Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: BSLMtf0+98GamO2MVVn9uI36+rZvNW5iJ+M6GlmkbGc=
Subject key identifier: 21:6A:A1:A4:FF:0B:17:1A:E3:B4:61:A7:2A:DD:E3:B7:14:93:08:B0
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0199FEEBE983F90A717DC10662843ED9578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0B50
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: A83WWLKgEZC4tVZMS/PdgSU0Fi+EG4IqSBFBetSpnGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e9:83:f9:0a:71:7d:c1:06:62:84:3e:d9:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=216aa1a4ff0b171ae3b461a72adde3b7149308b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:83:85:b5:8d:09:c3:e4:2d:92:ea:4e:bd:
e5:f2:6a:37:de:3e:90:7f:06:5a:c5:50:c4:c2:5c:
c2:95:c7:ac:69:c6:3b:40:22:04:70:bf:15:08:83:
20:58:ea:9a:63:6b:cc:f6:d9:0a:b1:fc:26:a9:18:
ec:e6:7a:c7:ee:59:75:17:0a:0e:00:3d:d6:c5:6f:
f4:b6:5a:07:21:47:6c:a5:12:c4:e3:68:67:18:8d:
64:4b:41:f5:a8:77:8b:56:ec:16:a5:25:25:b0:39:
ca:5c:fd:b5:5a:79:94:bd:bf:7c:07:54:24:c8:85:
10:50:3e:2f:e1:7d:f0:5c:61:37:28:c3:68:b1:c2:
6a:77:9b:aa:b3:cb:20:cd:6b:44:61:f5:4d:ff:ac:
23:af:f8:41:8e:37:76:27:57:9e:99:f2:c2:0e:66:
69:0d:1f:e5:1d:58:98:04:8e:54:29:ad:a9:26:d6:
2c:f9:5a:46:a4:d6:76:09:f0:c4:22:cf:b1:fd:40:
03:78:d6:cf:ba:75:0e:f0:a4:5b:9c:ca:be:1b:18:
f6:2b:9c:ef:a9:56:55:c2:b3:52:18:c3:01:3a:e9:
ef:8c:66:f2:2a:4d:37:d7:cb:90:fc:10:ff:81:9a:
53:68:9b:c0:29:2b:ec:ad:a7:7e:47:df:62:23:b4:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:A1:A4:FF:0B:17:1A:E3:B4:61:A7:2A:DD:E3:B7:14:93:08:B0
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ae:9e:4b:01:b9:91:f0:99:6b:d4:d7:f2:c5:ca:ce:9b:42:
dc:59:41:99:51:e6:01:33:d6:76:4d:26:11:46:b1:49:89:db:
fc:0c:5b:27:69:48:49:1c:91:ef:14:82:bc:70:cc:2e:cc:5c:
be:12:17:d0:9b:00:9d:a5:a9:fa:bb:c4:be:c3:b2:1f:bc:ea:
09:70:c7:a3:c0:cc:0c:7f:b9:7c:22:7c:97:99:3b:3c:0b:73:
02:31:d9:c9:fb:a7:d6:d6:63:5d:f4:c3:2c:db:9b:65:87:f7:
e0:30:55:18:d4:23:27:fd:a6:ea:f9:a0:14:dd:b5:86:9f:82:
e4:1b:6d:43:29:e3:c2:b3:f5:af:5e:f8:39:0c:41:98:0c:e7:
0a:ce:09:8a:f4:96:b9:80:14:11:00:97:a1:5e:3e:8a:dc:f1:
a1:58:07:e4:53:c5:fb:c3:54:d9:14:f9:9e:51:01:28:20:df:
4e:cb:b0:23:f4:05:ea:b6:d3:f5:7d:37:cb:e9:62:e5:50:0a:
a8:f3:07:99:c3:21:e9:a1:5c:ff:d2:07:73:c5:64:12:c7:49:
b2:fd:98:e0:51:12:f3:98:69:09:71:02:02:e2:fb:5e:ac:5d:
a4:08:91:e6:44:9a:21:a9:ed:c0:4f:5c:11:14:43:ea:31:f2:
3b:92:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:08 2025 by rpki-client