Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File: IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier: LLYf279pUrqYZ8AvxNbldymjFwBHc7VTdzHa9Healss=
Subject key identifier: 6A:8E:CA:7A:66:23:61:D1:B6:FD:C1:3E:08:C6:A3:DC:CC:12:29:BF
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer: /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial: 0198D4A81B40558ED89913D7E4B4DD633800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number: 057D
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: ywKjO3acILco6IIXRP1CXjfxG7bsAa+w7g7okdZHuLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1b:40:55:8e:d8:99:13:d7:e4:b4:dd:63:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=6a8eca7a662361d1b6fdc13e08c6a3dccc1229bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:8c:47:a4:28:9f:08:2a:14:44:60:77:ff:
23:9a:48:97:00:fe:11:fc:d3:17:ec:2e:21:5c:f4:
09:c5:ed:9b:6c:01:a2:11:33:2b:88:d8:dd:cf:fc:
45:88:06:fb:45:87:23:3e:6a:43:07:8f:f5:02:c5:
04:56:1c:4f:22:03:8b:40:ed:67:9f:1b:f6:87:c2:
81:36:37:2b:3b:2d:c4:45:0a:92:cf:03:7f:48:e9:
c8:b8:f6:c8:85:a5:f9:17:11:d7:23:16:95:eb:a5:
54:a5:a2:ea:39:28:c9:16:7b:31:d6:2f:6b:a9:bd:
a8:a3:de:d1:29:55:3b:2f:f6:75:2d:ad:cf:a3:58:
da:58:ec:35:94:27:f3:2f:f7:bf:df:5b:4c:c5:40:
16:89:df:44:9e:27:ae:d5:b6:5e:e0:6d:24:79:0c:
37:ab:47:2d:9b:89:f9:a5:7c:c7:d3:cc:3f:5f:6c:
b1:43:46:30:22:26:dc:37:ba:b0:23:25:a6:a5:20:
8b:94:44:28:91:45:c2:3f:ff:e0:01:fb:e1:f6:b8:
b3:11:50:52:fb:db:40:a3:2a:6b:7e:7f:48:86:61:
c0:a4:90:65:b6:48:70:1b:6e:cf:4c:66:b1:1c:2a:
9f:0c:27:9e:b2:69:5a:55:04:ba:cd:22:ac:21:43:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:CA:7A:66:23:61:D1:B6:FD:C1:3E:08:C6:A3:DC:CC:12:29:BF
X509v3 Authority Key Identifier:
keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:ec:af:03:89:ca:9e:9d:32:a6:cb:b1:7b:85:ff:69:cd:
61:12:ab:6b:f1:01:07:02:ab:49:0b:27:f2:36:d0:e3:9b:58:
9f:ea:03:80:ee:04:1b:f6:4c:41:9d:fb:bf:7d:ef:7e:c2:08:
fe:d8:b5:46:ac:76:aa:91:37:eb:8b:93:c8:b2:6c:7c:5f:0c:
6b:34:be:f1:bf:43:a5:3e:ac:55:1a:e5:57:87:84:52:0a:19:
94:f1:e7:e2:89:66:23:94:50:04:a3:e3:2e:2e:28:22:3f:0c:
5e:3f:d8:c6:9b:c0:29:7f:9c:e3:4c:41:ea:e5:8c:e9:a7:e6:
cc:83:bf:b6:8d:f1:1c:c7:a7:9d:da:ab:01:54:11:d9:22:6b:
7f:48:fe:5b:02:57:61:9e:5f:fc:b6:f8:a8:26:d0:41:7e:e8:
9b:9f:c2:41:ac:0b:6a:83:fe:86:e4:7b:62:84:65:ae:8c:00:
07:f5:cf:64:0b:ce:8d:25:5c:f0:67:d6:0a:0d:41:2a:0d:a6:
f2:3f:84:b8:5c:aa:c3:51:33:0f:bd:d5:eb:13:0a:69:4e:94:
57:66:97:45:54:ed:10:ca:94:1c:75:f6:de:48:b1:9d:aa:8c:
b3:ea:a6:d2:f3:1e:23:7d:25:3a:d0:63:c0:8d:40:1c:66:86:
e3:08:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:34 2025 by rpki-client