Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: COw+h0mkupMxjGxl4myRFDhPeftVf71IrJJdRArx1Ao=
Subject key identifier: AC:A7:B7:AD:50:36:F2:85:5A:47:4C:6D:5E:70:B0:C8:D6:DB:4C:34
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 0199161C17F12F6587AC522397DE2B2447B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 0658
Signing time: Thu 04 Sep 2025 19:02:43 +0000
Manifest this update: Thu 04 Sep 2025 19:02:43 +0000
Manifest next update: Fri 05 Sep 2025 19:02:43 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: qpCW38WsG1g88yROViF4//MW4A76rhQ8LS8W8Tk988Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1c:17:f1:2f:65:87:ac:52:23:97:de:2b:24:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Sep 4 19:02:43 2025 GMT
Not After : Sep 5 19:02:43 2025 GMT
Subject: CN=aca7b7ad5036f2855a474c6d5e70b0c8d6db4c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:11:74:4b:a7:e0:1e:67:1f:c1:1a:b7:54:
a6:b0:22:10:bf:7c:10:df:c5:60:ea:1a:b5:f2:2e:
ca:6e:1b:c9:98:29:02:5f:19:e2:5a:69:33:c9:00:
54:d4:29:d4:72:08:d0:5e:d3:8a:ed:02:14:44:be:
1f:b7:53:e0:17:e3:b5:36:eb:40:70:99:11:b7:85:
8d:3e:89:a7:f3:b6:3f:9b:cb:38:27:0e:c3:83:c6:
30:5b:e7:42:11:03:1c:23:34:62:c3:c8:d9:a5:4b:
fb:ad:63:86:7b:b2:ca:fe:eb:fc:66:c5:32:86:f6:
af:c4:0f:22:ac:28:05:6e:3d:cf:49:13:e8:25:cd:
61:2f:1a:aa:92:dd:60:dc:c4:36:6f:4e:6c:3e:65:
5e:e1:e6:6e:3e:a6:96:f4:8b:f6:38:02:e4:53:24:
00:05:54:66:89:a2:44:c5:6b:5b:fd:08:6f:ff:58:
60:69:28:61:97:2a:1f:c9:f2:0b:9d:34:ec:c2:99:
5a:f5:6f:d8:b7:60:c3:1a:86:69:17:5b:16:6e:b0:
78:2b:b9:a3:0f:e4:ba:41:07:75:3f:4c:d7:b5:55:
4e:b8:52:db:fe:b2:d4:c2:5e:a5:1d:fa:57:3e:e8:
b6:7e:ec:57:e9:d0:c6:bf:6e:b4:2d:58:ee:13:fd:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:B7:AD:50:36:F2:85:5A:47:4C:6D:5E:70:B0:C8:D6:DB:4C:34
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:e5:7c:98:48:38:8f:34:6b:20:35:9f:88:e5:22:63:8f:
63:33:f4:4c:4b:d6:66:c4:90:dd:25:c0:d1:1d:df:55:99:fd:
e4:1f:98:17:cd:7b:db:65:31:d6:eb:23:01:5b:a5:d8:c0:c6:
38:ab:be:5b:e0:9a:25:c2:39:8a:d4:8f:ec:2a:c1:62:2c:1e:
92:d2:e9:1b:39:35:a2:ed:7c:c8:76:c7:2d:9b:8d:54:29:33:
65:ff:d0:33:65:1a:1d:33:50:fb:4b:b8:d8:bb:f0:58:8e:b2:
b6:2f:86:39:b4:87:54:04:fc:da:c1:89:d3:02:4f:00:09:72:
82:d6:1a:12:d4:b5:f8:f0:d3:12:56:7b:80:c6:80:68:22:35:
4c:b2:69:71:5a:f1:3d:67:a9:bb:fd:0d:54:3d:25:cf:91:60:
9a:3a:3a:e4:0b:f4:df:3c:c6:55:98:ab:2a:02:ab:92:9f:16:
1e:9b:3c:02:18:4c:d0:08:df:6f:84:44:ba:dc:92:6b:10:dc:
d6:e9:ea:6b:2b:33:63:de:75:07:17:7b:bf:b6:fc:f2:ec:89:
e8:5e:ee:29:8a:79:85:81:54:a6:c2:7a:60:d4:ca:8d:a4:f2:
3d:e7:b6:fb:cb:c7:3c:3e:43:b0:3c:6c:18:63:52:b9:bd:04:
6a:97:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:15 2025 by rpki-client