Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier: 4low/NBQzupaZvf85t76a8jW2J9FG5bAMVlIJtXj6Yc=
Subject key identifier: 68:D4:D4:66:10:C4:A9:21:8F:06:7D:AD:2A:35:E1:EA:1E:EA:5D:C0
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 0198D5BBDC2761371A0FA243F2ED61CF4FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number: 03C5
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: fzXCvJmwGoPdDjz1mHim2irILQWS17PdqUwM3qYNEcQ=)
2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dc:27:61:37:1a:0f:a2:43:f2:ed:61:cf:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=68d4d46610c4a9218f067dad2a35e1ea1eea5dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:ee:54:2c:af:a6:61:ee:21:02:0c:66:21:
7e:e4:1b:8c:4d:37:a6:86:ad:b4:e4:1c:40:2b:be:
1b:8a:7d:d4:d1:02:1b:8c:87:a0:e0:1c:70:da:30:
c2:8e:1d:32:e7:48:06:68:c8:74:62:7c:e2:fe:09:
a9:59:0f:8c:6f:4e:d1:36:a1:6d:08:0a:56:6d:16:
6b:d2:5b:f7:8f:b3:b0:bb:a4:fe:4e:93:74:cc:cd:
47:bc:a4:f4:6d:9f:b1:d1:b0:52:09:05:6a:6e:4c:
d7:43:a0:f3:fe:6d:4c:b8:42:2a:01:15:7f:35:4e:
52:ad:d0:59:cc:80:65:da:18:4e:27:eb:f3:ce:4a:
31:c7:a8:13:74:06:d1:88:7d:2d:d7:36:e6:8a:66:
c2:d9:42:a4:c1:be:e8:9d:f1:dc:b5:e8:32:12:e7:
9c:56:99:3c:6b:13:64:71:3f:35:d9:70:35:2b:7a:
44:72:a1:89:77:d0:92:34:a1:9d:a8:39:69:2a:22:
27:33:41:92:60:3c:e3:21:9c:24:1f:96:9c:75:1c:
66:3f:4b:3e:1e:b0:b1:1a:33:5f:c2:8a:2c:23:d6:
65:1e:1b:09:00:5a:48:a8:76:dc:b7:46:f5:a7:24:
59:54:49:0f:4e:2c:0e:e9:0f:d8:ef:ec:55:3c:08:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:D4:66:10:C4:A9:21:8F:06:7D:AD:2A:35:E1:EA:1E:EA:5D:C0
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:27:43:d2:13:d3:46:b2:e0:b8:10:f6:0f:69:72:a2:73:7b:
78:c2:77:7a:52:e7:0d:84:96:92:af:bc:26:ab:16:ed:77:f3:
a4:03:88:b8:97:0f:2b:02:75:d5:7f:45:e4:72:b1:bc:da:7d:
14:4e:52:a6:16:cc:51:ed:ea:5a:8a:f7:6f:14:6e:df:c2:0b:
b5:d3:93:86:d5:6a:ff:5e:6f:f2:9b:53:52:ca:1f:87:8a:f0:
92:54:29:a3:41:99:e8:ef:4c:f6:0d:ca:a4:96:28:31:55:bb:
0d:7a:2d:bc:ff:f5:7e:87:fa:2e:00:94:cd:d9:7d:e5:3a:43:
b1:e8:d8:f3:8d:9b:0e:aa:1e:54:35:62:df:09:50:72:e1:5d:
76:df:87:da:01:c1:39:43:4c:e3:e3:21:48:bb:80:b4:2d:42:
f6:ab:ee:32:23:80:fb:3d:3b:8e:fe:ce:f8:ce:99:a8:15:7b:
55:0b:fe:43:81:98:a7:6a:da:7c:f5:e5:c0:21:55:c8:3e:30:
94:45:c2:df:0b:18:c6:b3:43:2b:30:4e:2d:02:30:28:d9:63:
c1:a8:57:a7:e9:e8:af:5a:be:e8:44:3f:4b:49:62:aa:d4:0a:
af:74:64:7d:34:dd:f7:3b:0b:67:28:e1:f9:b4:d9:f1:dc:2c:
c5:b5:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:45 2025 by rpki-client