Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: 0AvY0oi7ufL8SNRTDmcS459EpPCeGUnm/4HyzOeI8DY=
Subject key identifier: A4:A0:D4:BF:2A:B5:C4:26:D4:7C:51:09:67:59:3E:C9:17:63:BD:A8
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 0198D5F17897E306933E702CC83F56C64116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 1066
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: Qa6a7Un4PhN7oUnOUus2TOWgxhw16lrQiaM4quyxg6A=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:97:e3:06:93:3e:70:2c:c8:3f:56:c6:41:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=a4a0d4bf2ab5c426d47c510967593ec91763bda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:0f:8f:c1:b1:f5:5e:fb:c5:5e:52:90:95:
49:a1:8d:c2:51:c0:34:7c:30:4b:e4:7b:db:78:f6:
69:56:75:41:fb:c7:6d:92:11:f4:e8:1a:96:db:d6:
47:2d:b5:6d:a8:f7:9f:ee:3f:ed:f6:37:27:bf:f6:
ca:c7:c9:10:1b:b4:92:4c:a3:91:4c:36:77:94:f4:
ab:43:de:35:d8:1a:ec:c7:ab:5f:f3:a8:ad:d8:a9:
09:6f:9f:38:fb:d4:94:61:e7:c4:9b:e4:1b:96:72:
2d:b7:a0:07:60:3b:7a:ec:82:db:af:b0:54:88:b7:
8f:ba:78:d1:f2:00:c2:fa:78:13:b3:5b:e0:25:05:
69:04:28:ad:8e:5d:01:fd:f4:9a:ea:c1:aa:72:06:
53:3a:69:13:3b:39:cd:b1:89:db:3b:d0:5d:e6:9c:
f9:4d:0c:3b:0b:45:57:32:58:8b:b2:ba:01:db:0c:
0d:d4:d0:7d:08:66:1a:6e:4a:6f:92:67:fd:2c:70:
e4:c2:49:44:b5:fd:34:c5:ca:f2:a5:60:dd:27:36:
fa:31:d8:71:f7:cf:e8:3b:53:65:44:fd:d6:5f:e8:
e5:e0:ed:b4:65:c9:48:f9:45:84:68:fd:ae:4f:31:
04:fe:a9:64:af:5a:04:b6:99:e4:74:68:1f:d9:59:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:D4:BF:2A:B5:C4:26:D4:7C:51:09:67:59:3E:C9:17:63:BD:A8
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a7:e3:74:71:0b:53:d2:11:7d:5f:b0:f4:11:d6:5e:42:d2:
58:5b:28:62:9b:28:dd:ab:c0:03:db:78:e2:5c:9a:6f:01:14:
4a:46:d7:4b:5a:d3:6f:e1:e1:8e:6c:62:44:1e:4b:a4:97:8c:
2e:97:4f:df:fb:f8:a7:df:da:18:27:f8:f2:9d:c0:eb:8b:2b:
be:e9:fb:3e:85:ec:f4:fd:c7:be:64:7b:15:6a:d8:70:65:cc:
19:51:5f:17:c8:48:4f:41:65:e1:e6:39:fc:99:6f:0b:37:22:
3d:96:08:6a:b4:13:ca:de:37:89:bf:1a:f3:9c:f9:76:40:6b:
c4:ff:7c:7e:51:5d:de:b4:63:bb:d2:42:e2:80:a4:e2:7b:99:
24:d1:b4:5d:aa:d0:1f:b8:82:c5:b8:27:26:49:7a:da:da:19:
e7:5c:1b:0a:5a:ac:b3:ce:6d:05:08:4f:02:f8:1c:3e:66:90:
8f:da:37:c9:1c:30:a9:2c:5c:04:2d:73:89:5f:56:01:ea:bb:
9a:70:13:5e:39:1f:ab:09:10:aa:51:df:ed:11:47:48:57:54:
37:02:8b:b3:87:c9:88:d8:68:89:2a:61:a9:34:13:d7:78:7c:
cc:0f:8b:b9:80:da:d7:f2:b8:29:20:d0:c0:ef:5b:85:c5:34:
f2:11:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:48 2025 by rpki-client