Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: KOPFaO5dYsWuOLcW6OrB1wbywXpFSaFtOSFLgSOZG+8=
Subject key identifier: DD:16:75:4F:DD:49:A9:30:8E:5E:09:8E:C3:5F:B9:29:27:19:34:00
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 01989712DE08D3B72C1E87D6D5A3990E9CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 03:00:52 +0000
Manifest this update: Mon 11 Aug 2025 03:00:52 +0000
Manifest next update: Tue 12 Aug 2025 03:00:52 +0000
Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=)
2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: Y+Imh0HPQT+UH9R2XMBgoQ53xzBK+SQDhxhB41VkZDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:de:08:d3:b7:2c:1e:87:d6:d5:a3:99:0e:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Aug 11 03:00:52 2025 GMT
Not After : Aug 12 03:00:52 2025 GMT
Subject: CN=dd16754fdd49a9308e5e098ec35fb92927193400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:c8:22:01:a0:b7:23:30:c7:75:e7:75:24:
2f:b0:7b:c7:65:05:3a:f2:c8:98:59:a9:26:d1:7d:
27:88:76:16:d0:d9:2f:a1:86:fc:26:29:61:e3:fd:
85:d7:78:b9:41:01:6e:ef:8b:b2:f1:13:d1:8d:8a:
a5:05:a4:3d:1c:68:65:5c:f1:e3:3b:7a:95:95:1f:
96:ab:1d:ab:0b:fe:7e:85:78:cc:8b:cf:12:83:ac:
97:e8:da:66:7e:af:5c:9b:e0:d6:d4:7b:34:d0:45:
2d:6b:ad:57:17:ee:47:7c:ee:ca:2a:92:da:d1:75:
3c:98:d1:dc:4e:53:0e:32:c4:8b:6d:fc:38:0b:cd:
98:9d:59:23:d2:25:7a:7b:fc:75:f5:78:ed:01:75:
24:2f:e0:8c:ee:8c:96:68:7c:60:6b:53:a5:d4:4f:
bb:39:5b:51:85:b3:4a:03:c6:9c:57:0a:0e:5a:00:
19:13:83:b2:bd:a1:4c:a4:55:1a:18:27:b1:ac:26:
2c:31:14:24:0a:d3:40:68:fe:3f:f1:ca:d1:d1:b2:
17:fe:5d:83:15:95:98:fb:ef:c8:89:32:33:d6:95:
2f:7a:81:bc:2d:a4:b8:87:71:0f:48:1a:14:08:e8:
0a:0f:96:8f:26:1a:1b:a0:24:2d:05:72:97:6a:d8:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:75:4F:DD:49:A9:30:8E:5E:09:8E:C3:5F:B9:29:27:19:34:00
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a4:d2:4d:f9:05:ab:e1:9d:68:2a:9e:1d:0d:2a:69:cb:6a:
d5:c2:73:c6:78:93:38:71:b0:c4:30:7e:d0:34:b7:02:60:f3:
95:be:91:15:75:ef:86:a5:41:f5:92:f0:0e:64:b9:03:ed:7d:
0f:9a:d2:da:b6:fd:c2:ae:2e:8f:8b:66:50:d6:06:c8:45:ca:
2e:fe:d3:f6:2f:75:f5:de:d1:04:ec:37:e9:6a:e9:4f:3a:bd:
cc:2a:f1:f6:c8:28:44:15:c2:5d:49:8c:d2:0d:02:10:d4:bd:
c5:02:9d:c5:cc:4e:ed:bf:46:a3:3b:17:af:51:34:42:63:57:
a1:72:ee:22:8d:94:03:82:43:eb:dc:5c:94:87:4d:e5:e8:9a:
62:39:f8:e2:dc:cb:48:f2:55:ef:e5:9f:1b:a7:11:b1:12:72:
df:df:9f:b5:69:52:57:0d:59:20:8e:6e:56:4d:8b:11:2a:e7:
20:5d:d4:2c:cc:96:cb:d1:13:2a:fc:63:d9:a8:8b:6e:39:8e:
69:51:4f:b5:7a:44:52:de:e5:9e:8e:66:75:15:77:e3:c5:25:
81:1a:a3:08:9a:c5:76:d6:83:e7:87:09:b1:eb:c9:0f:43:35:
63:64:a3:76:16:4c:44:eb:73:0d:7a:94:7d:a8:0b:09:28:07:
43:47:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:32:32 2025 by rpki-client