Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: FzRlv+XVYwZem7zhmxG2rcW9fECT0o6drny2ScTNy4s=
Subject key identifier: E5:BB:CF:BE:89:FD:17:52:01:E1:34:6D:B7:55:A2:68:DC:BC:A9:3E
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019923A01407C0310A3DA89CD0D84EEAF57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:57 +0000
Manifest this update: Sun 07 Sep 2025 10:01:57 +0000
Manifest next update: Mon 08 Sep 2025 10:01:57 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: 2nHCeJsAsHE4Xoy83gpHBhmyM13uLtAMwEyH6Vhryfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:14:07:c0:31:0a:3d:a8:9c:d0:d8:4e:ea:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Sep 7 10:01:57 2025 GMT
Not After : Sep 8 10:01:57 2025 GMT
Subject: CN=e5bbcfbe89fd175201e1346db755a268dcbca93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:87:e3:ad:ae:2a:dc:35:d7:4d:9d:60:3e:
84:d6:81:22:79:c1:36:3c:69:2b:94:80:1e:9e:cf:
32:22:c2:b7:bb:b6:60:55:c9:07:c9:a0:87:8c:dd:
86:5d:86:a1:d5:5c:a0:65:4b:63:89:a2:b3:fd:ec:
d0:80:86:0c:44:33:62:95:22:f2:9c:ec:0d:d9:a9:
e9:db:b4:28:25:8f:06:f9:d5:b9:02:1c:06:b0:d6:
22:4b:c4:88:41:97:4f:bf:89:46:a4:7e:18:0e:ab:
8f:1b:72:5d:30:67:95:fa:51:98:a2:27:5e:a0:3f:
9c:11:10:22:99:88:db:ff:9d:29:50:63:6a:fc:63:
5b:93:f7:9f:86:78:26:04:cb:8c:4d:38:29:81:3f:
6d:45:14:74:ac:54:6d:29:19:ff:10:06:8b:f3:3a:
fe:a4:7e:5c:3a:e1:3a:eb:75:be:26:b5:84:e2:40:
ca:cd:81:86:83:d5:e2:1f:95:d3:45:4c:b9:ac:1f:
3c:0c:69:6c:1e:03:d0:57:13:dc:3a:6e:1b:a8:73:
77:78:8c:88:08:ee:e4:5d:18:e1:a5:c8:2a:54:52:
de:2d:86:91:bf:0c:fb:b8:da:3e:fd:b7:ab:a8:9c:
41:91:6c:a7:96:d1:9f:1a:f5:99:4f:b8:99:3b:82:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BB:CF:BE:89:FD:17:52:01:E1:34:6D:B7:55:A2:68:DC:BC:A9:3E
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:eb:ae:43:8b:43:08:b2:23:fb:14:3e:38:01:f5:72:28:a8:
6d:ad:93:03:04:d0:a0:27:bb:6d:2e:08:7c:a8:26:ad:b9:97:
b2:7e:f7:55:8d:c3:80:e3:64:a1:10:46:b7:56:9b:6a:ec:2a:
cf:e9:ec:8f:9e:26:fb:86:53:55:6f:02:30:5d:39:b0:d6:3e:
75:ba:bb:45:9a:1f:66:a2:59:2c:cf:37:9e:a3:9d:d1:8f:22:
aa:5b:3c:2a:3b:8f:ed:aa:bf:60:69:02:9b:a5:87:a2:8b:08:
af:b3:c8:d3:72:2d:9a:76:b3:cf:46:ef:af:f2:38:b1:f2:82:
f8:db:06:43:5c:9c:99:31:a8:fe:cb:60:5c:7f:70:5d:4b:e4:
77:a7:92:0e:ac:1e:df:10:2c:6b:b6:49:70:90:da:e5:0d:df:
e7:b2:db:eb:4b:e7:7c:b5:67:00:fd:33:d2:68:c9:d3:b5:8a:
25:eb:45:8f:1d:8e:2a:34:9f:5e:62:c0:30:66:d5:d5:9a:ab:
b6:9e:6f:e8:4d:4e:b5:1f:03:a5:c9:91:e6:c4:41:a2:53:1f:
0d:cb:b7:ab:89:07:bc:6f:da:f9:0c:e3:22:6c:fd:c8:5c:1b:
c7:92:b4:76:6b:e3:b0:8f:98:1d:6d:c3:75:8f:1d:53:a7:70:
f5:0a:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:42 2025 by rpki-client