Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: fpY7BnOvmBrmnTGPMSzZm886t/cherzLU4WO8gVmRgM=
Subject key identifier: C6:0C:D3:AC:7A:08:EC:50:89:02:E5:19:26:32:38:DD:21:EF:67:4D
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 0198D73BD6155B1FFD358F9B175BFEFEDD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 077D
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: bnDNxecsngRiSup3sYdBVWg8F5pxOg+RPEW0dVE79UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d6:15:5b:1f:fd:35:8f:9b:17:5b:fe:fe:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=c60cd3ac7a08ec508902e519263238dd21ef674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:9f:85:e0:42:f7:b1:8f:1d:d0:aa:d9:bf:
de:59:d6:8f:f5:90:4b:cf:69:46:43:ce:6d:a0:2c:
95:9a:51:d5:c2:33:2e:03:bd:68:c6:05:77:49:cb:
d5:86:cf:c0:66:c1:ad:5b:60:f6:9a:ff:45:65:bf:
6c:56:0a:b0:93:a6:83:76:6e:b1:82:ff:59:72:68:
bd:d5:86:a7:e9:0d:49:da:a0:33:f8:04:b9:08:b6:
ae:7c:ba:0c:d0:62:c6:b9:6b:ea:7a:8e:7f:5c:7d:
ec:f4:8a:c3:5a:16:8a:7c:02:ca:55:34:02:ac:ab:
36:dd:18:63:55:96:3b:55:cf:f5:b7:83:e7:3f:94:
bf:d4:ad:d0:bd:ab:6b:9d:c7:c8:7d:1a:d1:97:9c:
2d:01:20:b1:f5:40:34:20:08:d0:fa:50:01:5d:4f:
8d:7d:35:e8:16:0c:ef:5f:3c:34:9b:7c:6f:9d:fb:
be:c6:a4:59:3f:9a:69:36:11:a9:07:f0:10:b7:21:
e1:87:18:ee:ab:72:3d:ee:b5:a8:9d:71:6f:d4:4a:
de:9c:16:6b:99:38:11:fd:3d:a3:43:7a:f0:b1:09:
dc:ad:ab:12:29:73:6a:7c:e4:08:f5:0d:a9:de:4f:
fa:85:c8:ba:fe:91:63:c5:cd:a2:e8:88:c1:65:05:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:D3:AC:7A:08:EC:50:89:02:E5:19:26:32:38:DD:21:EF:67:4D
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5d:9e:27:61:0f:d5:bf:2d:da:52:47:91:a7:9b:ec:34:14:
16:88:f6:d0:a3:be:38:aa:97:75:90:32:81:43:b6:90:08:a3:
47:7e:77:50:bd:97:35:5e:8e:b5:4a:7d:85:e2:69:75:ee:d0:
b5:b1:80:2c:36:ca:ab:28:67:78:20:ed:cb:a4:72:dc:cd:a0:
d4:2b:8c:ab:e5:6b:f6:4e:e8:46:03:ca:a4:f2:7e:ee:ad:4d:
f0:7b:e8:70:2b:0f:55:f9:41:bb:b3:47:cf:d9:d7:47:e2:35:
4f:7e:c7:f5:1e:de:e2:6d:e4:d9:9e:16:93:f1:08:3c:53:72:
b5:c7:82:9e:c2:d3:4f:a4:b4:8e:00:e3:e6:1a:4e:1f:7f:45:
48:d7:8c:57:49:95:8e:b6:b0:4d:9f:40:5a:41:df:09:3d:52:
34:6a:e9:e6:cc:00:31:a2:a9:84:6b:29:eb:49:60:a2:75:71:
38:d0:76:cc:2a:c8:91:23:ff:78:6b:5e:f3:7c:95:2b:e7:c0:
56:db:9b:3d:03:ed:3e:db:71:c6:0a:cd:4f:fc:6b:a6:57:a1:
de:9e:85:84:41:aa:43:6c:c7:be:cf:a1:8d:ca:fd:30:05:e3:
08:6b:e3:55:1a:85:b0:a7:6e:bd:6b:3a:a9:ea:1e:d5:f6:7c:
30:e8:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:30 2025 by rpki-client