
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: VWPYThJAlH9DLyUPi04Za+vc8faKnLd9yoyCoFUlO78=
Subject key identifier: 60:90:55:FA:93:5B:07:E0:5E:2F:8E:E9:42:56:11:7B:1B:E8:D6:4E
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 0198481B91F44A6E11D8A3E111CFBC1BFA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 19:00:23 +0000
Manifest this update: Sat 26 Jul 2025 19:00:23 +0000
Manifest next update: Sun 27 Jul 2025 19:00:23 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: MPjVvfRV8BKUzit+8iIpionbBQCBHnpEvyBBfOvl0jw=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:91:f4:4a:6e:11:d8:a3:e1:11:cf:bc:1b:fa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jul 26 19:00:23 2025 GMT
Not After : Jul 27 19:00:23 2025 GMT
Subject: CN=609055fa935b07e05e2f8ee94256117b1be8d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:b2:4d:17:74:c0:ec:ff:63:c8:a4:0c:0a:
85:2e:e2:70:dc:96:27:9a:53:59:6b:5a:33:df:3d:
eb:10:77:bf:c1:90:57:4c:17:c7:5f:6f:32:42:62:
99:f5:a9:b2:27:c2:86:24:33:5a:72:b5:f4:6d:30:
d0:f6:8d:55:13:db:50:23:7d:99:72:11:0d:95:a9:
e2:2b:a4:8e:c2:6b:ec:58:77:57:03:be:37:b1:18:
a8:e8:d6:51:0e:c1:12:0b:52:8c:ea:7f:82:c9:1d:
41:b3:c4:6b:79:cc:6c:fd:15:6c:23:ac:f8:e7:30:
51:e8:97:a6:02:4e:c5:7d:a0:0d:5e:b4:cb:6b:1e:
89:4a:93:70:57:4e:20:66:16:d9:d1:81:80:c4:86:
9a:37:dc:78:e8:c0:bf:c5:c5:37:24:04:ce:ed:4e:
10:81:5c:6f:cb:87:d8:b9:a2:0c:5b:49:f9:9e:7f:
bb:8d:85:35:3c:7d:55:b8:d9:05:28:53:4a:b1:70:
62:de:1c:5a:f5:f1:9e:9f:c2:2a:ea:1e:f8:26:5f:
9f:c6:9a:4d:fb:b0:99:ec:5d:86:09:40:4b:b9:b5:
84:7f:68:14:35:63:39:5a:f6:66:9d:0c:e6:30:8c:
33:5b:57:e1:31:86:c6:bc:be:f0:56:ed:85:6c:7d:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:55:FA:93:5B:07:E0:5E:2F:8E:E9:42:56:11:7B:1B:E8:D6:4E
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:b3:88:21:4e:2e:29:7b:6d:0c:89:28:68:9b:cf:5a:83:
b8:26:ec:55:44:9f:39:d3:b0:2d:3b:1e:86:28:7c:27:ac:fa:
57:a9:e8:12:ce:0b:ae:0c:4a:36:1c:87:ba:14:d7:e8:ac:c8:
ab:6e:42:b6:99:57:07:d6:c6:98:a3:9b:22:cc:92:96:be:f3:
3a:6a:9f:c7:d7:87:f0:d5:e5:8b:25:1d:52:6d:5b:8f:d9:c5:
8e:01:cc:ed:97:4b:05:23:37:44:aa:bc:6a:a6:50:d0:56:00:
4c:51:80:a8:69:77:22:51:66:6b:13:55:e2:db:b6:99:b2:12:
bc:17:00:f1:80:a3:f2:0f:c4:8c:4c:50:f8:cf:c4:aa:bf:26:
33:6e:7c:53:6d:46:48:dc:18:5b:a0:0a:f9:0f:5d:c5:89:be:
f6:63:18:d1:59:b5:29:42:82:e1:04:66:e6:ff:bd:c8:a6:b5:
54:6f:87:89:52:d5:1a:cb:ee:8e:84:e5:ea:f8:ea:ef:23:eb:
b5:66:f1:58:1c:ff:54:56:6a:da:50:82:3b:49:c9:db:8c:78:
cf:f4:87:71:35:b5:38:49:b4:f8:b3:3a:bf:e4:19:0f:c0:25:
52:17:1a:42:c7:31:38:54:53:9b:3a:f8:20:24:5a:df:c1:1a:
a0:f5:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:47 2025 by rpki-client