Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: EnHQjM6+V4yHRMUVBEf7foOFpXb14AjoaUePW4a8Rjw=
Subject key identifier: DC:1A:E6:3F:3B:62:6F:47:AB:21:75:21:9A:9A:13:FA:8E:FF:98:D5
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 0199221F3AE5FCC497AF45BD1B506E3CC0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:01:35 +0000
Manifest this update: Sun 07 Sep 2025 03:01:35 +0000
Manifest next update: Mon 08 Sep 2025 03:01:35 +0000
Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=)
2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: 3RhDidD8E8TfXnRbOBrS+CPYJuX0RZcdqOdYKDCWDsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:3a:e5:fc:c4:97:af:45:bd:1b:50:6e:3c:c0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Sep 7 03:01:35 2025 GMT
Not After : Sep 8 03:01:35 2025 GMT
Subject: CN=dc1ae63f3b626f47ab2175219a9a13fa8eff98d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:52:37:e3:86:f6:65:fb:7c:bb:df:b8:de:
94:12:1c:73:af:9f:35:ed:1d:df:06:f0:47:fa:1a:
09:54:e7:b0:d2:29:ca:15:01:1f:80:98:b8:3e:0c:
4f:0c:c8:88:7e:35:ff:30:0d:45:72:e4:28:6f:8d:
68:e8:69:ff:f9:d4:55:94:0b:d5:05:44:12:c2:b2:
03:64:f1:57:10:e7:bd:78:6c:8c:47:ab:7f:c4:34:
21:96:64:e9:1b:a3:5d:c5:77:58:e4:3d:98:61:f1:
87:35:67:64:b3:9b:76:e7:2b:5a:5f:45:0b:a5:c3:
bb:a3:e8:f7:5e:43:61:a8:05:ad:d4:f6:30:31:bf:
e7:27:fc:40:6b:99:38:71:18:f8:ed:ae:27:88:29:
81:f6:eb:cd:3a:1b:59:b1:1d:d9:0c:87:c0:02:2c:
46:df:4a:da:17:b9:ba:7c:d4:09:e7:e7:61:b5:db:
57:f5:dc:d5:86:b8:5e:e7:b1:1f:e2:ca:eb:11:fc:
18:2d:1d:38:b7:6d:53:17:97:74:97:bd:ca:7c:4d:
69:ea:d0:86:6a:35:49:42:6b:8e:31:7c:d6:d8:18:
b7:57:cd:8a:c2:56:5b:d6:55:2d:c4:30:ae:f7:46:
04:7c:b6:4d:9e:71:35:26:37:01:4b:12:0e:99:98:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1A:E6:3F:3B:62:6F:47:AB:21:75:21:9A:9A:13:FA:8E:FF:98:D5
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:cd:25:9f:96:48:19:47:4f:af:6e:02:a2:f3:ca:07:8f:
05:aa:c7:bb:fe:68:41:f3:3e:83:c0:2b:53:d3:ec:0c:b2:ef:
68:9d:ca:f9:09:27:0a:57:90:ae:68:70:10:a9:85:74:f2:8d:
d8:f8:fd:6b:d4:8f:3d:65:94:63:9e:77:b0:b2:3e:27:e9:bc:
a3:ec:4a:b7:ba:46:56:95:59:9f:94:a8:bd:dc:f7:16:3d:7e:
73:2c:79:fc:c5:6a:c9:7c:20:22:02:7a:68:f6:7e:7f:b9:6a:
e8:99:83:f9:5f:90:b4:cb:9f:e6:ab:c6:73:db:7d:88:b8:74:
11:aa:92:37:08:17:06:80:01:6a:b3:41:af:79:ac:5a:01:6f:
54:20:0f:a9:b2:f9:e9:f2:67:74:c4:36:25:d2:76:20:b7:84:
bb:32:10:5e:79:b3:25:09:6f:ca:9f:e1:fc:98:99:39:65:2d:
22:2e:e7:85:72:da:6c:b3:c3:99:e3:0f:20:6c:1f:51:cb:b5:
a4:b0:6d:d6:e8:fb:6c:1d:95:9c:89:79:e3:9f:bd:c3:d1:04:
1b:a5:41:52:1a:9c:b1:ba:0e:94:03:6b:e2:1a:9c:4c:08:de:
27:ad:6f:f4:c3:e6:d8:52:ad:03:a1:8a:d9:4e:66:69:35:30:
61:c0:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:16 2025 by rpki-client