Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: +YanRcljUGz/bOVuZji81dNWYk72lJShrZHTTu2y99I=
Subject key identifier: 03:AB:AF:15:D1:2C:BE:F5:DA:CB:56:53:A2:3B:0D:54:F8:58:63:CE
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 0198D5F157C50DE6A6C364A12FACB39595BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0563
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: EN4kNimKZ2KNRZbH0YwEWDXUG2d+4VkYxczBSxg2J3Q=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:57:c5:0d:e6:a6:c3:64:a1:2f:ac:b3:95:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=03abaf15d12cbef5dacb5653a23b0d54f85863ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:6c:93:e4:7a:95:99:dc:75:43:11:2f:a9:
ac:cb:ca:25:ba:10:c2:56:ba:e9:84:27:7b:c9:16:
21:a0:f9:d9:08:1c:af:df:7b:0b:50:0e:7b:c8:3b:
f4:fa:d6:22:1e:fe:5d:09:21:c4:74:ac:6f:fe:0c:
3b:37:d0:e6:3f:fb:cb:a6:65:d5:20:47:ee:0e:08:
63:3a:9c:60:80:c5:a7:e3:5a:eb:8e:ad:e1:2e:c6:
a7:e3:a9:a5:73:ed:a6:7b:b2:c0:2e:10:6d:f4:6b:
84:38:09:77:4c:c7:87:50:10:89:7d:d9:25:41:4f:
7b:5e:35:dc:2b:15:27:e3:f5:4c:95:8b:36:1f:c4:
c3:3f:c5:36:6d:84:31:f9:2d:e6:5a:dd:ed:ed:53:
19:ce:88:dc:5e:3b:fb:61:64:55:b1:8e:62:de:c6:
d0:0e:07:49:ff:f6:fd:61:25:b2:a9:84:8a:be:73:
00:be:6e:18:33:cc:a9:96:da:99:2f:12:0e:c1:be:
f8:4e:21:e4:11:2d:d4:2c:79:ab:7a:5d:8f:0a:e2:
91:93:ab:19:87:4e:74:97:63:87:e9:c0:2a:aa:62:
25:ec:19:81:aa:4e:b8:ae:e8:3e:03:5d:f2:82:96:
19:26:38:ee:6a:4d:fc:fd:d2:d3:21:93:9f:81:62:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:AF:15:D1:2C:BE:F5:DA:CB:56:53:A2:3B:0D:54:F8:58:63:CE
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:50:87:86:9e:eb:20:83:b3:df:f3:4c:fd:ff:c9:8f:68:d7:
13:b5:46:e4:99:14:9c:fa:45:55:be:50:25:24:28:c0:8d:06:
f1:da:53:e3:72:47:d2:95:a7:2b:42:3e:36:f1:cb:19:00:82:
e9:c7:2d:19:31:d4:59:2e:67:b9:14:98:e8:2d:2a:17:36:c8:
34:f7:e2:0f:0b:ee:92:8e:5f:ff:15:2c:7b:64:4e:f5:89:da:
67:bd:53:38:92:c5:5f:d6:a5:e4:71:16:65:65:a6:71:40:1b:
84:5e:17:35:0e:09:36:ef:d1:52:2f:42:c8:c9:1f:4c:1c:41:
58:8d:fe:d7:bf:ef:5b:a9:f9:29:4d:e1:0f:75:1e:ad:ce:ff:
85:fd:06:45:5a:e6:17:b4:8c:29:fc:46:6b:40:8d:33:c0:b8:
43:47:93:d7:99:77:6d:e2:4a:b3:41:5c:cd:f5:e5:13:eb:2a:
bd:35:97:48:b9:07:a0:cb:c3:aa:e8:9a:00:06:b1:d6:9b:7d:
5e:df:47:f9:80:47:5e:7e:67:55:ec:0c:23:0e:0d:b1:d4:5e:
be:8c:34:0a:39:31:bf:a6:bf:ce:c9:aa:f6:07:21:8d:c0:e4:
1a:e1:4d:9c:bf:ea:3c:c8:8e:71:fd:07:15:e7:e8:73:7f:c7:
43:56:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:07 2025 by rpki-client