Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: Hjovm7/wOhvHPLptVPRFg9uOEsPKU+CLjuiI38xQr1s=
Subject key identifier: 30:15:95:18:41:94:4C:C4:FC:E0:DA:56:0F:52:DD:B5:72:05:43:23
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 0198D54DE26B7A2263C62179C64040C18095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 131D
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: YJAnr14U2qeeYJPD392SiGvidUJZDsGa788GlhwvdE0=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e2:6b:7a:22:63:c6:21:79:c6:40:40:c1:80:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=3015951841944cc4fce0da560f52ddb572054323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:1b:10:b1:07:4c:81:86:f6:10:1b:29:f4:
91:c8:51:af:9d:a0:65:c1:af:17:26:43:43:ce:b0:
dc:aa:00:a8:aa:92:31:42:6f:92:0d:ff:45:15:7e:
e5:04:d0:62:a0:b9:0b:48:a5:92:99:ee:c9:cd:e8:
fe:f5:9b:bc:5f:49:a0:e0:f7:1b:ce:8a:76:4b:eb:
ec:c1:99:83:b9:0b:cd:22:3c:79:fe:d7:b2:0b:20:
09:d3:66:d3:6b:74:7b:bc:99:a7:9a:41:20:92:17:
c4:8c:31:b3:dc:6a:c4:52:52:4d:d6:3b:ec:05:d0:
40:23:4b:e8:38:f3:32:5e:1a:e4:a2:5c:53:ba:d5:
e6:0f:98:c5:ef:b5:ae:d7:7f:f9:3a:5f:ac:64:d1:
1e:fd:60:a5:f2:c6:5a:2b:aa:bf:e5:a5:9f:41:04:
ea:35:e8:9b:07:09:de:90:80:8c:cd:b3:6b:06:74:
97:17:e0:79:2b:80:9e:5a:66:f2:86:ce:80:d4:97:
74:7b:fd:fa:e8:bd:39:6b:05:3e:60:01:63:b6:f1:
54:22:21:e3:39:25:fa:5d:fd:8f:32:d2:d1:f5:b5:
5b:d1:4f:33:b0:fa:8a:bf:81:2b:df:b1:2d:84:ba:
32:99:1a:8c:88:5c:a2:b3:de:28:fa:8f:a5:0e:83:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:95:18:41:94:4C:C4:FC:E0:DA:56:0F:52:DD:B5:72:05:43:23
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:3b:15:16:a6:25:97:86:57:3c:e7:f0:86:50:6f:15:b8:
a5:3a:da:74:df:9d:9a:a6:40:d5:ff:77:bc:de:d6:01:84:69:
05:95:1a:5c:b3:75:ef:df:82:20:7e:35:51:97:48:8a:72:68:
ce:52:49:e1:f5:74:3b:ee:83:53:38:22:c3:11:30:eb:83:0b:
9e:e0:7b:c3:6c:ed:37:9f:c9:28:fc:f1:f7:e6:aa:8f:62:bb:
5e:ec:49:78:4a:3f:f1:c9:91:76:8e:98:8b:2c:90:e4:ad:03:
e9:b4:3e:e6:23:88:d5:be:94:84:d8:c5:57:53:9a:4f:52:67:
f0:be:ae:ab:48:b4:ec:c0:a2:b9:bb:49:ad:5d:75:25:76:6a:
a3:b5:74:92:6f:49:8a:57:5b:25:ac:61:06:51:5b:76:e4:5b:
ba:d1:75:cd:f5:70:c2:65:06:8c:64:03:a2:d3:f0:1b:2b:24:
39:8d:c0:78:d6:e8:a3:31:41:c2:2f:8a:22:da:63:5c:98:8d:
40:5a:84:d6:3c:e6:8a:32:c8:07:7a:ca:07:5e:1e:aa:21:00:
72:04:a5:47:85:cb:d3:06:12:ee:0b:8a:ae:06:11:69:31:80:
59:39:d5:e9:a2:57:6b:31:0a:47:d5:cb:36:02:de:9c:ae:a7:
72:b8:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:50 2025 by rpki-client