Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: 0YDghCY2/E8+JnEgZ3D0NZ6QW8Lt+K7JB8xJifzQEhc=
Subject key identifier: 01:43:C0:AC:AF:74:75:A9:90:33:F0:8B:38:38:FA:5E:C9:89:E5:5C
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 0198D516133BA42E837F5999A68B09C27EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 12DE
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: eMaipE+FYb37ShoF8O5lyLBC3d7o8emAuFI/SbQJ8xE=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:13:3b:a4:2e:83:7f:59:99:a6:8b:09:c2:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=0143c0acaf7475a99033f08b3838fa5ec989e55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:30:f7:c5:67:c7:cd:54:5f:79:bc:62:d2:
ae:5b:2b:56:a3:17:16:22:44:f3:74:aa:cc:7b:81:
ef:47:09:86:57:2f:5a:92:49:62:9f:25:83:21:0e:
4e:dd:b7:52:c1:65:ec:ae:89:b3:58:ed:1a:0b:bc:
23:cf:e0:c9:a4:32:db:e5:79:84:da:45:67:21:0c:
e0:14:49:45:94:70:8a:2d:6c:44:16:d7:df:09:85:
49:db:0a:f3:63:90:5c:7e:44:cd:34:3c:73:dd:15:
00:f6:57:13:8e:cf:06:87:a9:08:e6:04:a3:73:fd:
89:21:a2:1b:b8:4f:7b:ce:05:40:64:2e:41:0e:56:
b9:f9:b7:21:33:0d:54:8d:0d:fd:9c:51:0b:cc:bb:
ef:c3:03:92:e8:f6:79:cd:de:5f:03:30:38:3d:24:
8d:b3:cb:4e:5f:22:ba:88:cd:5b:a5:96:19:6a:6c:
98:9d:87:6e:1b:cb:a7:bd:76:b9:eb:a4:91:76:9a:
81:d6:83:a7:31:e3:1b:20:af:38:22:ea:c1:2e:7b:
8d:54:da:b6:aa:f0:e5:db:46:da:6b:5c:f9:f9:71:
d8:54:dd:80:c6:1f:f8:d8:7c:c5:df:ca:4b:cc:6b:
24:08:9b:03:1c:ec:be:b8:1c:f8:5d:00:05:10:57:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:C0:AC:AF:74:75:A9:90:33:F0:8B:38:38:FA:5E:C9:89:E5:5C
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:0d:b8:16:c5:09:9e:8e:ff:b1:a2:39:c2:30:c8:0a:e0:
d7:29:8e:a4:1e:19:38:43:92:33:fa:56:b5:d3:42:f4:a7:a0:
53:e2:1f:9b:1d:99:2e:9b:ff:f0:6f:76:0d:80:af:c1:f6:a2:
33:c7:8c:1a:93:f5:26:f0:77:5e:05:57:c6:49:05:5b:95:1d:
6b:e2:2a:5d:d6:ad:6d:99:47:5a:0a:6f:90:bd:70:f0:13:30:
7a:a8:f0:16:12:f8:05:f3:2d:07:f1:59:7a:ad:5e:1a:41:35:
8d:fa:f5:e7:65:89:f6:a6:55:de:00:69:9b:a2:12:0c:e1:19:
33:0f:f2:fa:0a:34:3a:22:d5:47:82:4f:70:4e:2f:d5:7b:98:
83:0f:fe:ef:d5:b4:2b:d3:15:fc:a0:80:8c:53:de:a8:50:48:
fa:6e:72:90:bd:8a:5d:e6:45:3f:5f:63:5e:05:9f:1c:fa:0a:
45:85:c8:a0:ba:1a:49:9c:89:99:72:a5:94:05:01:df:79:96:
d1:1c:b2:65:a0:5c:21:6c:f7:92:c3:b9:54:c2:18:61:94:02:
22:99:cf:76:7c:0e:00:de:d6:d8:16:58:0e:29:8a:f2:50:d2:
04:34:c8:64:8a:d9:9e:f3:cd:ed:86:31:da:c1:f9:f6:a9:ca:
ac:b3:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:03 2025 by rpki-client