Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: zDuSISbsNRy6fi/wW+dBiF2b6a4utphXw09Ea12k7Ew=
Subject key identifier: 98:DF:6D:DE:29:61:EB:D7:F1:14:45:04:21:4A:32:01:88:A1:8F:EF
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 01984B54E4B18EC08F8EA25E388BE3F2305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:01:51 +0000
Manifest this update: Sun 27 Jul 2025 10:01:51 +0000
Manifest next update: Mon 28 Jul 2025 10:01:51 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: zmYkUhb5tr3NYrIDCF5/DOxVcOpZbMRbMj+fSOXoTQ0=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:e4:b1:8e:c0:8f:8e:a2:5e:38:8b:e3:f2:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jul 27 10:01:51 2025 GMT
Not After : Jul 28 10:01:51 2025 GMT
Subject: CN=98df6dde2961ebd7f1144504214a320188a18fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:5c:e9:02:12:ae:80:d0:cd:c4:a2:18:85:
d8:fd:da:5f:f3:d2:2d:f0:06:43:c0:97:64:ee:33:
02:4f:44:df:5c:61:3e:d4:6b:99:9a:a8:dd:12:38:
6e:4b:f3:88:9f:d2:7f:cc:b1:48:dd:0d:17:50:b9:
50:bd:1e:ff:ba:ec:d8:23:87:7f:20:3f:7f:52:54:
00:d7:8d:3e:31:55:95:fa:7c:28:83:d5:6e:3e:e7:
c4:c0:79:c1:67:d2:43:7a:e1:44:b8:c8:34:6a:0a:
19:b4:49:dd:11:98:e9:67:a1:b2:29:7a:2e:d6:96:
fb:de:ed:e2:0d:d5:d8:01:6b:eb:2e:9b:0d:bf:82:
af:02:a7:ea:ca:90:57:d3:f5:27:41:94:c8:58:aa:
3e:14:c5:f7:9d:14:35:c0:3f:e2:98:ce:40:be:cc:
af:13:4d:c6:33:e7:2c:38:aa:4d:f1:7d:a2:34:46:
2f:9f:a6:47:c2:b0:ca:20:52:8b:99:93:f8:62:20:
34:84:25:6e:27:88:95:7b:b5:31:bf:80:4c:40:a8:
17:69:e0:a2:d3:a5:d1:95:6a:ed:fd:27:f1:aa:e7:
9e:0d:5b:d1:19:0d:e2:88:01:54:1d:58:3f:4e:92:
03:42:4d:20:ce:69:3c:b7:e0:3f:8c:73:75:cd:b0:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:6D:DE:29:61:EB:D7:F1:14:45:04:21:4A:32:01:88:A1:8F:EF
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:b6:98:85:29:dc:47:f8:f6:9e:05:58:d1:58:db:9c:15:
fb:f2:35:10:92:33:e9:75:78:c1:17:b1:47:6c:01:8b:aa:f5:
25:47:09:63:97:82:21:71:4a:96:ea:87:db:8a:db:26:2d:44:
01:7b:8f:f7:f8:a1:70:46:84:61:27:fa:49:b6:64:6a:2f:93:
58:66:8e:c4:f6:c0:ff:7d:ce:bd:fa:c7:a5:16:b6:fa:c1:3e:
b2:e5:8d:26:3c:5b:88:08:b0:c3:1b:b5:0d:75:b6:99:e3:6d:
bc:3f:56:9c:94:61:59:47:45:35:f2:d3:14:b2:a6:9f:e6:8e:
b3:1d:7f:08:08:7b:52:5f:2d:44:b3:de:10:66:d3:42:87:ff:
f8:c2:82:77:e9:34:6a:c5:82:89:ff:0a:c1:c6:61:23:f6:7e:
0e:87:82:a4:7a:0a:ea:ae:cd:98:bd:a3:2a:e3:4f:81:11:a2:
f1:93:13:32:98:fb:92:29:ce:60:99:21:33:32:e9:75:c0:47:
0a:7f:b5:82:dc:da:b8:5d:34:e5:0a:5b:2b:80:50:b3:39:0d:
8a:ba:d9:f6:61:e5:7b:e3:69:c0:11:64:b1:ff:13:ec:4e:14:
04:61:c3:81:5a:f6:ec:bf:f1:68:96:fe:79:31:9b:e1:90:81:
03:c3:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:03 2025 by rpki-client