d7:a1:23:d2:4c:97:5c:72:b3:72:e4:5a:eb:73:2f:b8:f1:
10:6f:eb:e9:79:70:dd:aa:bc:43:40:23:96:03:1a:b0:24:80:
3b:5e:43:f3:dc:bc:ad:3e:14:8b:09:a9:98:ee:f8:91:7f:b8:
65:8a:21:fd:fc:d2:0c:9f:c6:15:d8:40:15:b0:eb:56:d0:93:
a3:8b:b4:c2:8d:a2:d5:f6:23:d5:02:f9:ab:e7:35:e1:0e:d2:
2b:60:dc:9c:b2:36:64:82:a3:7a:96:95:2a:7f:fd:96:03:50:
05:31:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:07 2025 by rpki-client