Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: y2FDPezCFC4Q3Bi8G5RuVQI7ByRDDAHv3aeT4osmsIg=
Subject key identifier: 45:C2:47:6F:16:78:A6:42:A0:71:54:43:C3:A1:0D:6E:D6:DA:85:1B
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019A4DAAB9E2344AD9943AEEDC59340DA7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 148C
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
2: Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa (hash: ezAVN3jQ2UsBPNShAKwAjIb8r5x8njUYP6cthQNSdTk=)
3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: T7638jQOS+kqnflGG3+2F/bNs5cUOOwtE6I+1RcLpcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b9:e2:34:4a:d9:94:3a:ee:dc:59:34:0d:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=45c2476f1678a642a0715443c3a10d6ed6da851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:48:cd:04:90:96:24:b5:5b:9f:68:03:b6:
ab:5c:d8:8e:e4:ad:57:bc:fb:57:b0:9c:d4:c5:2c:
44:55:de:00:75:6b:30:ac:68:8a:6c:51:9f:02:af:
f3:24:2d:42:3e:c0:86:28:6b:8e:7b:42:dc:62:af:
90:8e:eb:0a:f6:0a:fa:0d:e3:35:42:48:4f:1e:f9:
22:f8:78:16:00:35:a2:0d:7c:c0:30:ef:75:a1:15:
cc:b2:b6:f0:78:b2:f7:f5:c5:07:0f:5a:53:59:b1:
c8:ab:a3:90:2d:57:1e:29:5c:14:64:c9:d7:1c:d7:
b9:4b:ae:19:e9:ce:22:c5:5e:f2:49:f0:06:55:2c:
3b:7b:fb:5d:ee:f7:19:27:96:b4:dd:27:d7:35:cd:
ff:96:6e:44:71:b0:f8:8b:39:e6:5d:e7:66:95:63:
2d:16:e1:67:b1:20:4c:bd:94:95:a9:8e:69:bb:4b:
2f:f1:f4:4c:1a:41:c0:69:cd:fc:1d:f5:9b:6e:ae:
4e:b2:4f:09:1d:82:df:bb:01:39:c2:1e:c8:b5:fc:
f7:9f:80:e1:e1:8a:f0:7f:7a:07:40:58:a3:3c:95:
77:49:3e:c7:0a:67:59:84:2a:5c:c3:8c:37:6e:90:
79:ae:7d:bc:be:57:8e:1b:05:15:dc:3a:ea:8d:b8:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:47:6F:16:78:A6:42:A0:71:54:43:C3:A1:0D:6E:D6:DA:85:1B
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:75:71:37:ad:79:03:9e:ac:8e:7f:80:ee:55:2b:97:e6:05:
b4:05:68:bf:e2:f1:7f:fb:33:64:54:06:9f:d1:f3:80:4d:44:
d7:f9:94:90:07:82:59:60:38:fc:25:3f:c0:62:52:db:d3:85:
ec:80:d3:7e:6f:bd:f1:b0:54:84:48:cb:54:72:eb:09:79:02:
0d:97:68:36:99:b0:ba:8d:a3:7f:97:36:df:44:6c:79:ee:81:
bc:34:b5:b7:70:96:bb:78:c0:6c:03:5d:9b:07:be:ae:28:e7:
a8:ac:10:d2:32:5d:b6:4e:af:2e:85:80:2c:6a:37:d8:30:03:
4f:fa:71:cb:59:37:0e:92:16:0f:42:67:d3:ef:96:75:27:9c:
d8:4c:6d:af:bf:38:6f:62:88:9e:db:b6:89:48:89:52:3a:91:
89:70:86:ed:7c:31:c0:aa:d6:44:0a:82:1f:5a:fc:7b:0f:06:
00:4a:c7:69:be:0d:03:4e:da:b1:6f:37:8d:7c:14:62:c5:e2:
c5:ef:d5:fc:f6:60:e0:e9:ce:16:bc:14:9b:3e:61:3c:f3:1b:
35:38:c1:1e:90:46:6b:fe:f1:7a:17:5b:b7:ca:b2:4e:00:fd:
3b:68:c3:68:2b:b5:67:7b:b4:df:f4:88:d7:ce:f3:51:01:4d:
3c:fc:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:41 2025 by rpki-client