Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: EgREjG4uVHXSkR73Va/y2WyNyzeM79KgPg7CnJsu8IE=
Subject key identifier: 20:A0:A0:33:EC:CB:CF:05:7F:51:BD:BA:77:44:C9:0A:64:5A:4C:21
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 0198D7733221A17BF8572819D23B7B6FC3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 0271
Signing time: Sat 23 Aug 2025 15:01:47 +0000
Manifest this update: Sat 23 Aug 2025 15:01:47 +0000
Manifest next update: Sun 24 Aug 2025 15:01:47 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: WTKp3guJXvjQBgDUQQwL6tHr8lbKTmg0z7EoTT3cij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:32:21:a1:7b:f8:57:28:19:d2:3b:7b:6f:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Aug 23 15:01:47 2025 GMT
Not After : Aug 24 15:01:47 2025 GMT
Subject: CN=20a0a033eccbcf057f51bdba7744c90a645a4c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:bb:f3:62:1c:19:6a:0e:c3:e2:69:89:66:
a3:db:b6:d9:b2:7a:a8:56:6c:34:0f:ee:14:00:90:
f3:5c:0a:03:61:7e:cc:8d:49:b3:a4:87:70:e8:6c:
92:c6:ca:0b:3e:89:87:80:71:2e:7e:f5:c8:ea:b1:
bd:67:fa:27:23:04:b0:a8:ca:cd:c6:b4:29:d8:5d:
3c:4c:66:bb:46:b8:06:85:5f:ea:d7:7f:e3:5c:29:
90:22:29:f1:62:7e:be:4a:54:bd:92:49:77:28:76:
5f:a3:b8:a4:1a:e9:ed:55:a6:ad:05:55:9f:da:0b:
40:32:74:08:03:d3:1e:3f:fe:16:56:a2:07:c0:f2:
50:a9:f0:04:fa:4f:6b:56:e9:5f:45:2c:90:4a:51:
5e:23:d5:e9:87:36:18:10:08:25:a5:24:e6:fa:fc:
c4:0e:d9:1a:40:60:07:10:b0:fa:68:e2:2c:c2:cb:
89:7f:7a:d8:e7:7b:6e:29:d1:63:ba:89:74:33:95:
06:06:d5:ad:0d:05:7c:26:84:38:2e:5a:6a:b7:a1:
23:50:60:ba:24:5a:3c:5b:ae:41:af:76:65:56:7b:
99:92:36:a2:68:eb:78:0b:8e:bb:2a:d8:f4:bc:5b:
b2:1c:68:c3:a7:50:c1:b6:2b:89:95:ac:88:98:e0:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:A0:33:EC:CB:CF:05:7F:51:BD:BA:77:44:C9:0A:64:5A:4C:21
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:35:46:2d:fe:7d:66:25:bf:b9:2d:75:14:f8:82:0d:f5:
e2:57:46:60:d4:6d:d3:fc:a8:f3:bc:a6:eb:3f:1d:bf:d9:39:
50:21:61:1f:58:fb:ed:54:97:e8:1f:31:96:9e:78:f2:01:30:
dc:51:c4:b0:cc:c2:a4:a1:48:df:fd:aa:7f:0c:85:10:9f:65:
32:e1:7b:ab:44:0e:cc:c2:69:6b:f3:60:b9:bb:9f:4c:76:7f:
08:73:de:da:49:dd:82:79:3b:9a:ec:52:db:f7:d9:88:0b:7a:
aa:a1:35:50:16:2b:82:3e:c5:12:25:6e:e4:ca:d5:02:42:45:
56:7e:6a:19:29:eb:7f:4f:d1:18:b0:59:fd:54:89:0d:36:d5:
2e:66:76:13:00:34:0c:1c:34:ce:bb:6b:6e:e8:5b:b0:36:d2:
fc:65:bd:a2:ca:dc:76:56:31:25:02:33:a4:ec:d9:fc:23:ad:
55:84:b1:fc:5a:3d:d6:cf:69:cc:5b:b5:39:8e:21:63:ca:cf:
ae:99:c1:6f:18:cf:b7:cf:61:b4:29:f4:fb:2c:28:26:13:c7:
a3:35:ba:4d:61:66:40:7f:ce:69:fd:eb:c3:43:45:28:f9:54:
1c:33:93:14:80:f7:71:25:ca:b6:08:9c:c0:27:9e:03:04:6f:
e6:6c:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:53 2025 by rpki-client