Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: lLJ2hLJoD0OCCfuTTNt/TaZjaQbNjxZtw/fJZmU9uz4=
Subject key identifier: 3D:E7:46:4B:A5:D0:DD:DF:86:00:CE:64:1E:A6:48:ED:CD:9A:5B:63
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0199FBEAD74D807B92983AACC06C95CE7FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 13A9
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: g1ehtWzT+6xS50UhPNYWTfCZjijARI9bv+dX4q2+fR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:4d:80:7b:92:98:3a:ac:c0:6c:95:ce:7f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=3de7464ba5d0dddf8600ce641ea648edcd9a5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:83:b8:54:c9:8f:76:71:5d:be:ee:6d:e7:
c9:54:6d:ba:24:5f:d2:0f:cf:3b:de:93:61:f6:33:
ba:8f:cf:b8:06:4a:01:68:a4:29:50:20:60:9e:8b:
3b:db:70:7f:a0:a4:64:4b:4f:b0:1a:43:34:22:77:
5e:f2:df:c5:33:2b:5c:c5:48:00:57:99:fb:7e:67:
10:b2:a1:dd:c6:d1:7a:3a:83:12:d1:85:af:6b:ea:
5b:5a:82:34:22:b5:60:e1:97:60:ed:89:5c:34:15:
8f:27:86:a4:0f:03:40:06:e1:e9:4d:e7:d3:4f:f5:
ac:20:60:58:bd:52:20:47:22:e4:6d:9a:98:8b:5f:
15:5e:db:aa:62:ee:06:b5:62:19:12:c6:6b:bb:26:
1a:e3:dd:84:25:ff:65:da:dc:52:53:6a:95:3d:db:
ab:1c:fb:c2:f4:f2:c2:8d:01:b5:40:ab:e2:39:b1:
b7:16:9d:65:33:e0:20:d0:82:ab:39:ec:61:d4:51:
12:30:3b:8e:47:84:72:e9:87:d1:84:72:fe:fb:c1:
fa:dd:7a:ba:f8:4d:f3:18:30:07:0c:8a:59:1b:fd:
29:1d:84:e8:8f:1d:03:3b:b2:56:35:6a:14:c1:de:
7d:77:97:9c:8d:a3:e3:a4:53:9d:66:20:9f:46:64:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:46:4B:A5:D0:DD:DF:86:00:CE:64:1E:A6:48:ED:CD:9A:5B:63
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:de:d8:8c:b1:65:36:f8:32:cc:16:5d:90:fb:8c:5f:b1:
45:21:9e:18:17:a8:54:e7:7b:94:bd:91:de:cd:53:2a:7f:13:
e6:f6:86:90:13:3f:52:1d:82:75:11:9f:eb:68:54:8c:92:e8:
e2:d4:81:68:a9:68:6c:ab:21:af:21:7e:cd:9b:45:1a:13:c6:
3f:10:88:50:08:31:33:61:91:26:ca:71:58:fe:f8:3e:d6:71:
6a:ac:5a:01:40:62:f7:f0:aa:03:5a:48:d4:9f:aa:62:e9:40:
3c:8f:83:4d:06:18:fd:d5:33:d2:bd:54:b7:fe:8c:5b:48:37:
49:e2:d1:bf:e4:38:28:1d:58:cd:1a:47:48:b3:13:3a:03:cd:
fb:43:bf:54:43:63:70:4d:84:ea:1e:d5:04:37:e2:ef:bd:1c:
ba:0c:7c:98:8a:a5:4d:26:a5:9c:0d:90:ff:78:f4:e4:02:de:
44:ba:d9:50:23:6e:27:1d:be:ed:57:97:37:4d:87:61:cd:e8:
4b:e6:8b:ad:4b:e8:b9:1c:b8:3e:1b:dc:de:b0:9e:0f:6b:65:
64:9f:9b:79:b6:d0:5b:f1:1b:e1:76:66:1a:f6:57:5f:b7:81:
d1:52:b3:c6:45:24:ac:89:d9:82:b3:3a:bb:30:9e:c8:a9:f2:
6d:b3:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:34 2025 by rpki-client