Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: nIW+RvBW+10sRwNaCQw/vTg5yA327SFdXQ/hGokv5wY=
Subject key identifier: 2F:73:2E:DB:ED:EE:95:1D:D1:BE:2C:66:AF:02:97:25:63:63:F1:16
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 0198D474235D15E6DB78FAE370456BB21567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:57 +0000
Manifest this update: Sat 23 Aug 2025 01:03:57 +0000
Manifest next update: Sun 24 Aug 2025 01:03:57 +0000
Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: MFh9N6cZ34p3W7V5jazFgcYi+FXud8zUa4GMNH06wRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:23:5d:15:e6:db:78:fa:e3:70:45:6b:b2:15:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Aug 23 01:03:57 2025 GMT
Not After : Aug 24 01:03:57 2025 GMT
Subject: CN=2f732edbedee951dd1be2c66af0297256363f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:1b:46:89:73:92:22:3e:1b:a2:7a:47:92:
3c:cd:23:55:ad:ec:0d:b2:44:95:3a:20:be:ec:db:
ed:eb:11:4a:e4:be:c2:2f:04:3c:67:01:a0:6f:34:
e6:14:a7:94:87:75:d8:ca:75:58:5e:38:9e:87:c5:
29:1d:0e:9d:87:7e:43:9e:a9:00:28:a1:9d:ba:81:
64:70:2f:f2:1b:4a:9c:ae:a9:51:73:a8:25:6b:8a:
c4:2a:f4:bd:eb:1d:1b:b5:30:c1:6e:f4:df:fc:3b:
24:71:73:73:2e:dd:54:1c:2b:d0:38:c1:d2:18:a1:
63:e0:66:53:20:a9:6c:65:81:ca:dc:e2:d5:24:95:
94:50:b8:f5:df:19:a7:b5:8f:94:0a:4e:4f:ec:78:
bd:64:27:ca:80:ce:10:af:09:13:a0:cc:a0:f8:4f:
83:c8:37:e4:29:f9:14:d6:d5:26:f7:3e:3b:4d:3c:
5f:bf:f6:2f:2e:64:22:3a:7a:1a:29:81:23:96:2b:
37:92:b2:b6:e0:57:bd:38:28:48:66:8c:65:c3:6d:
18:09:76:aa:fb:73:59:5c:29:a2:72:a9:52:0a:2a:
d1:07:14:43:73:73:26:93:00:3a:73:6c:01:c5:12:
b8:54:8a:59:12:c6:74:db:6a:64:03:36:bf:bb:a3:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:73:2E:DB:ED:EE:95:1D:D1:BE:2C:66:AF:02:97:25:63:63:F1:16
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:c7:d6:da:df:8c:af:92:0d:e1:5e:79:42:c3:a3:eb:fc:
a7:d6:c4:1b:79:64:69:7d:76:d1:09:eb:7f:7f:2c:b9:ec:ee:
13:c8:db:f9:81:a6:c9:05:dc:af:7f:d8:3b:97:35:38:58:e8:
f0:b6:e7:83:04:c6:54:fb:0f:43:5f:ce:17:cc:37:b8:00:98:
a1:c0:5b:7d:ff:cf:aa:f9:3c:2d:9a:77:08:76:3e:53:3f:ad:
41:18:f2:aa:d6:6e:57:65:a8:3d:59:b4:5e:4e:81:f7:d9:d0:
ae:b8:02:24:9a:fc:41:64:d8:90:5e:25:2c:6f:c7:1d:da:37:
57:33:b5:19:8e:4c:b8:55:0c:a0:e1:ad:01:ef:47:c8:40:ce:
06:7b:2d:14:d4:3f:ba:a9:9e:ec:05:9b:9d:cc:30:11:a6:3a:
84:0b:40:57:0d:81:e0:8b:35:81:14:a1:06:64:28:2d:30:88:
c9:5e:97:9e:1f:97:32:42:c8:e5:96:42:0c:7c:8e:41:39:b5:
08:6c:bd:0e:1b:63:f6:94:9c:54:04:78:cf:0b:5a:b1:da:56:
47:dd:40:80:82:90:96:f8:cc:81:a3:5f:9f:95:fc:6e:46:c2:
05:fb:9c:3c:06:55:30:f5:f5:ea:59:7b:33:ca:03:a6:58:c9:
e8:16:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:14 2025 by rpki-client