Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: 3I9mM8oWoW4OG/F3H9aq/LEv4PgPEnR9ALovuNYhnRQ=
Subject key identifier: A2:3F:45:CB:CC:1C:DD:1B:25:8B:73:8E:B9:13:83:97:6E:70:AD:72
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0198D583EF7A0B7ED03359C4242D02DC19EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0AB6
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: uNEXHufte4x2n245Ho4mdminZagHEXNU6gguM9gZi7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ef:7a:0b:7e:d0:33:59:c4:24:2d:02:dc:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=a23f45cbcc1cdd1b258b738eb91383976e70ad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:8f:c0:23:9a:b3:47:49:95:70:9a:e7:ba:
50:a6:06:cc:a4:54:bd:9a:14:7a:ef:83:43:0f:8a:
72:2c:c6:1a:88:e7:4b:97:21:78:c5:4c:a1:8b:98:
26:df:49:12:b9:76:97:2e:0e:32:11:35:95:aa:14:
3e:a0:6f:6e:da:9b:e2:fd:dd:00:00:0d:c1:7f:51:
82:77:39:ac:fc:44:b2:63:24:6b:44:49:83:8c:4f:
69:b3:21:3e:c4:c0:29:9d:01:9e:18:42:47:ed:90:
11:94:dc:a1:81:0c:b3:96:a3:6d:ad:11:5f:7c:02:
90:8f:e5:fe:f1:c9:11:9d:79:22:c5:66:5a:3a:ed:
22:fb:93:5d:bb:24:67:b9:cf:ab:a9:95:24:11:e4:
51:55:73:58:c4:47:97:26:08:7b:a4:31:c6:9b:c3:
7f:86:cf:57:98:a3:b1:98:d1:7c:2c:ed:87:a4:fb:
8e:ee:c3:ab:5b:d6:fc:58:a9:29:24:17:c1:51:10:
7f:88:09:12:88:0c:86:59:7a:38:a8:6b:d3:b8:48:
30:97:5d:04:9e:e4:19:7f:e3:0c:04:44:36:80:3b:
f8:db:38:21:3a:11:b7:32:7b:e6:63:a7:22:e5:fa:
66:08:69:35:7c:0f:7f:08:42:01:80:e5:14:59:52:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:45:CB:CC:1C:DD:1B:25:8B:73:8E:B9:13:83:97:6E:70:AD:72
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c5:4b:55:ff:5e:03:4a:72:e0:99:59:40:e9:7e:41:5c:9f:
6b:3e:88:65:be:c0:e6:b8:1b:54:75:08:63:8b:4d:99:4c:09:
07:db:be:64:c1:54:ce:21:03:f0:ca:b5:25:84:9e:00:d1:1d:
b8:55:4f:f9:31:fb:0e:b1:f2:f4:32:0a:2e:5a:a4:1d:8b:25:
05:e3:3d:ba:91:0d:12:ea:14:c8:35:ed:5c:99:9c:a4:6e:cf:
b3:f2:56:0c:66:67:94:d2:1a:c4:a9:cd:a9:44:4a:7c:2a:38:
5b:e0:f1:05:ea:5b:25:5d:97:ff:45:96:6a:2b:0f:3b:d6:04:
97:a4:ae:a8:d9:5c:89:0f:3d:ce:35:f2:5f:12:c4:59:0b:30:
9a:73:94:39:bb:f5:b4:bc:db:95:2d:4e:f6:d9:ac:c9:13:09:
fa:c4:ed:fc:50:d1:32:26:b8:db:e8:d0:ae:53:ad:83:77:e9:
55:78:d6:48:48:92:d8:fb:e5:62:27:5e:75:cd:8d:b4:7f:c5:
f5:37:bf:39:3e:0d:b1:26:79:5a:26:d8:59:00:1b:8d:f2:85:
60:bf:aa:fa:83:44:73:bc:37:73:e2:fd:7a:0e:4e:d5:0b:a3:
c9:3a:60:ad:fa:49:e5:cb:7f:c3:0b:20:d1:d6:82:89:18:92:
cd:ad:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:12 2025 by rpki-client