
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: 3T9JT3sEzda8ET/YQEV+YLcwiqzLPZxf+Htk3pNwQNc=
Subject key identifier: 73:CE:9B:40:7F:26:70:73:A1:18:37:B9:C7:C0:30:74:96:8B:47:DE
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 01988B0EA5D1F3025AE08B9C1260FA917F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 0610
Signing time: Fri 08 Aug 2025 19:00:49 +0000
Manifest this update: Fri 08 Aug 2025 19:00:49 +0000
Manifest next update: Sat 09 Aug 2025 19:00:49 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: PLLm1xOC2pAnWR0qEaxnSZPhydy9x7UMeZ0FWOVIT8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:a5:d1:f3:02:5a:e0:8b:9c:12:60:fa:91:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Aug 8 19:00:49 2025 GMT
Not After : Aug 9 19:00:49 2025 GMT
Subject: CN=73ce9b407f267073a11837b9c7c03074968b47de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:42:5c:8f:3d:cc:8e:79:63:80:8b:5e:ce:
14:28:d2:d3:37:d7:0d:d6:c7:b2:73:a7:92:34:fd:
79:dd:fe:5c:4b:3d:7a:39:36:b8:18:38:a4:c8:b3:
13:72:07:4d:a1:84:4c:b7:61:a4:b2:c9:fa:28:d6:
c8:17:4b:f5:fe:10:6a:02:68:71:08:f6:62:cc:e1:
e6:6b:ea:70:2f:39:77:08:a3:13:cb:44:9b:4b:28:
21:2e:dd:2c:11:2a:a1:3b:a1:f6:fc:ae:34:6f:17:
88:b9:aa:67:62:81:42:62:68:3e:86:e5:e5:9f:81:
c8:0e:22:23:83:66:40:e0:eb:d7:bf:a1:e0:9b:27:
99:48:a4:55:5c:41:cc:f3:f7:ce:57:69:0a:fb:31:
e9:1c:e3:d3:9e:c3:d6:1d:32:64:a3:6f:aa:e6:31:
c8:46:08:12:8c:a2:69:d8:5b:3b:8e:1e:5f:60:fe:
6d:e7:07:3c:05:ae:48:bd:76:f6:16:9c:ad:b1:44:
78:5d:9f:be:97:37:a1:9c:10:8e:d1:a4:2a:cf:48:
ac:a8:9e:77:7a:fe:42:a4:0e:2b:3b:f8:dd:3f:4b:
43:04:07:fb:f5:c9:21:c8:55:69:73:b2:ef:2e:fc:
27:9a:b7:82:3f:5b:3c:af:5a:b2:bc:ac:c7:2c:55:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:9B:40:7F:26:70:73:A1:18:37:B9:C7:C0:30:74:96:8B:47:DE
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:54:2e:97:b7:9b:6a:49:70:df:56:16:1e:7f:6c:71:a5:
99:46:58:3e:53:6a:e6:9e:1e:49:41:29:b1:26:41:b1:49:1a:
00:d5:d8:57:88:dc:76:81:ca:53:bf:2d:8a:6b:81:fe:92:e5:
6c:71:52:7b:ac:02:c4:fd:d3:9a:f2:12:18:31:03:05:8f:7e:
bd:ae:d0:88:90:8b:ee:de:a4:95:f3:eb:b9:d5:08:bb:df:b4:
12:40:d3:26:31:2d:5f:32:53:3a:08:2d:3b:68:bf:4e:7a:0d:
35:aa:36:b1:1a:f8:93:14:4a:3f:55:f2:d9:db:59:3d:5d:26:
77:22:91:38:3d:89:50:55:b4:50:71:73:38:7f:63:60:a2:51:
4e:07:bf:73:86:9c:8d:45:cb:50:6c:a3:60:ae:e4:75:bf:71:
ea:6a:b1:8b:ae:ae:7e:d9:57:58:70:52:71:6b:c9:ce:33:e4:
2c:50:83:ba:b2:e7:dd:7d:3b:be:80:2c:54:c6:65:8b:05:d0:
fd:c3:23:7e:44:13:fb:f7:ce:6c:4a:91:48:a3:9b:1b:b9:1e:
88:4a:7d:10:46:d9:04:41:b6:80:74:5f:1d:fb:ff:ac:bf:e6:
28:4d:7b:71:a6:fd:5a:85:57:35:64:7d:68:72:13:96:82:20:
4b:94:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:38 2025 by rpki-client