Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: Che/rGQ28js7t9IH8UK0L0SVnuUfsVMQEySWztqhD+w=
Subject key identifier: CA:90:0B:4D:86:13:04:CF:B4:D9:FB:71:09:22:05:AE:AB:6B:86:3C
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 0198D515A8CCF797BF3CADE18FAAA0D3F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: as8PcBc3hMXdiqU5vJt3m8q/qAsFwx7dWBHlvf+ZEzA=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a8:cc:f7:97:bf:3c:ad:e1:8f:aa:a0:d3:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=ca900b4d861304cfb4d9fb71092205aeab6b863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:a0:e4:a1:ac:88:e8:97:3e:d9:91:e4:d6:
83:5c:a8:72:4b:11:b7:33:bc:34:a5:c0:ef:05:61:
5e:99:c3:25:ce:7b:68:6a:f9:4f:f6:b6:d4:70:8b:
11:5b:fa:f0:4f:48:88:6d:40:ff:70:86:99:e4:1d:
38:9f:51:85:37:6e:22:fb:f1:0e:9a:a9:7e:4d:d8:
c9:05:05:6d:fc:40:8a:0b:7d:54:97:57:a6:37:b0:
3f:5e:9d:e1:a1:af:96:4e:9e:9a:70:ed:d6:7d:8b:
ba:d2:d1:3b:5a:94:7c:31:d7:c5:f0:c8:ee:e6:8c:
fe:94:42:a4:39:23:6e:34:e5:8e:ff:31:d0:49:20:
f1:f4:fb:bf:da:96:7d:af:f3:8c:90:81:42:59:91:
5a:f3:b5:0b:d9:b3:39:97:ec:84:01:dd:3f:74:b4:
06:58:80:34:b2:68:8b:06:46:b8:ae:98:af:90:39:
d9:73:d9:8c:2b:b4:e3:e2:a6:e7:fc:a4:55:c2:e7:
aa:29:d8:a6:42:0c:ec:dc:dc:58:89:54:40:1a:a9:
c7:b0:68:9e:e8:52:40:0c:b1:da:7a:9f:57:b1:62:
e7:aa:06:37:27:b3:38:1d:e6:bc:b6:f6:9c:3d:6f:
44:83:80:56:8b:14:31:dc:a1:3b:ed:8d:ce:02:d0:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:0B:4D:86:13:04:CF:B4:D9:FB:71:09:22:05:AE:AB:6B:86:3C
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:16:02:68:e7:89:94:30:d9:87:ff:12:1c:5e:c8:03:69:
41:ce:a3:03:fe:26:8a:e7:23:90:de:98:7e:22:c0:3c:70:11:
99:f1:b2:77:5e:74:7c:5b:98:05:58:03:d0:c4:35:23:3c:1e:
8b:ef:ae:16:5b:91:5c:b1:e8:4d:15:91:2a:18:47:85:ff:84:
09:bb:1e:17:ca:51:83:a2:5f:9c:7f:00:c7:f2:8d:35:51:34:
50:63:7c:e1:e4:52:8e:e4:9f:e6:91:c9:76:c2:69:b5:96:7e:
e6:bf:c3:56:cd:a2:33:66:34:de:f2:2f:b4:53:c6:2e:7b:b7:
f8:86:0a:07:a9:4b:94:6c:d8:a3:85:c2:49:1d:4c:d6:f7:e6:
9c:1a:74:6a:5d:72:95:c0:d5:11:9b:1a:af:04:ff:28:b1:71:
40:c1:ed:63:5c:26:2a:88:f3:0d:cc:86:74:e8:c1:13:92:81:
1a:59:ad:e6:cc:86:24:31:fa:d6:f3:f8:aa:2a:42:29:e2:f0:
27:7f:46:3f:93:0c:f9:9f:0a:e8:be:77:77:cd:e0:a4:a8:bc:
d7:83:fe:2c:8d:7a:7c:8e:67:87:00:86:ec:56:78:f8:25:a2:
ad:c0:ae:49:95:a7:b7:ec:16:c3:33:97:52:8d:fc:0a:31:07:
d9:f9:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:40 2025 by rpki-client