Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
File: iqrwV67ry_cGh34qqnSjljgL4hU.mft (raw, json)
Hash identifier: 0wyVzf0gUKv+N2r3SGGXEZDvxya8mo5ib1d6Aga+2pU=
Subject key identifier: D7:48:1D:E4:02:99:1A:6C:19:97:D6:9C:A8:99:5D:E0:70:E1:F1:AA
Authority key identifier: 8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
Certificate issuer: /CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Certificate serial: 0198D515A52A108B23B59E00DBF73557595E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
Manifest number: 03DB
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: iqrwV67ry_cGh34qqnSjljgL4hU.crl (hash: 3wO8PgRx4NykpJThHidhnSsKjIS3n4SOJb+Kt1w6yhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a5:2a:10:8b:23:b5:9e:00:db:f7:35:57:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=d7481de402991a6c1997d69ca8995de070e1f1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:6c:61:a2:d3:54:8b:e6:cd:2e:35:39:d9:
eb:5f:17:0a:25:ce:9f:66:aa:d7:b8:d3:95:7d:13:
d0:e6:46:c5:97:c3:21:cb:15:6a:18:f9:0a:72:1f:
75:24:f3:eb:28:2c:a8:32:19:29:72:a1:27:b6:63:
4e:f6:18:81:72:9d:0f:80:c6:7c:f9:1f:4a:fa:ec:
d2:da:0d:85:0d:8f:0b:f0:8f:76:b5:d9:12:8e:b4:
39:ae:30:79:2a:91:e3:ea:ff:1a:14:ac:16:0c:8c:
5f:31:ae:f9:5f:b4:44:59:02:9a:3d:8d:70:e9:d9:
bc:3d:92:ae:ef:49:4f:e7:1f:6f:ab:7d:78:ea:83:
a8:bb:02:6f:16:d6:75:3d:aa:10:9e:dc:21:bb:49:
14:e9:d1:db:d1:0f:01:28:8f:6a:a9:e1:5e:5c:5d:
d9:3f:87:91:0b:bc:bf:0c:7e:42:2f:ba:9b:67:78:
6e:fd:85:dd:cf:87:a7:51:8d:a3:07:d1:c2:27:d1:
07:45:00:99:66:56:79:64:da:78:23:81:80:eb:45:
c2:4c:4f:79:6b:26:cd:2b:a2:4d:44:c4:9e:30:59:
60:50:2b:f1:a8:76:26:22:4b:81:c5:d2:d0:b0:d0:
3e:ed:f3:18:b5:4b:86:93:46:69:48:2f:54:3a:0c:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:1D:E4:02:99:1A:6C:19:97:D6:9C:A8:99:5D:E0:70:E1:F1:AA
X509v3 Authority Key Identifier:
keyid:8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:11:f6:a7:30:cf:ed:12:05:d2:54:1b:86:a6:88:c2:42:90:
9b:0b:6f:40:d5:e3:d6:ba:fa:f9:7a:f0:1f:d7:7f:48:6b:e7:
aa:5c:a6:27:eb:e6:62:68:2f:1a:8a:7d:45:4e:86:bd:11:5f:
2f:4a:9b:cf:07:76:eb:93:00:8b:eb:e3:ce:45:28:d3:2e:0e:
e5:9c:ef:c9:af:7e:d7:9a:fc:9b:fb:44:0d:2e:65:13:f7:f4:
b6:05:25:c5:6e:74:23:cb:a8:76:31:28:b1:c6:e9:95:96:b1:
93:26:81:c8:f4:10:f7:7c:3b:1d:4d:cd:64:28:ad:ba:da:5b:
a6:9e:f1:7e:c9:ea:c9:a1:97:18:25:97:25:8a:fb:be:57:bf:
97:39:b2:56:f5:8a:28:96:31:d9:a4:fe:dc:a7:d8:8d:06:1d:
d2:7f:c0:ec:59:9e:72:9a:26:be:e3:c7:6f:ab:d5:ad:48:30:
9b:86:cb:33:8d:80:30:82:ef:e5:b1:8b:07:69:8c:79:f7:c5:
f8:2f:54:45:f0:bf:82:44:0b:b9:fc:cb:7e:b2:d6:54:c6:23:
b4:69:69:9c:a4:e7:69:e0:3b:f0:ed:99:b0:ad:2a:f5:64:db:
7f:87:34:75:05:82:de:8c:2a:c6:37:81:30:43:2b:8e:42:a3:
20:f5:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:38 2025 by rpki-client