Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: GNpb6fBc8Uksklz85alVmV1AX2soc0ck/Ej7dru9Wuk=
Subject key identifier: 8E:23:40:7B:83:E6:03:0B:EB:96:0B:7B:9C:E5:4C:8B:DE:10:1F:35
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 019916BF144B49F1362B4E373786C545EAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 166D
Signing time: Thu 04 Sep 2025 22:00:45 +0000
Manifest this update: Thu 04 Sep 2025 22:00:45 +0000
Manifest next update: Fri 05 Sep 2025 22:00:45 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: 34Ust1c7rt4mUGVvDoc44crcx8vXJ6g1Gdm5cvpzuVM=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:14:4b:49:f1:36:2b:4e:37:37:86:c5:45:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Sep 4 22:00:45 2025 GMT
Not After : Sep 5 22:00:45 2025 GMT
Subject: CN=8e23407b83e6030beb960b7b9ce54c8bde101f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:56:73:c1:f1:10:e4:b2:e1:17:8b:77:2c:
ad:90:12:2f:db:6f:82:8b:47:35:86:18:b2:95:8a:
87:c2:9a:9b:fe:5c:4e:51:0d:76:12:26:20:59:a8:
f9:d6:85:b2:c2:d4:e7:ec:04:f4:46:26:99:93:e9:
e9:1a:c7:35:6f:68:43:67:12:3f:d5:1c:81:c3:57:
99:6e:aa:2b:27:9a:bb:d0:9d:e4:a9:e4:17:cf:90:
2f:86:1c:76:68:c6:8d:d6:9c:2e:32:b8:c5:86:3d:
4c:38:48:cb:3a:ef:48:b3:ef:50:9e:9a:b9:83:4d:
26:20:fd:db:f2:3f:2b:b9:76:b3:fd:2d:49:b7:33:
19:14:c0:a8:21:a1:cc:d3:71:6e:70:ff:bb:c5:8c:
73:cf:33:c9:7d:9a:18:9d:cd:b2:c2:b0:c1:b9:59:
a4:83:fa:5d:d5:d7:06:d5:10:f8:fe:af:ba:b5:ba:
3f:75:94:df:e3:86:3a:b6:17:af:5d:2d:41:3c:f1:
02:af:bf:23:29:0f:d1:ad:69:0e:56:49:cb:d5:87:
e2:67:c8:99:75:dd:45:a2:6f:dd:5d:2c:c5:b0:3b:
ee:07:eb:12:0b:67:40:43:2e:52:c1:53:cf:20:57:
f8:10:90:61:1e:be:ce:f0:c5:09:53:2b:44:64:e7:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:40:7B:83:E6:03:0B:EB:96:0B:7B:9C:E5:4C:8B:DE:10:1F:35
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:07:88:02:3a:6d:b8:d5:f7:11:5b:be:f5:2f:3b:c7:f3:
79:a6:21:3d:27:1a:94:52:88:d9:1c:3f:cd:a3:fe:4a:c8:cc:
65:df:f7:2f:fe:f0:24:34:38:b1:aa:09:d6:05:87:8f:fa:89:
12:58:88:29:ed:b9:91:52:1c:4d:3e:38:f6:31:8d:93:0d:ca:
08:0e:e3:a8:32:2b:3e:86:28:5a:78:84:7a:75:eb:c1:ff:f3:
78:92:d7:72:07:88:67:0c:02:e8:93:ec:1a:17:ed:54:b5:f2:
0a:dd:5e:69:24:c0:e0:5c:14:77:19:b6:d0:43:10:16:8d:29:
30:7a:5e:68:fd:99:59:ee:2d:6b:76:6a:f9:ae:ea:a6:86:9f:
4f:71:fa:d8:f9:39:fe:52:42:c8:5f:5e:49:37:45:dc:91:9d:
2e:54:ad:fe:d6:1c:bb:5b:9a:47:c5:b0:f2:cb:9d:e6:b6:dc:
28:b9:c0:72:02:32:62:b7:9e:35:ba:9a:12:72:75:9e:2f:9b:
0d:bc:c1:89:12:80:d1:0c:68:a6:d1:2c:cd:48:fa:e5:4c:05:
fa:c1:66:2e:93:e2:23:2a:db:cb:1c:3e:de:4c:b0:0c:ce:5a:
15:0f:11:a5:54:ed:90:05:05:3c:17:7d:7b:a2:e2:1a:d4:99:
d7:c9:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:27 2025 by rpki-client