Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: f9f7Htn2z7G4r6F0RFR0379/RXXAm2Bazk6kSdNvl0k=
Subject key identifier: 70:69:27:E1:44:82:33:63:97:4D:4B:12:65:17:DD:F0:EC:D6:9D:7B
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 0198D4DFD513D6FD6BDC4399A972A8CC2437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 08C2
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: APvsXJd4EInkcp53uuNMlsWQFd1rTbHc8RtKa6yEUAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d5:13:d6:fd:6b:dc:43:99:a9:72:a8:cc:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=706927e144823363974d4b126517ddf0ecd69d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:b7:ba:93:fc:4b:5e:42:cd:56:f6:e4:e4:
b3:17:57:3c:16:71:1a:f9:d0:00:7d:7c:3f:46:b7:
f7:d9:eb:b7:96:f8:56:2f:bc:90:01:d7:4d:0b:e3:
bf:2b:dc:e6:c5:1a:69:26:b0:3a:52:29:1c:3b:08:
46:1f:92:e8:b8:a8:7f:ec:46:e4:af:97:a3:97:c3:
6a:36:b1:c7:3f:20:43:65:8c:26:60:e3:01:d9:da:
0e:2b:96:83:61:13:d6:db:9b:b4:a4:4f:ad:8e:75:
94:83:9b:55:41:23:1e:4f:81:3d:26:5c:8a:b9:45:
51:8a:86:94:1d:e6:aa:f5:81:92:b4:56:07:5b:4e:
93:55:80:99:66:f7:a0:23:1e:a1:32:36:27:09:51:
40:55:08:a4:7c:33:6f:99:a7:ca:9d:4d:6d:8d:9f:
34:e7:4a:ed:bd:e5:fc:4d:b7:6e:3d:ad:f5:b3:a9:
a4:8e:c5:f2:1f:73:f7:9a:a7:82:7e:58:38:86:10:
22:e5:21:aa:49:bc:39:f0:65:dc:83:74:4c:14:60:
45:91:86:fd:d7:24:78:08:2f:38:e4:2d:39:14:b7:
e4:44:76:f7:97:ae:d0:26:09:bd:73:4e:65:41:bd:
3d:69:be:06:29:de:f2:9e:ab:ae:97:6d:1b:68:c3:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:27:E1:44:82:33:63:97:4D:4B:12:65:17:DD:F0:EC:D6:9D:7B
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5e:b7:cc:69:24:96:57:ed:b7:e9:58:32:5b:7f:5d:b9:5f:
d3:2a:c9:fd:55:a2:e8:ad:d2:41:84:38:68:e4:7a:a6:ac:88:
4d:e3:85:24:56:7f:0a:32:ce:fd:88:dc:a5:c7:3b:58:6d:29:
57:68:6b:3c:be:5a:f9:17:51:32:88:37:93:b9:1d:e3:52:6f:
e0:46:99:10:e1:e2:92:a3:ef:26:f3:bc:33:34:4e:18:63:e5:
11:04:92:c6:bc:ff:f5:85:6d:e4:71:e9:4e:6d:f8:4c:03:34:
b3:26:4a:a1:d4:06:3d:3f:83:21:55:11:7d:99:c8:b9:dd:9f:
8d:61:14:48:33:8f:08:7a:06:a2:e1:a8:8e:9a:81:1e:32:0e:
25:81:49:60:4e:07:08:e3:f7:0f:3e:fe:08:0e:fc:5f:76:62:
3e:13:8a:31:83:eb:31:10:4a:ad:4f:d3:a6:8f:35:50:0c:29:
b1:5e:f0:01:bd:1b:40:47:24:b4:61:43:9e:8c:4c:3c:e7:eb:
85:05:03:08:24:83:59:63:6b:cc:48:88:3a:29:44:a4:f0:79:
88:16:31:6a:e7:1c:14:fc:4d:c5:57:07:21:7c:59:5b:cd:8e:
20:e7:84:1e:78:da:4c:37:d3:9b:a6:18:9a:fa:ad:3c:5a:e4:
c6:95:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:45 2025 by rpki-client