Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: T/W4HRkNUEjyBbTkHq/jGPetVL6Sp8GxZgFR9uWXqkM=
Subject key identifier: 94:44:D1:6A:50:95:3D:6F:FF:76:62:29:1C:31:F7:0A:5A:CA:C0:EC
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 0198D4E0D21F3081E10EDFF6A84406CD9FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=)
2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: 5NJ/5PTtFhT1hPgsViiQtfdaXYl+ZNrxoGgcYfR2Mbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d2:1f:30:81:e1:0e:df:f6:a8:44:06:cd:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=9444d16a50953d6fff7662291c31f70a5acac0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:f0:02:90:6a:37:7f:8a:b6:56:fe:b2:8a:
0a:25:b0:37:6d:d8:c2:06:b2:f8:f9:c2:99:73:13:
78:ff:dd:0f:4b:ac:24:c0:3a:92:91:af:fa:99:6b:
c4:2c:c3:ef:4d:e1:1e:66:6f:e6:c7:98:3a:35:2e:
0f:9b:de:46:cf:ee:ba:64:c6:7f:f0:fb:db:8a:c1:
3c:e0:7c:11:31:9e:52:32:5c:0b:9e:09:40:77:a0:
47:5a:cb:ff:bf:c2:59:e9:54:9c:c7:61:d9:86:8f:
f6:6c:c7:4e:b1:ae:2e:df:8d:11:f4:a6:b8:f1:9a:
19:a9:1a:f2:3f:d5:ba:1d:93:1b:81:a6:2d:3e:24:
80:b7:5b:e2:0e:75:09:17:07:90:a9:11:04:12:f1:
f7:1f:0b:77:45:c5:22:95:19:05:a0:3b:b7:d5:1c:
24:69:19:50:2b:70:c1:34:87:2e:07:18:7f:e7:75:
ed:8d:b5:73:79:c7:f0:58:db:53:7d:ef:52:ac:b2:
a7:6f:3f:29:80:72:28:ea:44:bb:c7:96:6e:c6:2c:
45:e6:f8:1f:ba:84:9f:32:96:ea:5d:6b:90:dd:42:
44:3c:2e:94:65:04:a8:f7:0e:d7:38:d7:26:68:eb:
49:95:63:6f:3a:f7:02:0e:49:ec:94:16:3d:f1:22:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:D1:6A:50:95:3D:6F:FF:76:62:29:1C:31:F7:0A:5A:CA:C0:EC
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:73:dd:f6:f1:ca:24:ae:65:79:57:f2:d3:be:43:58:bb:
b7:30:14:ea:7a:a1:02:82:c8:0c:02:1d:58:43:45:cc:20:08:
83:65:66:e4:7e:60:84:cb:ca:b4:c9:73:24:74:68:0f:44:08:
0d:ee:70:a8:29:25:70:91:98:12:28:b2:c9:25:0d:b7:91:bf:
b4:91:42:7f:ea:60:6f:4e:8b:d9:f3:c3:56:92:32:4a:b2:d8:
44:17:6e:cd:d9:34:db:8a:ce:71:f0:2b:b6:06:85:01:aa:d0:
20:d5:cd:7f:c0:d5:1b:da:c6:6c:ea:93:8b:b6:9a:0d:4c:d4:
3d:cb:22:c2:31:12:be:a7:e0:4c:ea:fc:2d:38:76:b6:ad:38:
64:68:44:af:40:d4:a5:6e:8a:48:4d:ae:4f:d9:1e:bc:3e:61:
d0:ac:1c:6e:9a:56:65:d8:e3:17:54:6b:7d:a4:52:50:c5:06:
78:e7:b2:c5:95:71:26:99:e8:59:e1:a7:f6:bb:cc:9d:32:8a:
1c:c0:b0:dd:8a:72:7b:21:57:4b:f9:ae:25:c8:4a:95:02:b8:
73:52:e2:f5:2b:1d:2d:eb:82:d9:16:b4:5e:b0:68:7e:fc:68:
52:34:c7:d8:c2:f8:d6:c4:06:fb:6c:c1:3d:36:fe:69:2f:ab:
5b:b9:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:58:27 2025 by rpki-client