Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 93kNLQOpfa7n0XreDfnZUMzzYp0eH+zI+GDdFU/2ulo=
Subject key identifier: B3:71:F1:2A:68:12:51:0B:11:4E:E9:5F:4A:2D:C5:6E:23:9C:57:50
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0199FFC7A854855F1A167DDAC2E47CB62DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 04:01:38 +0000
Manifest this update: Mon 20 Oct 2025 04:01:38 +0000
Manifest next update: Tue 21 Oct 2025 04:01:38 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: nJgL93v8Ecj0iYHBcqjpM1JmzP+8lVpAq/ZsTvIHFXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:a8:54:85:5f:1a:16:7d:da:c2:e4:7c:b6:2d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Oct 20 04:01:38 2025 GMT
Not After : Oct 21 04:01:38 2025 GMT
Subject: CN=b371f12a6812510b114ee95f4a2dc56e239c5750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:ca:00:71:91:1f:87:3e:11:82:ca:8f:f9:
3c:6f:dd:d3:95:42:c7:6f:b7:0d:ed:3f:c3:0b:7f:
68:5c:b1:c8:cb:5b:8a:93:73:8c:48:85:35:2f:a9:
fd:1a:5f:72:d1:d7:4f:2d:8c:0a:46:68:61:63:f2:
a2:15:76:55:a3:6c:42:9a:2c:57:26:56:b2:01:b3:
35:d3:19:bf:80:26:2d:07:54:ad:ae:f4:de:94:cb:
89:e4:78:22:ab:4d:3f:46:cb:35:d2:d6:93:7d:e3:
ba:3b:14:fb:8e:0e:62:af:3e:82:38:f1:8d:5e:4e:
f8:34:c4:a0:d6:92:1d:2b:bc:47:7a:e2:db:46:ff:
f3:eb:87:f3:c0:48:3a:8e:0a:c1:b6:cf:98:40:d4:
aa:1e:46:ca:6e:3c:bb:6b:fc:b3:2d:97:53:cd:57:
5c:e8:87:ca:90:07:c5:6c:3c:ea:da:45:d2:d0:7f:
59:4e:a1:c8:6e:a3:3d:3d:b6:0a:ca:84:1c:17:06:
f4:93:28:c5:95:31:ab:3d:d9:3e:6c:5b:f1:05:c9:
42:f9:f0:16:15:02:f7:25:b0:f2:b1:a5:bf:20:75:
50:4b:d5:8b:1b:d8:8e:2a:79:6b:a3:17:e5:6e:1e:
39:2c:79:75:9c:5e:69:3e:69:da:7a:d6:c2:5f:4b:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:71:F1:2A:68:12:51:0B:11:4E:E9:5F:4A:2D:C5:6E:23:9C:57:50
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6f:4d:7b:21:fa:0d:d6:8c:9f:56:12:a1:8e:f9:ee:9d:5a:
90:9b:a4:11:d1:3a:2b:15:3a:f5:cd:b5:02:27:25:7d:2e:b8:
aa:a9:12:c1:92:6c:d2:9e:8b:04:44:3f:de:28:12:a2:41:8c:
d3:72:87:84:8d:88:75:91:dd:61:f2:ef:94:ee:62:c5:5b:8f:
f7:f5:fe:30:72:f2:d0:fe:0d:70:9a:d9:e8:7a:b5:b6:47:97:
c9:92:33:a1:d0:a1:6f:3b:8a:80:c1:44:08:89:2e:4d:51:2d:
89:87:ca:b3:7a:18:14:43:40:df:d8:d1:f1:66:2e:7f:5a:3f:
54:61:28:bc:48:41:fe:d3:78:34:3d:b2:48:45:0a:05:1c:5a:
70:3c:1d:79:49:f2:76:6a:57:ee:04:ee:ff:97:53:71:41:be:
99:a3:63:f4:8d:ff:d7:e7:3a:7e:90:13:ff:4a:97:9f:e1:1b:
ed:25:8b:24:f8:01:92:bf:f5:11:c7:47:e5:93:20:08:3d:50:
ed:00:30:ee:80:12:0f:4a:68:33:0c:10:4e:35:65:7c:bc:8d:
13:f3:b5:1e:d6:54:31:7d:24:f8:99:0d:61:19:dc:46:d8:e2:
af:3d:5d:46:95:4f:39:da:63:30:09:02:f5:64:de:4c:1a:e2:
68:c3:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:40:40 2025 by rpki-client