Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: nAgc5r+UVjNO/uKUtLrIVG/fh2w0u//xZVaCbvE/WAA=
Subject key identifier: 35:29:D4:D3:AE:6E:25:42:C5:B8:AE:34:65:58:19:24:1B:59:C2:E4
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019892FF49100C19A5CD4D3F5037CA8AE9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 12EE
Signing time: Sun 10 Aug 2025 08:01:00 +0000
Manifest this update: Sun 10 Aug 2025 08:01:00 +0000
Manifest next update: Mon 11 Aug 2025 08:01:00 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: UqK6pgS/LmI7qp9z/Lira6ZuiaONfPqSSixEKeRtpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:49:10:0c:19:a5:cd:4d:3f:50:37:ca:8a:e9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Aug 10 08:01:00 2025 GMT
Not After : Aug 11 08:01:00 2025 GMT
Subject: CN=3529d4d3ae6e2542c5b8ae34655819241b59c2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:3c:52:ba:44:e2:8c:10:bf:75:ea:b2:25:
4c:88:d1:53:02:ad:2e:0d:6e:c7:c2:9c:09:08:ed:
db:8b:8e:0e:b3:d8:15:f1:f7:70:cf:62:5f:a9:a3:
92:44:1f:1c:17:99:b0:1a:1f:c1:03:95:0f:be:2a:
b3:7f:27:5c:92:4d:70:30:32:4b:d8:a1:74:42:8e:
54:ac:84:e9:ef:32:26:61:6f:af:09:4a:11:cf:8a:
71:e9:ec:6b:cd:f6:b3:c7:a2:80:b7:05:61:7a:11:
fb:49:4c:2a:fc:6a:80:d1:32:8d:a7:63:f9:aa:64:
75:2a:00:d1:b8:cf:b5:76:27:64:79:7c:56:49:37:
4e:39:65:3d:fb:cf:14:91:1d:d1:6d:41:81:e1:59:
2a:33:83:57:a4:7d:1a:5a:76:9b:d9:32:d4:dd:51:
c8:72:ba:04:1c:e1:03:52:8a:75:6f:51:f5:76:72:
bf:d6:f4:e5:ec:14:e0:5f:cd:dc:58:17:bc:1d:8b:
08:50:8f:ef:b5:9f:71:ae:ba:f3:0a:ba:9d:07:45:
bd:0a:63:b0:bb:64:85:e5:ac:fe:c0:df:e8:ba:a2:
91:e0:7b:2b:58:64:28:db:de:8f:d0:5c:53:f0:9b:
b7:c0:b9:89:99:44:d4:c2:1b:ed:c3:01:fb:56:49:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:D4:D3:AE:6E:25:42:C5:B8:AE:34:65:58:19:24:1B:59:C2:E4
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:49:d0:42:09:1a:bd:ef:01:ee:63:29:f2:e8:6f:17:62:
a5:34:89:f1:da:65:f9:aa:d6:26:01:50:4c:81:10:f6:6d:7d:
d1:6c:13:91:e1:47:e6:e2:8f:7d:f8:db:df:c3:62:9e:6e:dc:
01:49:ac:7c:f4:74:db:63:9e:96:02:7f:d5:64:0a:a6:cd:e5:
86:0d:89:dd:b4:9d:d9:92:42:c7:e4:b7:52:48:07:b9:12:a9:
4f:9d:e8:1f:8b:d1:8d:10:30:94:67:5d:e7:d1:5b:35:2c:f6:
f8:6f:64:70:5b:b4:9f:dc:15:d3:74:d1:94:a1:2b:d3:93:23:
af:5b:32:f5:68:c7:75:c9:16:e2:76:7d:e8:86:29:b7:b9:e5:
e9:e5:67:ca:16:80:08:85:88:93:b1:b8:b2:02:03:20:10:71:
74:75:8c:81:3f:b3:59:2e:7e:93:5b:b2:fd:09:e8:07:65:7f:
c4:ca:b7:0a:75:32:af:0e:4b:cd:d8:15:e8:e6:c5:f9:80:c8:
1f:ac:aa:4f:0d:1c:fb:c0:55:20:ae:05:eb:7f:19:f2:78:95:
7a:f1:22:c7:14:a6:b4:58:db:35:0c:33:5b:90:35:3a:12:a1:
eb:40:cd:4a:4f:d0:85:e3:1e:d8:8c:0e:54:8a:76:e4:c6:6b:
fe:2f:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:55 2025 by rpki-client