Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: QdCTc3craDM/F+n0g611S9/hQf1IvhkCtgXfqpbC8rQ=
Subject key identifier: 96:EF:FA:66:64:65:0C:A8:54:41:F5:C1:A3:15:B2:56:72:F4:34:87
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 01987BD2A2C565C11819A8F55FCC13FC84CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 20:00:58 +0000
Manifest this update: Tue 05 Aug 2025 20:00:58 +0000
Manifest next update: Wed 06 Aug 2025 20:00:58 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: f21NS45s3CKFco6rC7sxps3oLegxI7aqNiYkE3EZSuY=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a2:c5:65:c1:18:19:a8:f5:5f:cc:13:fc:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Aug 5 20:00:58 2025 GMT
Not After : Aug 6 20:00:58 2025 GMT
Subject: CN=96effa6664650ca85441f5c1a315b25672f43487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:66:f1:20:d1:ab:d5:40:90:5c:25:46:2b:
c6:99:a7:0c:31:7a:4c:f3:8a:88:78:8a:b2:92:c9:
6b:68:17:bd:de:85:5a:a4:fb:78:89:77:86:67:0e:
6e:ba:38:51:38:b4:65:65:ee:35:2f:17:a2:7d:81:
42:9d:62:ee:86:cf:ea:24:0e:3c:cf:bd:69:4e:3b:
d3:f1:08:4e:37:fe:a4:a8:26:66:83:63:2f:1e:a4:
9c:c4:0a:5d:f6:95:b1:20:28:69:f3:c7:a6:2b:00:
e5:76:41:81:cf:c5:8f:1f:cc:22:5d:e9:cd:f2:28:
01:2e:7f:f2:6e:e0:51:7c:e0:2e:7f:09:b8:13:ad:
a5:11:ed:e7:3b:29:ff:8d:1a:44:89:11:85:0f:cb:
ff:c4:53:b9:d4:82:86:62:3e:5a:9e:39:52:a3:31:
be:db:08:62:e2:ee:59:d1:43:41:2f:14:38:7f:d5:
90:61:db:e7:50:a2:a2:ff:22:49:1c:db:68:b0:c6:
82:3f:2a:d4:9f:da:08:8d:61:8b:cb:66:fc:90:32:
9a:33:5b:3e:7e:c6:2b:43:28:0b:49:af:93:89:41:
fa:1e:db:3a:ff:06:cc:95:53:e7:30:17:99:cb:f6:
ca:32:32:55:c9:9f:36:17:a4:db:18:43:4a:95:6a:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:FA:66:64:65:0C:A8:54:41:F5:C1:A3:15:B2:56:72:F4:34:87
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:03:4e:8c:0a:33:c8:0a:a8:31:6c:31:ee:85:e7:38:1f:
5a:37:aa:7f:16:54:c0:9d:54:58:c2:c1:f3:80:b3:e7:8f:33:
10:cf:8e:cb:ea:cd:29:da:d2:3a:32:26:9b:47:ec:b9:55:dc:
3b:fc:91:ab:b4:60:b7:66:08:b5:a2:aa:53:28:dc:de:8d:8a:
d5:24:eb:d9:fc:65:45:99:53:62:12:4b:09:0a:47:86:5c:97:
54:43:17:f5:d8:b7:b7:07:53:2c:59:88:45:b7:0a:9d:da:23:
94:d5:e7:73:7f:36:5b:68:22:51:70:47:f6:87:be:0f:0f:ae:
4a:95:32:20:88:78:5f:5c:12:21:72:08:df:bf:33:8e:5a:55:
02:3a:45:1d:8f:b0:9f:7d:cd:9e:28:fd:5d:ea:30:5b:c2:16:
7a:6c:69:d8:2f:f5:75:a4:f0:30:35:4b:6d:6e:45:4e:95:f3:
94:23:ac:45:24:b5:57:8d:96:e7:f7:90:25:e7:c8:d6:4a:d3:
e6:1b:eb:65:b7:6c:b7:9e:1e:b9:28:40:ae:eb:76:cb:96:57:
99:bf:91:49:35:a1:92:a0:6c:a1:d7:0f:61:79:21:9e:66:3b:
98:7d:9f:76:68:3b:d1:f8:b3:7e:fe:df:8c:98:1c:68:be:7e:
44:70:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:09 2025 by rpki-client