Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: mV2hdhzYgZko46BzjYTU13ZtBBen0k/aitk1tPwSehs=
Subject key identifier: A7:FC:36:D4:BE:83:D7:F9:86:27:44:9C:C8:48:8C:E5:38:EC:DA:EB
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0198C911467CAD3BF19E31292057F6C23688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 130A
Signing time: Wed 20 Aug 2025 20:00:09 +0000
Manifest this update: Wed 20 Aug 2025 20:00:09 +0000
Manifest next update: Thu 21 Aug 2025 20:00:09 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: W4kGETyh791YlAc/AAtS+5/Mw4f2v2i3m7+p3isDrCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:11:46:7c:ad:3b:f1:9e:31:29:20:57:f6:c2:36:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Aug 20 20:00:09 2025 GMT
Not After : Aug 21 20:00:09 2025 GMT
Subject: CN=a7fc36d4be83d7f98627449cc8488ce538ecdaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:2e:ab:08:bd:8e:c6:0d:60:f8:03:30:8c:
b1:32:55:34:ee:90:36:45:6a:d1:e8:e9:57:ae:5a:
52:d3:6e:74:43:b0:0a:28:ca:b9:e2:07:f4:b9:a4:
e1:dd:15:d7:e8:77:33:a8:fe:19:a4:ba:1b:76:a1:
70:3a:c5:93:b7:da:c3:9d:b7:0b:79:c8:1e:49:b7:
d7:79:4f:7c:9d:51:71:e8:cb:1c:0b:47:ce:48:d2:
ac:78:90:e5:89:65:58:32:a4:61:e2:c9:1f:51:f9:
b0:fd:a6:dd:48:0f:be:a3:ce:ce:7f:57:e9:31:c7:
00:35:20:49:53:2a:11:1c:5e:c0:90:29:6a:31:b1:
81:b3:f7:b1:4f:6f:da:2c:d3:15:ab:4f:37:93:6b:
d7:f1:2c:18:1a:dc:db:68:af:64:be:9c:15:49:ab:
16:92:a3:6b:6a:07:aa:0e:fc:22:e5:02:4a:59:af:
12:30:7a:f2:3c:31:d2:ec:04:fd:99:2f:3c:00:e9:
80:e2:3d:f5:de:d9:9a:44:41:ec:44:92:17:a0:1a:
8c:b7:79:a3:f1:58:0a:b2:ee:16:85:bb:d0:ad:a9:
19:0c:64:ec:e9:71:fa:26:19:90:db:83:66:55:67:
7d:2c:38:7d:e2:38:79:24:dd:6c:a4:78:81:3b:03:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:36:D4:BE:83:D7:F9:86:27:44:9C:C8:48:8C:E5:38:EC:DA:EB
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:a4:4d:69:a2:4d:a4:6a:13:15:7f:cb:e3:8c:72:24:2b:
9a:ae:d8:93:70:90:73:f6:ea:aa:ec:bb:f8:31:21:79:87:8d:
65:f6:43:81:b7:c2:de:06:00:56:78:ec:de:fc:d0:6d:40:62:
b0:f5:ad:33:29:95:41:e0:31:21:90:15:39:a9:b5:06:94:6c:
ae:fd:45:6b:f0:04:db:f3:f5:aa:cf:41:15:44:4c:e4:e6:42:
84:4d:f0:16:5b:af:12:1d:c7:63:8d:db:8d:ea:ec:45:a3:cf:
eb:90:5d:cf:61:b4:6d:82:ec:6a:a9:c8:15:70:84:07:c3:94:
45:4e:a4:bb:bd:02:b8:22:2e:93:f2:d2:ae:21:ea:f1:5e:6c:
71:92:ae:94:54:87:72:22:68:6e:c7:aa:c5:47:14:29:d9:c5:
a3:07:d8:c6:23:7c:9e:4e:88:21:08:65:6f:2a:82:f0:62:2d:
44:fb:a4:8b:d4:c3:41:c9:93:71:9c:a6:a8:11:b6:9d:c7:ce:
3c:ac:f1:ab:f6:e8:6d:3f:8f:68:da:9c:ee:31:21:21:1a:bb:
fe:32:27:4b:e9:0a:32:5c:28:59:29:f8:3c:54:9d:41:e2:f5:
af:8a:a3:25:c9:bd:79:46:73:d8:7c:9a:5a:40:55:65:f8:06:
32:42:c4:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjJEUZ8rTvxnjEpIFf2wjaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy
NjhlZDcwHhcNMjUwODIwMjAwMDA5WhcNMjUwODIxMjAwMDA5WjAzMTEwLwYDVQQD
EyhhN2ZjMzZkNGJlODNkN2Y5ODYyNzQ0OWNjODQ4OGNlNTM4ZWNkYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb8uqwi9jsYNYPgDMIyxMlU07pA2
RWrR6OlXrlpS0250Q7AKKMq54gf0uaTh3RXX6HczqP4ZpLobdqFwOsWTt9rDnbcL
ecgeSbfXeU98nVFx6MscC0fOSNKseJDliWVYMqRh4skfUfmw/abdSA++o87Of1fp
MccANSBJUyoRHF7AkClqMbGBs/exT2/aLNMVq083k2vX8SwYGtzbaK9kvpwVSasW
kqNrageqDvwi5QJKWa8SMHryPDHS7AT9mS88AOmA4j313tmaREHsRJIXoBqMt3mj
8VgKsu4WhbvQrakZDGTs6XH6JhmQ24NmVWd9LDh94jh5JN1spHiBOwNb0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf8NtS+g9f5hidEnMhIjOU47NrrMB8GA1UdIwQY
MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct
ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk
LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU82kTWmi
TaRqExV/y+OMciQrmq7Yk3CQc/bqquy7+DEheYeNZfZDgbfC3gYAVnjs3vzQbUBi
sPWtMymVQeAxIZAVOam1BpRsrv1Fa/AE2/P1qs9BFURM5OZChE3wFluvEh3HY43b
jersRaPP65Bdz2G0bYLsaqnIFXCEB8OURU6ku70CuCIuk/LSriHq8V5scZKulFSH
ciJobseqxUcUKdnFowfYxiN8nk6IIQhlbyqC8GItRPuki9TDQcmTcZymqBG2ncfO
PKzxq/bobT+PaNqc7jEhIRq7/jInS+kKMlwoWSn4PFSdQeL1r4qjJcm9eUZz2Hya
WkBVZfgGMkLE7w==
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:09:12 2025 by rpki-client