Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: DcrP7D9RzwVuxuxPzZLO/iLjUI9HYBX+ws0SkuDYUxY=
Subject key identifier: 30:C4:0C:9F:33:51:A5:EE:EA:16:73:E8:B9:3F:9A:C7:82:E9:57:CE
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0198530DEF3ABE913EB8FEEEA7D583A798F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1598
Signing time: Mon 28 Jul 2025 22:01:18 +0000
Manifest this update: Mon 28 Jul 2025 22:01:18 +0000
Manifest next update: Tue 29 Jul 2025 22:01:18 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: xo52xPDtR5ACCf+Qll2OUxekslFuAVS0FAO3opxHM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:ef:3a:be:91:3e:b8:fe:ee:a7:d5:83:a7:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jul 28 22:01:18 2025 GMT
Not After : Jul 29 22:01:18 2025 GMT
Subject: CN=30c40c9f3351a5eeea1673e8b93f9ac782e957ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:da:38:cc:ca:05:04:e0:14:b3:2a:5d:f2:
b9:8e:80:e3:17:8a:d6:96:01:5b:43:8c:cc:93:6c:
e2:ba:5a:fe:d4:65:2c:6c:77:0a:5a:aa:9b:48:9b:
bc:72:18:b4:d5:79:73:9e:f2:7a:4d:76:54:be:52:
5d:cb:35:9c:58:15:ee:02:73:39:46:bc:f8:83:f1:
8a:e2:b7:dd:4a:f7:1b:50:74:5b:f5:a8:07:f7:06:
88:a4:4b:a2:a4:ac:46:20:14:d9:f7:0a:48:64:d9:
42:97:79:49:6f:97:0c:14:dc:b0:30:f0:10:5f:ab:
93:6f:6a:46:91:1f:b4:0f:ff:93:1f:e5:ef:68:3a:
34:01:a2:67:e3:61:20:07:ab:1e:88:4e:de:f1:b4:
e3:2d:e5:86:53:53:ec:a5:d6:e2:06:1e:7f:0a:16:
70:ce:09:c3:2d:26:f0:92:36:77:9d:32:d1:1a:d0:
ec:3d:01:55:36:40:2a:49:b0:56:9e:e4:58:06:47:
47:56:6b:91:ea:0f:14:8e:02:3a:9d:27:96:a4:55:
a5:bb:e0:d0:b3:6d:1d:bf:1a:42:cb:bc:72:0d:94:
ff:bc:83:f2:b1:49:31:4d:2f:c4:20:65:4a:cc:3c:
f1:99:4b:71:90:5f:ad:7a:04:eb:81:a4:d1:29:5a:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:0C:9F:33:51:A5:EE:EA:16:73:E8:B9:3F:9A:C7:82:E9:57:CE
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:ce:6f:84:3d:6a:84:a3:73:17:08:1b:f6:78:28:10:12:
c2:2d:d9:b3:9d:b9:89:1b:95:fe:bf:0c:ac:33:c0:08:07:f5:
cd:f3:74:c9:5d:7f:f6:98:f0:a2:ed:b6:9f:34:21:81:8a:3f:
4d:6b:00:ea:22:63:de:22:1d:a6:e8:2c:ca:82:1f:0e:98:1c:
da:91:b9:a7:e2:b4:7b:d5:b0:43:38:58:25:72:72:4b:44:ef:
04:4b:2e:0a:3e:dd:8b:3a:10:09:ce:0a:e5:1f:9e:fd:e8:70:
c5:ee:73:f9:6b:2a:a3:ba:05:75:ec:c6:ab:a8:6f:b0:c3:4d:
c4:f1:e4:53:46:c8:11:27:5f:8b:00:bf:d6:83:07:d1:30:cc:
b9:c5:e7:9c:76:6c:fd:09:fc:b7:6a:99:36:7f:93:b6:f2:8f:
29:d6:06:4f:a6:9b:36:aa:1f:a1:0a:37:d0:0c:67:d8:38:8d:
c2:37:96:99:87:ba:f3:46:d1:6f:5f:65:9b:d9:d8:ce:74:19:
ce:91:ba:89:85:5a:32:c6:2f:c5:64:46:13:c4:a0:a0:68:57:
87:75:24:0d:26:a4:7a:cf:8f:db:fc:2f:fe:3d:69:cb:9b:ad:
4a:3a:48:14:71:0a:0e:b2:6d:74:4d:a5:4b:ce:b6:6f:35:23:
d6:35:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:27 2025 by rpki-client