Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 8JoTwAav33fYi0QfJy9NKB9+6wwaLSf8wUYihrlqrYU=
Subject key identifier: 24:59:C3:B2:ED:79:4C:1B:DA:8F:81:7F:4F:8E:2C:B5:55:D3:52:3E
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0198D660ED8F67ADCDD0529F8DC6A71A70AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: Y1NcWpfzMnV7bpBn98OZW2Of75FeEDfGOInqfa/5OGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ed:8f:67:ad:cd:d0:52:9f:8d:c6:a7:1a:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=2459c3b2ed794c1bda8f817f4f8e2cb555d3523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:7a:0a:9a:0f:ba:07:85:a3:d1:61:3c:9d:
e6:47:6f:93:ab:e4:5c:4e:63:3f:b6:27:8e:d9:fd:
31:57:b0:fe:6e:75:e8:4d:1c:3a:60:20:49:21:2d:
24:71:06:44:66:65:52:cf:67:13:6b:50:47:fe:1c:
59:e6:38:0e:64:51:0a:70:27:03:fb:84:00:0c:ff:
99:3e:28:e5:a1:12:81:fa:98:2f:43:50:b4:ac:0a:
08:8e:a2:42:a8:d7:d5:db:89:02:74:46:9c:a3:7e:
b2:09:bd:e0:e7:3c:88:7b:40:77:b8:e8:da:05:80:
59:bc:dc:0d:19:8f:c6:e0:15:9a:06:5a:f2:0a:48:
97:cf:08:06:98:4f:ae:90:08:66:bc:e3:e1:62:48:
ec:1a:83:45:ca:39:26:02:34:13:d4:5b:40:4c:9c:
b4:a5:f2:1a:48:40:dd:7a:6d:33:91:9d:c7:27:7f:
cd:4c:e7:c4:cb:e2:9e:07:ff:d5:c9:b2:67:8b:72:
ae:d8:87:c2:8e:8f:cd:8f:84:4b:c2:f0:7a:5a:78:
83:5e:47:b5:33:f2:d2:7b:47:d6:eb:7a:da:60:ac:
ff:14:80:2d:fe:3a:76:c7:9b:8e:c8:39:5a:d5:09:
c4:89:96:41:f5:81:1c:ec:3d:27:3e:b2:03:3f:28:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:C3:B2:ED:79:4C:1B:DA:8F:81:7F:4F:8E:2C:B5:55:D3:52:3E
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d4:72:5d:2f:63:de:b9:1b:03:b4:d3:4f:fd:0f:19:f1:59:
c0:f0:4f:9f:bd:74:f3:07:4f:4e:a8:71:9e:d3:37:02:09:d2:
f7:71:1f:32:99:b1:53:a0:bd:9e:e7:ac:84:f8:d3:4c:af:6c:
cf:15:8a:8b:2a:fc:f3:f4:c3:55:84:8e:01:36:9f:46:95:9f:
1a:d6:59:ef:70:69:a8:83:7a:f6:94:31:77:6c:14:b2:9a:09:
c6:b0:42:72:a4:d0:85:e8:8f:b0:48:06:92:44:84:21:b5:d5:
4c:15:d0:f4:f7:af:8b:86:d5:6e:26:91:0c:15:20:18:ec:69:
02:11:f6:cb:6a:6f:99:80:c6:9d:73:40:85:c3:7f:5c:f0:81:
d4:ac:7d:35:aa:4a:bb:b8:f9:82:d0:f2:79:52:c0:5c:fb:1d:
44:60:98:4b:bf:de:a2:b9:46:c4:cc:df:6d:1f:eb:0f:1e:d3:
ae:a0:2e:8e:71:c6:4f:25:1d:24:2d:94:76:6f:f6:e0:8e:bf:
26:b7:76:61:e0:7a:b9:ee:48:73:76:0c:f9:66:e7:02:e4:2b:
7a:e1:5d:2a:03:47:d6:35:81:15:34:02:a6:47:b7:15:80:6c:
ba:60:46:72:44:d7:fa:da:3f:f2:2f:28:d3:e9:57:86:55:4d:
2c:ef:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:53 2025 by rpki-client