Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: pk6TIQkN7WW4BFLJOftMTraVayM7lam8dwEtShC8An8=
Subject key identifier: E5:3E:A8:4E:B3:30:4F:8E:BA:1C:A4:82:C8:DC:91:EC:D2:D9:1E:6F
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0198729846B999C4330063B6694865C3BCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 01:00:38 +0000
Manifest this update: Mon 04 Aug 2025 01:00:38 +0000
Manifest next update: Tue 05 Aug 2025 01:00:38 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: NIZHWLj7FXODPrTVb4+jue3TuSvbMLW7hOSecVyLEbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:46:b9:99:c4:33:00:63:b6:69:48:65:c3:bc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Aug 4 01:00:38 2025 GMT
Not After : Aug 5 01:00:38 2025 GMT
Subject: CN=e53ea84eb3304f8eba1ca482c8dc91ecd2d91e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:d4:83:7c:46:8f:e0:9c:c2:1e:30:5e:a8:
7b:ed:a8:5f:1f:60:c9:cc:f7:7c:3f:0f:c2:08:57:
37:82:a2:2b:44:6a:0b:c5:71:61:24:36:94:64:ad:
57:ce:cc:62:7d:ce:af:4f:9c:d6:ab:07:0f:cf:f8:
20:05:9b:bb:b9:ff:cb:1b:a7:84:a8:0b:9d:8a:9e:
81:a9:4b:ac:04:6d:81:f7:7f:e8:e6:3a:2b:bc:82:
86:26:d5:15:7c:64:47:81:dc:ab:56:0d:2e:32:a2:
16:80:1e:0b:a3:34:c7:9a:0f:f2:55:ed:66:cd:a4:
ea:0f:a9:8b:84:af:cb:a5:f1:df:ba:e3:83:e8:d1:
f6:3d:f9:99:d7:9d:cb:c2:16:fa:fe:aa:e6:43:e4:
d5:3b:68:7d:6a:2e:2e:91:e4:cf:bc:b7:d8:b7:98:
fc:d7:57:3f:60:54:dc:9e:1e:76:44:67:17:42:91:
c8:3e:58:b3:b6:a5:87:2f:eb:d1:53:26:aa:41:3a:
1f:d6:0d:96:ac:8f:a8:9e:58:d7:74:e7:5d:98:45:
53:16:9b:41:da:9f:55:c2:be:6b:23:b9:74:f0:10:
f9:ee:74:ea:ae:6d:73:76:be:20:79:78:71:93:20:
f3:89:f9:ce:de:d5:b5:48:23:05:d6:bf:d3:97:37:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:A8:4E:B3:30:4F:8E:BA:1C:A4:82:C8:DC:91:EC:D2:D9:1E:6F
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:d8:25:0e:be:23:d4:3d:86:2a:44:5c:78:c2:54:29:87:
8b:00:3b:1e:22:1e:c6:3e:04:33:36:78:ac:04:38:c9:0d:41:
24:e4:a8:85:49:bb:0a:f4:56:72:f4:e4:d7:b8:8c:0b:28:d2:
9e:ea:a4:29:09:fc:f2:68:0a:2c:3d:8a:b0:8d:9c:96:52:6e:
18:ee:7e:b8:fe:de:65:aa:89:5d:a0:c1:88:db:95:49:a2:67:
db:e5:82:db:92:2e:72:2e:a0:b1:98:d0:03:2e:39:16:66:6c:
7c:0b:29:47:92:05:82:07:ce:7b:2a:ff:75:2c:ac:c2:14:2d:
ba:22:c4:1c:f7:39:05:07:3b:ba:8b:44:39:1d:0d:50:f3:40:
ae:f8:87:db:79:a2:7f:1d:93:e1:f1:a9:81:bb:e6:99:3a:4c:
27:ce:0e:cb:de:16:fe:c5:83:d0:5f:53:f9:c4:3e:8b:1b:03:
36:f2:98:0c:82:93:39:ed:b9:0b:25:39:bc:56:14:ca:de:66:
b3:ce:46:8d:dc:f7:a5:ff:ee:97:8b:e4:a0:8f:ae:b0:7b:ca:
c3:9b:d3:a6:7e:5d:f2:02:2f:5a:20:0a:7e:33:8d:50:61:55:
14:a1:17:0c:f7:61:7f:d9:ba:50:59:0b:f6:35:d2:4f:c0:fd:
86:0f:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:53 2025 by rpki-client