Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: rx3nQeYArPXkty3bGMpErUBj1ShVBCj+Lg5YyFSh5so=
Subject key identifier: 9F:B9:D8:B4:D5:E4:41:FF:DB:FD:EF:D6:BE:51:BF:78:BA:2C:DE:8E
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019A50E2C767520F49DECEC60EAB3768CE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 13D5
Signing time: Tue 04 Nov 2025 22:00:30 +0000
Manifest this update: Tue 04 Nov 2025 22:00:30 +0000
Manifest next update: Wed 05 Nov 2025 22:00:30 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: kpDd704a5itAXJZURunaPcyDhAsVNJbV0R9TWD0mE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c7:67:52:0f:49:de:ce:c6:0e:ab:37:68:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Nov 4 22:00:30 2025 GMT
Not After : Nov 5 22:00:30 2025 GMT
Subject: CN=9fb9d8b4d5e441ffdbfdefd6be51bf78ba2cde8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:6c:9a:ed:e1:69:42:98:1b:bd:20:91:a1:
6e:db:61:77:3b:a6:6a:3f:24:f1:d9:c7:2e:ed:04:
15:89:6d:95:6e:70:4e:d7:27:80:94:c8:83:95:1f:
25:49:b3:e9:66:a9:68:df:ae:02:aa:ac:4a:69:34:
e3:33:f6:f5:d8:b7:fe:29:75:1b:cd:f6:fe:f8:4b:
5c:11:ae:ae:2f:68:28:bf:91:a4:11:15:85:fe:36:
c4:94:d3:c2:9f:74:8f:18:c9:0f:fc:75:ed:79:35:
a5:2c:74:45:d5:f2:97:72:86:0a:64:47:14:6d:0c:
fe:f2:ea:1a:2e:80:9c:09:51:90:b9:eb:df:d2:4c:
17:b2:30:d4:6b:7e:14:22:40:c3:40:59:45:04:a2:
97:af:67:95:3f:41:31:ed:47:ec:96:7b:c6:6b:3b:
09:05:aa:bd:0d:a9:80:a2:21:76:3e:1e:c8:a6:cd:
02:16:ff:95:c3:5d:60:c1:84:be:52:c3:d7:2b:d7:
3f:19:d0:ab:25:b0:42:6f:f8:06:cd:12:1d:d9:38:
5d:f8:31:ef:98:25:f0:7b:fa:3c:c9:58:32:bf:55:
f3:5d:06:a8:bf:8a:e3:d2:3b:88:1a:b4:c1:f8:e0:
0d:db:be:81:c4:ee:37:83:c2:eb:e0:01:dc:ec:10:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:D8:B4:D5:E4:41:FF:DB:FD:EF:D6:BE:51:BF:78:BA:2C:DE:8E
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:be:84:bd:e9:49:c2:eb:a7:6f:43:d9:84:84:4f:b8:ca:36:
ef:7f:56:72:34:01:c6:9a:a8:79:1c:f8:3e:a0:11:0e:f5:fc:
73:e2:d1:ae:03:9a:b3:a8:d4:6e:91:cd:80:bc:e0:d9:8b:19:
1e:77:b6:55:64:a3:8d:19:c9:66:0f:1f:f3:d8:9d:b1:cd:86:
f9:ae:36:35:5d:bb:c2:e4:77:59:21:78:9e:10:6c:d2:cf:4b:
e3:6e:80:ea:ae:ac:de:98:26:46:b0:5a:c7:74:9e:87:04:ac:
0a:2d:f5:ef:4e:96:8b:69:de:13:f2:00:44:3c:9a:2a:81:93:
7f:38:97:4d:b3:32:de:ff:99:e5:b7:d3:ed:3f:e1:56:3f:12:
bf:df:99:90:23:1c:1f:d0:be:5a:4c:d6:6a:d7:cf:b5:ec:86:
23:95:59:8a:54:a7:ea:ff:82:c8:66:6b:15:e1:ec:f4:0a:f2:
28:e6:33:7b:ff:6e:af:02:07:c6:5a:56:7b:57:91:9f:f3:52:
9e:50:07:1a:60:eb:61:b3:ff:b3:b3:39:69:7c:3e:b1:77:3c:
5c:9f:7b:c8:1f:fe:56:3d:e0:e5:1a:e5:b9:8c:14:d6:cc:2b:
cf:d3:88:ca:f7:5b:3f:54:f1:70:54:a1:31:ac:09:61:50:b3:
80:50:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:43:57 2025 by rpki-client