Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: s+xZmvxBxi1hdurBKNGc4axMgESmByj1usBYC7KQ9HY=
Subject key identifier: 37:84:C1:2B:F4:CA:28:87:75:61:A6:71:8B:2A:8E:04:A7:7D:C6:A7
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019A266614C1641057B9EF252CA3E4096510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 13BF
Signing time: Mon 27 Oct 2025 16:00:15 +0000
Manifest this update: Mon 27 Oct 2025 16:00:15 +0000
Manifest next update: Tue 28 Oct 2025 16:00:15 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: t+EpXeeWXz5BA/G9L2lvjAcQR2NNBW6pKcWinznP6sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:14:c1:64:10:57:b9:ef:25:2c:a3:e4:09:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Oct 27 16:00:15 2025 GMT
Not After : Oct 28 16:00:15 2025 GMT
Subject: CN=3784c12bf4ca28877561a6718b2a8e04a77dc6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:08:d6:c9:07:94:c7:be:ad:32:84:e5:37:
c1:6c:f8:83:a8:90:20:f6:e0:d5:a0:88:fa:73:47:
c2:24:11:62:77:99:04:10:c0:62:b2:07:f5:e3:aa:
c4:62:55:ce:e5:86:80:19:4c:e9:14:af:d9:90:ba:
39:8d:b9:e8:14:65:6e:f0:c1:24:c7:42:ba:ae:ba:
12:d2:1a:49:06:54:93:25:d4:eb:f7:f1:03:83:5c:
41:c4:3e:6d:7d:24:7d:18:dd:e2:9e:1c:8f:46:0d:
48:06:69:d4:dd:60:02:b6:6f:b6:82:a3:f1:c7:4a:
57:ab:2c:be:98:d4:6f:72:96:b5:e5:29:85:31:5d:
55:82:6b:92:b4:4f:47:df:dc:a3:6e:fb:c0:1c:12:
e6:d6:66:6f:31:65:9d:c6:27:76:cc:14:09:5d:ca:
60:e5:55:6c:09:00:44:75:3f:36:9c:b6:43:fd:8e:
39:4d:27:00:9e:46:b3:de:5a:dd:73:b2:dd:8a:8c:
15:d7:e1:9a:b9:4e:e0:3e:25:82:a6:dc:08:6f:68:
3a:95:3f:2c:7f:a5:4c:9b:3c:93:ab:e8:b2:cb:40:
bb:36:d9:a5:48:45:ed:2f:9e:a1:a9:7f:b8:57:ec:
c9:b3:13:6f:46:df:3b:7d:85:64:e9:69:d1:9b:50:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:84:C1:2B:F4:CA:28:87:75:61:A6:71:8B:2A:8E:04:A7:7D:C6:A7
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2e:a7:63:ff:d9:85:b9:d5:cd:d5:c9:e7:d3:f8:36:59:70:
87:39:87:e8:91:3e:89:3c:da:0d:43:04:f1:63:96:33:15:97:
fb:8b:ff:55:76:b1:be:99:d4:85:75:8e:27:a3:c7:68:4f:7b:
65:74:5e:f6:76:43:f3:76:92:cd:4f:73:a7:8f:3d:73:52:ce:
86:75:33:95:0b:88:7f:aa:0f:47:f8:93:e1:dc:01:1f:df:24:
91:ea:dc:0a:89:ad:b0:48:94:58:a6:f2:f0:ea:f5:9b:96:07:
8d:25:37:01:9e:25:6e:2a:10:e3:5b:30:96:7c:33:ac:24:49:
2b:0f:11:a1:ab:5a:cc:b6:34:2c:3b:de:40:17:41:a1:f4:e1:
69:58:c4:60:d0:cc:d9:ff:a8:fd:7f:3d:e8:4b:db:32:74:88:
94:17:c9:b2:e7:fc:35:10:5b:f0:8b:b3:a2:1f:97:fb:86:00:
c2:a1:ad:4f:e6:8b:4e:78:54:ea:dc:01:21:37:2e:f9:5f:f0:
47:e2:df:19:e1:f1:5e:f0:02:d5:2e:8d:8f:49:f0:29:b6:c2:
aa:6e:5e:39:5f:90:a4:e4:ba:76:e3:a3:4a:81:df:29:77:3b:
6f:09:f9:01:70:1c:eb:9d:ba:cd:7c:34:48:7e:e2:c9:aa:8b:
0d:01:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:08:51 2025 by rpki-client