Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: fkLcftwgP0GjJQrJfFEZCnc/PNOi6GcjMuPMV/68gco=
Subject key identifier: 6B:04:B7:F9:7D:F2:B5:07:51:7F:F1:36:0B:5D:CB:DA:02:82:1F:61
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0197B8C615A4DBDAA0DD62B7440F75189878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 127D
Signing time: Sat 28 Jun 2025 23:01:18 +0000
Manifest this update: Sat 28 Jun 2025 23:01:18 +0000
Manifest next update: Sun 29 Jun 2025 23:01:18 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: tSJ69VL0CYVkCyGrN9D7FnACtk0nFhrOvRq48kF8+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:15:a4:db:da:a0:dd:62:b7:44:0f:75:18:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jun 28 23:01:18 2025 GMT
Not After : Jun 29 23:01:18 2025 GMT
Subject: CN=6b04b7f97df2b507517ff1360b5dcbda02821f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:41:88:43:8b:5a:98:c5:9d:66:f8:ef:60:
73:e3:ef:41:71:26:ec:59:61:19:2e:1d:d5:d3:da:
8f:c0:97:32:75:e4:39:4a:38:cd:cc:b8:5c:2a:b2:
3a:26:92:e2:10:49:e6:65:aa:90:fd:16:f9:65:ee:
21:0c:c9:77:6b:5b:5d:79:8d:a2:0b:b3:f9:9e:7b:
2b:2d:af:9f:6f:6c:c7:a4:c0:b7:76:6a:ab:00:70:
53:cb:94:fd:d7:9f:fd:3e:c0:3e:c1:40:2a:9a:4b:
94:ef:03:9f:60:19:1f:54:cc:2b:bf:d4:f3:90:cb:
ce:d9:c7:ce:27:96:7d:6d:64:27:9d:06:bb:c2:11:
5e:4f:4f:6c:95:23:ff:78:08:87:c2:bc:f1:27:1b:
6f:1f:2b:c3:5f:e4:4c:76:0d:0d:ee:9c:cf:52:4a:
28:c6:06:ab:dd:00:7a:7e:79:b5:db:36:09:fc:1d:
dd:f8:b8:fb:7a:a0:5a:51:14:bd:be:8a:a6:c7:a0:
27:e5:a3:ef:b7:25:67:33:7d:49:56:65:59:bb:ae:
28:b7:28:56:fc:fb:6b:3a:3e:22:72:2a:1a:09:81:
99:2e:f0:ca:30:1e:44:50:f5:9f:19:ba:da:09:91:
65:e0:08:12:64:2c:18:64:2d:28:8a:e3:b3:e4:d6:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:04:B7:F9:7D:F2:B5:07:51:7F:F1:36:0B:5D:CB:DA:02:82:1F:61
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6e:02:93:f7:b0:49:bc:00:5f:ac:fb:7f:7e:8e:4c:00:c7:
23:e4:6c:0b:4b:59:99:ce:8f:f0:d1:b6:4f:a8:c8:75:2a:b0:
fe:e8:37:7d:88:96:5d:f1:8b:a0:2b:20:fc:92:40:5e:05:6d:
a4:90:cc:b2:28:e5:f8:98:a8:9e:0f:02:05:ea:91:7e:67:77:
d1:cf:4c:61:e4:37:2a:52:f3:b0:36:58:4b:f4:69:36:dc:a5:
5c:3c:69:be:3e:83:ae:c2:a8:40:ef:8a:37:49:61:39:71:88:
c8:59:c7:81:cc:75:b3:91:19:de:a9:b2:16:1a:49:be:46:5a:
b0:e5:49:be:f0:1b:41:e0:e6:51:3a:ba:ee:2f:de:13:25:75:
05:3e:28:9b:ab:79:2d:1a:f5:d2:b0:3d:fb:3a:34:a4:11:1a:
4b:6e:25:37:89:33:ad:72:24:fb:29:23:91:82:b5:1b:6f:8f:
df:e8:57:72:35:be:61:67:05:53:3f:43:db:8b:f8:d9:27:7e:
6f:20:b6:d2:2a:85:ef:04:21:fc:40:d3:ae:25:f9:51:d1:11:
48:a0:5c:95:3e:09:91:b6:90:64:ec:87:eb:17:9c:03:ea:82:
6d:bf:57:99:60:5e:80:7e:4b:ea:ae:9d:10:f1:41:2f:ff:a8:
98:53:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:18 2025 by rpki-client