Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: adNQhT2xfB83YkX/sOZVqKyOoRfDV0DB39dcGr7N+i8=
Subject key identifier: 89:CE:9A:71:AC:CD:D0:7C:F1:C7:FB:08:34:91:98:67:67:5F:D4:EF
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 0198C8DD3848ED769F3204016234A8F1E688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 0B35
Signing time: Wed 20 Aug 2025 19:03:17 +0000
Manifest this update: Wed 20 Aug 2025 19:03:17 +0000
Manifest next update: Thu 21 Aug 2025 19:03:17 +0000
Files and hashes: 1: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (hash: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=)
2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: EneYo/KMIFuhWhIpY36wCEDH+RfoiQd7GIufbl/oeM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 19:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:dd:38:48:ed:76:9f:32:04:01:62:34:a8:f1:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Aug 20 19:03:17 2025 GMT
Not After : Aug 21 19:03:17 2025 GMT
Subject: CN=89ce9a71accdd07cf1c7fb0834919867675fd4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:98:72:ac:5f:74:76:de:a5:eb:d0:0a:f9:
79:ce:41:2c:82:40:26:59:9b:b2:74:87:cf:89:ad:
08:d1:84:27:07:37:14:91:d6:ee:7b:00:4a:93:40:
3e:1e:6a:a4:0f:fd:fe:48:fe:9c:42:fe:fe:fe:78:
bd:0c:bc:b7:1c:0b:51:81:8a:ca:98:d1:6f:63:6b:
21:82:f3:3d:a4:a8:43:e4:e3:e7:69:e0:6a:81:76:
f8:0b:f8:ec:3d:3d:fc:b0:4e:ff:91:d7:a0:6b:13:
06:be:41:d6:7c:b5:b3:e0:05:ef:78:96:d4:2a:76:
57:b3:9b:19:9b:d0:f2:db:56:be:5c:c1:c6:35:11:
b0:d2:52:88:3a:8b:d3:56:23:b0:c6:32:fb:16:43:
ad:ca:dc:48:53:1f:dc:a1:5d:6a:ca:78:d4:8f:75:
80:18:1b:b0:04:74:f2:f3:0d:2c:2d:ec:d7:ba:34:
8d:e5:2a:dc:a8:7f:87:2a:fe:59:2f:58:e0:95:7c:
2f:1b:79:5d:64:2a:e1:de:cc:79:f0:30:af:57:ea:
fc:b0:f8:1b:32:94:f4:64:5a:24:a3:8d:63:23:01:
00:47:50:d1:7d:73:b0:fa:80:06:aa:63:bc:01:6b:
f4:8d:6b:8f:d6:04:0f:d9:e8:df:84:c7:48:fd:e8:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:9A:71:AC:CD:D0:7C:F1:C7:FB:08:34:91:98:67:67:5F:D4:EF
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:a7:08:e3:04:33:ad:56:76:b9:f5:11:59:47:b1:70:94:
a7:d5:6c:8e:be:a4:8c:ac:a6:dd:9b:10:25:e3:ef:45:66:29:
a4:5d:33:58:56:d6:43:ff:63:f4:a8:33:50:80:7f:a2:9c:77:
8e:ba:8d:d1:98:19:6a:4b:fe:c2:46:96:6f:08:02:71:9b:9a:
16:1f:77:38:fd:89:3f:dd:32:95:0a:da:d8:71:b9:91:ef:60:
76:ea:d3:8e:a8:4b:60:9b:52:a2:88:26:f6:8b:17:b8:da:32:
97:15:5c:1f:28:10:a8:4f:83:07:91:2d:11:4c:e0:67:d2:a1:
4a:5d:fc:5f:69:1c:e6:07:f1:12:fc:25:3e:4c:4d:27:f5:f7:
76:ab:ba:6b:5c:10:a6:5a:82:41:19:08:99:82:e5:5e:54:0e:
97:ae:a9:24:cb:5b:74:da:b6:86:15:ba:51:17:a8:f6:df:87:
29:e6:b2:b9:b7:4e:33:53:cb:f9:78:18:3b:35:9b:a5:ae:fa:
5b:fa:c1:9d:d5:fb:29:52:14:ed:2e:4f:ec:89:7c:20:b6:ce:
d0:27:27:fe:d9:b9:b2:f0:c3:c0:c3:c8:2b:52:c4:27:8b:aa:
1c:38:3c:4b:d1:87:b0:86:c5:57:1f:e7:6f:26:9a:b7:9f:a3:
b7:e1:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:27:04 2025 by rpki-client