Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
File: iWxjRnXxe_ak81-hi7hVYBoYpbU.mft (raw, json)
Hash identifier: FfnpGH28Oc7VQTuuYyY/kTZNm2AdoBTUhKIBsLKEWoQ=
Subject key identifier: 95:E9:F8:E3:6B:02:88:99:1B:3F:B2:A1:4D:4B:11:1C:3B:CE:2B:11
Authority key identifier: 89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
Certificate issuer: /CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Certificate serial: 019921B2150E2B6D2BC35F62904513CBD1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
Manifest number: 23
Signing time: Sun 07 Sep 2025 01:02:22 +0000
Manifest this update: Sun 07 Sep 2025 01:02:22 +0000
Manifest next update: Mon 08 Sep 2025 01:02:22 +0000
Files and hashes: 1: iWxjRnXxe_ak81-hi7hVYBoYpbU.crl (hash: DnrvyRp5mLWB4EL7P7zMU+req9hAogH5mmoIlqeYbu8=)
2: yulwp-3vKKFAdXVOa4nXVzHSFWU.roa (hash: q4+Kq35pmEpGGWwSszRZa770efG6x8cdf3PGbgipeks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:15:0e:2b:6d:2b:c3:5f:62:90:45:13:cb:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Validity
Not Before: Sep 7 01:02:22 2025 GMT
Not After : Sep 8 01:02:22 2025 GMT
Subject: CN=95e9f8e36b0288991b3fb2a14d4b111c3bce2b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:73:4b:29:1d:bc:2c:a5:03:9f:60:b6:84:
a6:00:59:5c:12:d4:28:24:ef:e1:62:4d:f1:ef:2f:
23:d1:2a:ef:da:f9:68:4e:69:d0:4a:bf:18:10:f9:
b1:6d:5e:51:6b:bc:52:13:f5:32:28:34:38:67:ab:
36:0a:58:91:86:15:fb:51:13:97:0b:bf:90:b7:13:
3a:0b:e9:1a:0a:88:30:50:20:c3:f4:94:f3:b6:12:
11:73:a1:ad:4d:0f:ac:61:00:2f:b5:4d:7d:d6:71:
f6:44:32:68:bb:5a:73:b0:f9:d5:fa:fe:cd:ee:98:
45:4d:2e:4e:37:0c:6b:e3:b9:cb:3d:0e:4b:38:b2:
2a:26:09:69:65:eb:52:f6:49:e2:d5:09:27:4d:ff:
c0:fa:78:9f:de:e4:08:a4:97:66:b4:70:8a:d6:50:
b0:60:68:62:c7:1b:87:5f:94:a3:eb:4a:43:72:15:
57:fd:b7:fc:05:b9:6f:7e:ea:84:6f:b2:b3:7a:51:
8f:72:87:94:0e:c1:bd:b9:04:a8:35:5d:7b:19:49:
42:31:c2:8d:af:3d:a7:f5:05:79:cc:24:2e:69:cf:
0b:6d:a6:36:e4:1f:bb:4c:8b:c8:07:56:c7:4b:e6:
b7:9c:34:56:93:34:2f:43:e1:8f:01:38:b8:3d:18:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:F8:E3:6B:02:88:99:1B:3F:B2:A1:4D:4B:11:1C:3B:CE:2B:11
X509v3 Authority Key Identifier:
keyid:89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:4b:12:0f:57:28:f0:a4:b8:87:ff:45:e4:1b:07:1e:67:
4a:0d:09:c4:6c:bf:6b:8d:f3:c2:84:b5:3f:83:8d:a4:a3:a6:
0b:c1:e3:d9:22:fe:49:2d:49:b8:2d:3d:a4:9b:44:28:d2:00:
23:fa:16:35:a4:8b:11:22:72:7c:6b:6a:47:78:95:61:9a:38:
30:fa:f4:1a:39:ff:cc:b9:01:70:12:5b:a1:35:c6:b4:50:c2:
2b:90:b4:d5:3a:ff:54:a4:1c:5c:27:72:3b:76:46:c0:b9:52:
35:64:db:a5:87:49:85:6d:49:e0:0d:90:72:c8:b5:a4:58:a4:
cc:31:e2:a3:ff:23:5b:f7:af:38:30:2c:f3:5f:cd:77:65:4f:
d9:fc:88:35:dd:48:c4:50:fd:38:4e:7a:35:e9:da:64:90:9b:
00:8b:d1:d0:7a:fd:70:af:a1:f0:c8:ce:a1:d1:f5:42:16:3f:
60:61:09:34:7c:92:99:75:eb:1a:3f:f1:33:e4:7a:d5:ab:c9:
05:0c:70:a4:92:c7:03:53:ce:86:c3:68:4b:79:6d:e0:32:06:
99:80:8e:31:79:fd:bb:6f:ad:d7:88:6e:21:79:be:f7:b1:d8:
88:e7:d4:18:23:b7:69:0b:a4:b4:b0:18:99:17:2c:c6:31:31:
75:99:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:17 2025 by rpki-client