Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: mXTrbHnqUKu7pOqLodePeFwa2E7XCqHlMojn6NEmfMA=
Subject key identifier: A3:71:2E:54:84:BB:73:8F:8B:39:7B:8E:AA:A0:66:53:EC:34:C5:2A
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 01989749BA369C6DE70C7B1F72A970D1352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 04:00:47 +0000
Manifest this update: Mon 11 Aug 2025 04:00:47 +0000
Manifest next update: Tue 12 Aug 2025 04:00:47 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: DzNZr6dhBCbPP5+oztJ0p9NkdyQZIuXBcy+2yspHXss=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:ba:36:9c:6d:e7:0c:7b:1f:72:a9:70:d1:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Aug 11 04:00:47 2025 GMT
Not After : Aug 12 04:00:47 2025 GMT
Subject: CN=a3712e5484bb738f8b397b8eaaa06653ec34c52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:81:ea:63:15:44:3c:7c:f6:6d:fd:00:94:
b2:e8:50:69:ce:1c:94:fe:47:2b:ce:f7:7f:4e:bd:
2c:b6:77:41:71:41:6a:30:bc:c8:b2:28:0b:54:c9:
19:ab:21:93:d7:be:60:6e:3e:e1:73:a7:c1:b7:47:
e5:b0:6f:13:4c:70:8b:d8:2f:4d:6c:be:87:b3:bc:
b8:00:92:1d:26:ec:2e:39:47:2d:6e:97:a8:47:6d:
3b:ec:bd:33:a9:0b:59:51:a7:8e:d7:f2:36:7e:88:
73:fb:e7:1c:51:26:ad:36:8a:80:a5:ba:a6:da:e1:
34:a5:e6:0f:47:2b:3f:c7:7a:b9:61:30:47:8d:37:
c3:13:5a:eb:be:fc:57:76:a7:9c:c2:7d:d1:41:66:
c3:07:8a:d4:53:2a:39:86:13:e5:11:45:4a:7f:30:
12:27:06:f5:e8:53:57:d1:e0:50:b8:82:05:34:c7:
90:f9:42:01:3f:fa:c4:02:fa:03:12:ad:1e:ea:1f:
2c:fd:99:54:76:1f:a2:40:9b:87:09:fe:6f:bb:fe:
b8:7a:f9:11:36:f1:d8:d4:a8:56:89:5b:ec:c5:d6:
bd:44:ef:81:51:b9:f4:fd:f1:be:28:7f:91:73:37:
3e:d2:51:85:f2:fb:0a:a3:8c:03:5b:59:c2:82:1e:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:2E:54:84:BB:73:8F:8B:39:7B:8E:AA:A0:66:53:EC:34:C5:2A
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:f4:21:55:93:83:67:ad:98:07:a2:27:f4:1f:54:62:21:
4a:0f:bf:87:f7:db:c8:27:6b:e0:95:fe:fc:14:49:4a:d3:dd:
73:65:0d:b3:61:e9:c3:c9:c1:73:d4:48:d1:d7:f2:ba:45:b8:
d4:a1:5a:a7:05:85:65:7f:87:9d:8e:69:7f:d6:75:1c:0e:14:
e5:0c:cc:71:d9:56:38:54:5d:39:22:9e:7f:0e:14:bd:4e:21:
27:83:5e:69:24:3e:8a:16:dd:f3:72:0e:6a:fc:c6:98:60:31:
77:3c:17:ac:53:cf:24:cd:5c:db:67:64:d9:27:6d:e4:fd:14:
57:ae:71:ec:55:c7:a0:91:c9:22:e0:cb:6b:ad:4d:59:e3:91:
1f:80:f9:3d:fe:19:1f:b9:3d:98:b6:fb:4a:e3:1e:3e:69:87:
5b:79:fb:73:3e:f3:b7:81:88:73:9c:22:2a:ef:20:1f:c0:5a:
65:0a:86:f0:4c:ad:48:88:b7:f8:9a:9f:5b:ee:d5:31:ac:c5:
1f:27:a0:04:a2:b5:6c:41:94:05:07:de:0b:20:7c:cd:15:55:
cf:a8:93:3f:2a:76:0e:06:62:15:42:c7:fd:90:d5:3d:13:4b:
76:b1:8e:8b:dd:7f:e1:a5:71:7c:38:61:be:ed:37:45:cf:1a:
54:b1:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:41 2025 by rpki-client