Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: QE6/vos5+SnQp6p/MVFrI1lBSQFResS1VQzq+gNtzL4=
Subject key identifier: 7C:50:0E:D3:DF:E7:AB:90:A0:AD:8A:83:6D:27:63:99:06:9E:DC:04
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 0198CACADA2D28882D8E14BAA166B8A5B009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 13C0
Signing time: Thu 21 Aug 2025 04:02:28 +0000
Manifest this update: Thu 21 Aug 2025 04:02:28 +0000
Manifest next update: Fri 22 Aug 2025 04:02:28 +0000
Files and hashes: 1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
2: McPECbWiOZZptuHIWFrOcEgtdOI.roa (hash: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=)
3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: XaNwg71d41wjtpHWGtIMS1K/UzKj+jaz8UUR7duY5ZA=)
4: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (hash: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:da:2d:28:88:2d:8e:14:ba:a1:66:b8:a5:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Aug 21 04:02:28 2025 GMT
Not After : Aug 22 04:02:28 2025 GMT
Subject: CN=7c500ed3dfe7ab90a0ad8a836d276399069edc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:f3:37:1b:2c:66:19:72:f5:eb:5d:09:7b:
f8:30:db:92:17:1b:8b:b6:d4:78:02:90:72:71:17:
a4:19:cf:62:52:13:4e:3d:63:08:f7:86:46:af:b5:
39:09:5e:ae:18:93:d8:84:04:21:c4:de:39:f5:1d:
3d:13:6a:1e:f7:ba:cb:53:ea:9d:94:a5:cc:69:8f:
44:70:c4:ac:ae:3e:1b:e6:b7:41:f3:21:b1:9b:ff:
9d:b0:13:41:0d:d0:f8:33:6f:97:6f:ac:f3:b6:64:
8d:13:f1:9d:0d:f8:b2:4e:61:9e:c5:22:12:34:ff:
80:4b:60:9c:0a:25:87:df:8e:c5:c4:58:e8:ff:c0:
f2:b9:22:e9:36:82:15:c6:6d:d5:9a:0b:ad:1a:03:
24:a9:32:03:3b:7e:c2:83:c3:35:cb:17:c6:ae:ff:
8c:36:5a:1b:9b:4a:70:2b:68:84:5b:69:08:e1:5f:
75:d4:8a:47:66:36:81:4a:0f:bf:c5:a5:82:c8:c6:
a3:38:71:55:01:fc:a6:24:3f:e0:ac:87:b5:b7:1e:
c5:3b:2c:1d:20:40:62:5d:50:bd:89:fe:1a:49:22:
78:c7:58:fd:a7:bf:f1:57:bc:90:3c:79:67:1c:7f:
75:e9:01:e1:c7:62:16:33:e6:b6:2e:20:67:7e:d8:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:0E:D3:DF:E7:AB:90:A0:AD:8A:83:6D:27:63:99:06:9E:DC:04
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:c4:1c:42:07:f6:01:74:0a:2f:f2:98:c3:19:6b:cd:03:
c7:a2:be:87:39:a2:fc:78:7d:1e:99:d7:53:7f:c2:37:05:39:
9c:03:78:72:3f:e2:54:cc:8f:bd:d2:8f:41:dc:78:f7:92:35:
3d:49:b8:e4:4b:f0:58:52:9a:9f:9d:10:eb:12:be:ec:17:96:
1a:e5:e0:c3:fc:bc:f0:a0:17:d5:11:30:6d:de:b1:6c:97:d9:
63:6c:f1:f4:9c:8f:32:c5:25:f2:f1:d7:a5:4f:e8:0e:6d:59:
59:ad:89:c8:0d:f1:23:2e:9b:c6:75:3d:3e:ae:f8:56:64:5e:
2c:d0:10:96:f6:43:99:92:05:85:8a:a7:14:74:fa:fd:41:e0:
9a:5c:3b:a9:96:86:28:c4:7f:b4:c9:2a:4c:d2:48:dd:44:35:
27:78:a9:2e:d9:0c:c2:39:b9:5f:53:cc:18:99:06:80:1b:1c:
d6:4f:0b:6e:f0:00:1f:04:08:ac:a4:d8:9f:56:37:9d:73:7f:
b9:73:7b:4a:67:24:42:6a:14:fd:51:11:f8:28:fb:2e:9c:1e:
3d:09:4d:0f:9e:cc:bd:e2:e5:57:67:d3:25:60:5c:3f:ee:7f:
b4:75:40:0b:65:31:d1:67:f8:77:a6:fa:cb:38:ba:d8:56:74:
f6:7a:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:33 2025 by rpki-client