Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: ul+aZKcGydPnVZPXj4XvmxQNhtzI9wek/v0TvaPlOT8=
Subject key identifier: 41:C3:CA:01:4A:E3:D1:54:C3:EF:1E:88:5C:6A:86:6B:72:55:29:AD
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 019A71B7EB2B79ED94F736C5D709F6C3B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 070C
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: BQ/A+C7oWPPxcmOeNqRQ4AQHmSwvNBzB/f1/Bp3RD/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:eb:2b:79:ed:94:f7:36:c5:d7:09:f6:c3:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=41c3ca014ae3d154c3ef1e885c6a866b725529ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:bc:18:9a:71:36:9c:ce:bf:be:df:7b:7c:
91:6a:db:ac:43:d3:7f:9f:ca:d4:a1:c3:d8:89:7a:
e4:3f:63:cd:34:0a:47:d4:56:39:77:cc:ca:a7:a0:
36:0d:35:ea:cd:88:31:e1:5d:8c:54:bf:c6:29:21:
ef:9f:80:3c:2d:f0:3b:1c:90:7e:0f:d9:c5:b7:71:
67:89:50:89:ac:a0:a8:e5:64:2a:46:7e:f5:d0:92:
fd:c2:f5:a9:b2:c4:dd:7c:8a:e3:73:8f:9e:a8:a0:
85:fb:5c:f3:b1:2e:31:81:74:02:b6:c4:f4:d6:aa:
bd:b8:e6:0e:fe:f6:94:0f:b3:7e:06:c0:c7:77:0b:
0f:43:ed:ef:2e:ef:7d:21:1b:48:e7:4d:7b:82:46:
ed:d0:49:fe:30:e3:a3:51:9a:3b:4e:3a:64:81:49:
5d:07:cf:02:dd:dd:da:4a:0e:2f:25:42:b3:cf:99:
eb:ed:d7:df:21:19:c0:d9:eb:ef:5c:77:90:6f:97:
43:0e:b1:33:e8:59:30:2d:a0:f0:a0:43:29:42:ff:
a5:8a:88:3b:35:5c:1f:af:f1:d0:90:74:e4:23:22:
50:5f:ed:70:0a:dd:7a:06:17:90:b0:c4:05:1d:f3:
73:c1:98:d5:5e:c1:39:20:44:58:27:cb:02:16:c8:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:CA:01:4A:E3:D1:54:C3:EF:1E:88:5C:6A:86:6B:72:55:29:AD
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:0c:8f:30:74:fc:c9:ab:70:6d:13:59:47:54:51:57:18:
78:21:20:76:70:49:ad:49:8a:c3:dc:f2:49:47:6d:46:88:21:
08:b1:d0:38:43:f7:08:da:aa:ec:45:c1:16:af:0c:d1:c5:d3:
1f:5b:26:37:63:d1:8d:77:ac:d9:a0:16:b7:9c:87:9a:11:a2:
3e:32:70:cd:b3:f7:99:27:7c:2e:3b:ea:dc:85:ce:64:91:e2:
32:51:52:95:2c:42:18:f3:aa:a2:0c:c5:30:e2:9a:86:c9:3c:
c5:c2:de:c6:a6:32:5f:86:fe:89:a8:a9:be:39:da:c1:96:55:
70:b4:b1:f3:09:86:a5:e8:4a:52:08:0c:29:1c:10:33:84:36:
14:f6:be:02:bd:98:e8:12:02:63:b3:fd:d1:c4:76:59:18:77:
4f:f8:6d:6a:1a:a0:fd:44:56:84:6e:22:e4:e5:b5:ab:26:1a:
e0:5a:e1:ce:76:1b:d4:15:51:32:34:69:9f:55:f7:54:7b:86:
0a:7c:ee:85:49:f6:27:e6:6e:ed:8e:6c:4c:d8:cf:c3:d1:15:
f6:45:3d:73:fd:3d:25:81:37:ea:94:d1:c6:8d:08:0a:c0:da:
99:64:8b:8b:91:c6:bb:d3:29:95:93:2c:5e:a9:e1:18:56:7c:
25:c6:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client