Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: MIRwtKG1V/SfQgYoluOhUDhrSpVD0OQdRMmwLzPGZFs=
Subject key identifier: 03:D3:8D:9A:90:BE:B6:3B:19:E2:A8:D3:B6:BA:5C:A9:0A:3A:35:86
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019881674E522EDC61562C747FFAD72489EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 22:01:27 +0000
Manifest this update: Wed 06 Aug 2025 22:01:27 +0000
Manifest next update: Thu 07 Aug 2025 22:01:27 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: RSb5lSGd7u7nO0Mn9t8dVUJsksV39I8WK2rQQNvvQ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:4e:52:2e:dc:61:56:2c:74:7f:fa:d7:24:89:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Aug 6 22:01:27 2025 GMT
Not After : Aug 7 22:01:27 2025 GMT
Subject: CN=03d38d9a90beb63b19e2a8d3b6ba5ca90a3a3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:b5:2d:00:2a:91:78:ae:72:a9:fd:eb:1a:
e5:5b:3b:a1:f1:aa:e2:aa:c6:21:fc:9b:96:6c:e1:
1e:12:2e:39:e8:0c:14:28:5f:49:c2:9b:78:e9:b3:
39:36:4d:b6:63:df:b3:ab:9a:42:10:f3:ef:64:fb:
2e:1c:4e:a5:ae:18:70:99:f0:a6:fe:43:8c:24:4d:
43:d8:5b:7e:88:86:de:0c:e3:f1:5d:9e:e9:9a:c0:
13:c9:5a:45:cb:74:20:f8:b6:e0:8d:28:b8:40:17:
74:4d:42:8d:a6:f1:75:d6:ad:58:25:0c:f8:da:8b:
cc:31:0d:6f:c0:19:4f:71:ce:e4:c0:7f:bb:15:df:
6a:5b:ac:05:2b:48:1a:69:72:41:3d:f4:b7:7e:9d:
d6:f8:7b:e1:26:60:5c:e7:d0:e9:3d:50:dd:e5:14:
44:d0:3d:a6:e1:a1:a7:d8:bb:e2:3a:4d:95:84:0d:
dc:82:d9:fa:de:28:b6:94:37:70:f2:39:59:62:56:
a3:d6:16:b8:82:94:e7:97:c2:f8:03:f0:05:ab:4b:
9c:cb:a0:97:6e:d3:97:51:4b:69:60:ea:3b:60:bd:
18:04:be:cc:0a:de:e1:26:0c:08:aa:3d:b2:8d:b0:
59:fe:18:b1:b9:24:8c:61:2e:bb:f0:55:4b:e0:a9:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D3:8D:9A:90:BE:B6:3B:19:E2:A8:D3:B6:BA:5C:A9:0A:3A:35:86
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:0e:cf:d8:65:00:d3:c9:48:51:ee:84:8b:3d:ec:09:fc:
2c:d8:de:e2:b9:f8:0f:87:8b:00:6d:77:23:d5:9d:ea:22:1b:
e2:41:82:40:5c:59:5b:9f:bd:fc:87:b8:64:51:bd:ea:1b:16:
44:6b:f6:e3:56:f2:47:1a:a1:58:fb:02:ba:67:af:92:39:30:
99:9c:40:1d:03:25:63:03:20:4b:bd:10:fa:42:82:d9:ba:63:
fa:17:9b:46:f2:7e:d4:d6:d2:f9:5c:fe:ea:0f:ac:91:37:3f:
94:d8:11:1e:52:a5:a7:8a:fc:70:6a:4c:88:9f:d1:f9:61:10:
26:fb:01:84:a6:e4:f2:82:6a:2a:1b:f7:78:8f:8f:46:ba:6a:
30:ee:68:ee:ad:66:5e:a1:b6:b3:f7:2e:b1:10:7c:64:e5:db:
62:66:e5:1e:6f:c9:6c:4c:54:e6:59:40:fd:ce:1f:59:f1:ce:
00:fa:cb:cd:46:e9:1e:65:fe:93:99:52:91:04:78:44:71:27:
74:cc:4e:8d:6d:ac:a6:30:4b:bf:84:4a:f4:d7:2d:e1:52:b6:
b6:4a:29:f9:66:c6:f8:38:6e:14:36:f8:fd:13:a6:7e:26:e4:
13:e2:b8:69:4b:3c:08:90:7b:61:3f:dd:fa:48:86:17:8d:e1:
21:a1:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:45 2025 by rpki-client