Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: c+8+c44PF08hhnjtbsTgjG+xgHEdwJdrg8vxNR6rDj8=
Subject key identifier: 5B:70:ED:4E:84:10:61:63:B4:F9:63:7F:AA:A9:56:A6:75:74:7A:A8
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 019887A08F09F5579F308F0744F95437F632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 089A
Signing time: Fri 08 Aug 2025 03:01:43 +0000
Manifest this update: Fri 08 Aug 2025 03:01:43 +0000
Manifest next update: Sat 09 Aug 2025 03:01:43 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: LBWvQxUSXJdNML53Awd8oqHmxrcU5+cQV1jEv64ArGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:8f:09:f5:57:9f:30:8f:07:44:f9:54:37:f6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Aug 8 03:01:43 2025 GMT
Not After : Aug 9 03:01:43 2025 GMT
Subject: CN=5b70ed4e84106163b4f9637faaa956a675747aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:e6:87:9f:f9:e7:a9:01:36:6e:46:31:d7:
bd:56:87:06:22:6d:30:0d:38:f6:94:80:ce:b0:1a:
e9:8e:45:46:51:22:7d:e6:95:24:51:cf:e9:ea:f8:
0c:36:fe:09:10:57:81:45:79:29:b8:ef:75:90:cf:
48:d5:91:ac:63:04:4c:0b:60:a7:e1:5a:87:cf:bf:
42:37:4d:c3:24:cd:bc:01:1d:2f:3c:e5:34:cd:a2:
2d:ea:ff:0c:85:de:a7:db:85:42:ef:9c:bd:c2:b8:
7f:6e:92:d9:ec:a1:00:b9:d5:b3:a6:c7:b0:52:87:
6d:ae:7b:91:9f:c9:58:ff:08:c6:c7:28:a3:e2:23:
70:03:2b:ba:a6:d9:3f:65:18:66:fe:1e:20:79:da:
75:ca:68:de:81:73:4c:48:ac:0e:16:33:8a:82:52:
93:21:c3:3e:d0:55:ac:3a:c7:6d:75:83:24:37:e9:
ad:2a:c8:c6:ba:94:8b:0d:26:01:24:5d:b8:37:4f:
ad:a1:27:97:85:1d:4e:fb:32:84:88:8b:e3:35:c6:
37:a2:73:87:2b:0b:d3:a1:68:a8:a3:9e:45:57:8c:
3f:51:a7:bd:31:c1:1c:43:33:de:b5:f4:2b:10:00:
b3:4b:f4:9b:fb:c4:19:96:f2:88:56:9a:9b:db:7d:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:ED:4E:84:10:61:63:B4:F9:63:7F:AA:A9:56:A6:75:74:7A:A8
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:22:59:39:4e:88:12:72:8c:2d:f9:0d:a9:22:a7:36:b9:76:
13:39:0f:6a:6d:8a:16:f3:40:b7:4e:11:d4:53:e9:9c:d3:35:
9d:b6:7f:97:c6:4d:c4:f6:30:97:5f:29:c3:06:f8:de:2f:2c:
9f:c7:ad:31:12:7d:8a:00:56:60:4a:0e:a1:89:b9:6a:8a:6e:
51:4b:d2:e3:fb:3c:9f:09:2c:30:8b:c0:ec:cb:18:be:7e:f2:
77:5b:70:fe:95:40:02:d8:72:6a:f3:d9:e4:70:8f:51:f3:bb:
f5:b1:d3:3b:1f:73:62:4b:5f:29:f2:b5:ee:9b:df:da:97:7f:
d2:6a:67:11:c3:80:28:2e:e5:74:ff:8a:5b:a8:67:90:1f:f1:
bf:61:4d:5e:12:72:a1:21:f8:93:ca:9f:b1:7c:25:52:ed:6b:
17:19:fb:69:55:c1:21:38:fa:c7:50:19:04:6f:c1:2f:a5:18:
c4:4f:b5:e9:fe:c8:ca:03:75:f8:6a:88:2c:b7:64:9e:3c:eb:
32:c7:55:e2:94:4e:4b:f6:51:94:2c:72:18:5c:cd:2d:00:f6:
09:e3:6a:1c:e2:c6:9a:82:52:a3:c9:33:4d:62:13:5c:e3:dc:
a4:d3:26:d8:73:6a:be:e3:f5:51:a9:be:ce:00:07:3b:03:d5:
11:7a:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:14 2025 by rpki-client