Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: fFSG/eOww7ULtCG0bAbdvioh5VblI/41C0LlQ7LcPJM=
Subject key identifier: 66:C3:91:62:53:A3:9F:40:51:75:A5:4F:7E:73:A1:DD:6D:7C:83:7B
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 0198499C08040FC942BAE096507C8E8B25C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:19 +0000
Manifest this update: Sun 27 Jul 2025 02:00:19 +0000
Manifest next update: Mon 28 Jul 2025 02:00:19 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: olGnaT24fsk2/oMgo8jv0tT3U8LhhwQk4V0Fpisp3NU=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:08:04:0f:c9:42:ba:e0:96:50:7c:8e:8b:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jul 27 02:00:19 2025 GMT
Not After : Jul 28 02:00:19 2025 GMT
Subject: CN=66c3916253a39f405175a54f7e73a1dd6d7c837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:ca:c3:75:88:a6:f2:f6:91:69:0b:8a:96:
2e:60:b8:6a:31:04:06:43:c5:c1:98:5e:f2:25:07:
43:3a:13:69:aa:26:af:95:47:c4:a1:04:f8:af:4f:
8a:28:6f:6e:5c:85:65:34:54:10:af:ad:b2:67:73:
fa:e4:3d:77:bd:3b:70:26:45:05:87:03:5a:71:1d:
e6:ae:19:53:48:db:28:a4:4d:8a:58:6f:93:db:5f:
7b:a6:e2:10:07:da:c4:a2:63:f8:36:56:ea:59:ef:
39:f4:ae:c4:b8:2b:55:92:0f:e3:7f:3f:f8:c6:1d:
e8:72:0e:af:ec:10:cc:f0:21:49:b6:72:a6:68:65:
d1:ae:87:69:0d:da:17:a6:5f:52:7b:78:c5:f0:70:
50:24:1f:0c:10:bf:a2:e2:05:45:fb:4f:6b:8c:be:
cb:cb:5f:cb:6e:25:dd:52:2a:5b:34:5c:5f:98:ad:
63:fb:78:28:eb:3d:50:11:f6:c4:9b:77:08:66:5d:
2c:78:e1:ac:4f:36:5a:ad:02:2f:a9:de:ca:7d:aa:
17:86:d6:74:f8:6c:5f:e8:35:52:7c:a3:9c:81:4c:
21:8a:67:af:d3:23:49:f2:52:18:ec:01:7d:14:e8:
e3:0a:57:7a:04:dc:34:4c:3f:be:34:b7:d1:64:fe:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:91:62:53:A3:9F:40:51:75:A5:4F:7E:73:A1:DD:6D:7C:83:7B
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:36:d6:41:30:6c:08:7f:8f:34:64:4e:88:64:a3:1a:29:1c:
a8:1f:9f:d0:c2:98:b0:79:f0:76:00:87:ff:4f:bb:0d:fb:ab:
48:21:41:94:80:cd:89:76:22:93:a9:87:14:4b:b6:44:a9:2c:
a7:6f:11:0a:75:fa:23:7e:bf:a3:a1:35:9a:c9:77:19:fe:8e:
b1:26:51:ff:8f:31:f3:db:65:77:ad:a9:fb:11:04:47:82:48:
73:63:de:d2:3b:48:50:78:6e:c1:ec:39:df:50:10:eb:80:80:
61:5e:58:0a:c6:7a:85:ac:48:46:2b:d8:e4:c9:8f:20:08:ae:
4b:11:ed:19:e1:54:70:1a:5a:e6:b8:ab:8e:d5:bc:55:bd:7c:
13:e9:74:51:f7:85:18:be:58:8b:12:10:a7:18:18:be:0b:4b:
a1:ea:e8:73:1e:27:69:55:76:24:32:70:34:0a:23:79:a0:3f:
af:8a:88:b3:8c:de:15:3d:57:5d:54:1e:5e:d8:ed:1b:75:d2:
7e:7a:43:45:ab:b4:50:f3:ed:b0:15:00:f8:84:53:5b:02:e1:
28:b9:dc:36:b6:c9:23:ae:a7:b4:f6:01:9e:0b:e6:f0:ee:91:
4b:4e:12:d3:be:be:c7:b4:a1:43:68:3c:f8:63:ed:16:d8:e3:
e7:5f:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:49 2025 by rpki-client