
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: t/hlO8Kcr79v6TGzZoPEOr670H+/2xDJy2gLVmCqLPM=
Subject key identifier: 04:08:3D:0E:37:2D:FF:61:5A:3B:79:7A:5A:B8:5A:71:23:9C:5C:67
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 01988FFE37FE106283BC03EFE82541F6291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0A92
Signing time: Sat 09 Aug 2025 18:00:58 +0000
Manifest this update: Sat 09 Aug 2025 18:00:58 +0000
Manifest next update: Sun 10 Aug 2025 18:00:58 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: uuEk69z1reXsscGQ/JMnGB3Za2HBhYpkBiAA9VgGYys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:37:fe:10:62:83:bc:03:ef:e8:25:41:f6:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Aug 9 18:00:58 2025 GMT
Not After : Aug 10 18:00:58 2025 GMT
Subject: CN=04083d0e372dff615a3b797a5ab85a71239c5c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fb:3d:31:68:dc:62:d0:34:91:f7:57:9c:14:
c6:41:c5:27:fd:87:e0:7a:5b:aa:23:cd:2a:bb:0c:
24:6c:35:46:12:73:11:45:81:7b:0d:bf:b5:f9:ad:
31:ce:d1:3c:49:52:7e:9b:b3:56:1f:db:fd:4c:91:
65:61:10:64:ea:bd:a9:5d:0e:5b:53:e8:fb:38:41:
90:ff:af:63:2c:50:37:23:d0:c0:7b:c8:c0:a5:7d:
14:08:35:a4:4d:de:3d:b4:c3:5c:9f:1e:72:f7:1c:
4c:a5:b8:c1:c7:d3:11:f6:43:b2:7a:a1:31:74:a3:
48:40:bd:46:07:d7:3e:08:bc:ab:5d:53:be:30:3e:
f0:e1:2a:55:b8:ff:1b:e6:55:90:97:27:77:2c:bf:
19:ef:9f:0d:d1:84:31:0f:2d:00:bd:cc:df:83:00:
d1:46:48:95:e5:61:71:21:00:71:2e:6a:a0:6d:d2:
65:73:ee:d6:30:3a:53:66:39:0e:b6:f0:d1:e5:ac:
84:a2:4b:56:aa:55:e7:83:5c:e0:52:e2:0a:e3:7f:
1a:59:69:0d:9c:90:40:ae:29:7b:c7:df:85:f3:bd:
cb:50:13:49:28:31:8d:80:41:07:6b:89:d1:f3:66:
d9:4f:1e:98:ad:d8:12:cb:5b:e7:f2:e4:12:ad:00:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:3D:0E:37:2D:FF:61:5A:3B:79:7A:5A:B8:5A:71:23:9C:5C:67
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:d0:e4:74:f1:ad:0f:0c:29:7b:1c:8e:2a:09:69:80:76:
4b:aa:06:02:a1:03:b9:9a:58:58:95:2f:ee:75:1b:0e:4c:35:
3b:41:01:65:69:a5:da:0e:81:1b:97:d1:3b:9a:40:f9:38:f5:
b6:0e:79:f1:0c:08:f1:10:8b:5b:36:ce:0d:8f:0e:4f:91:25:
ff:96:ee:56:a0:40:21:f4:62:31:4e:b1:51:8e:b4:e2:a8:30:
fa:b6:ed:27:18:07:35:ce:7e:69:6a:cb:91:a8:ea:31:d5:a9:
ca:e9:13:da:c4:1d:0e:87:bf:c1:73:f8:e8:f3:03:3b:ce:08:
06:12:44:d7:2a:a1:97:50:5b:c6:10:99:82:24:a5:e0:44:1f:
63:54:94:35:cc:19:f3:52:20:e9:96:c0:ef:95:a2:0a:67:fb:
87:08:1f:55:9e:0c:e0:fe:59:7d:1b:0b:d0:34:cd:69:30:cd:
9b:3d:ea:04:09:7b:8b:43:2d:16:08:9d:bc:62:f3:e6:c7:0d:
de:6e:0c:65:60:8e:a3:13:50:b5:af:a7:4d:da:9b:78:25:49:
11:81:d3:5f:d1:d4:03:ba:66:47:c3:42:9a:ef:f4:63:67:76:
ea:2a:89:27:b4:ee:c8:d0:f2:6e:c1:19:8b:59:66:43:0d:62:
a1:27:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:50 2025 by rpki-client