Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: nsBMYV+Vp25XteifQPvq48rZ4mnW4UGI80pj9Wnw1sQ=
Subject key identifier: 91:18:6C:7F:26:DC:4F:40:33:A5:64:79:6A:B9:B5:EA:99:71:D8:DD
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 01987D1C1CDF9251BF52F9981CBC2EAB3C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0535
Signing time: Wed 06 Aug 2025 02:00:51 +0000
Manifest this update: Wed 06 Aug 2025 02:00:51 +0000
Manifest next update: Thu 07 Aug 2025 02:00:51 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: L3j/FqvmjjwOdoCSAnMrA5i7/tFjxpasBT9a4B3TjCQ=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:1c:df:92:51:bf:52:f9:98:1c:bc:2e:ab:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Aug 6 02:00:51 2025 GMT
Not After : Aug 7 02:00:51 2025 GMT
Subject: CN=91186c7f26dc4f4033a564796ab9b5ea9971d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:9d:35:d7:29:dd:dd:60:c6:40:1f:ce:cd:
db:f2:2b:31:9c:78:03:c3:d2:46:66:47:7a:63:0a:
e7:d0:6e:5a:af:60:bc:ab:36:7e:94:a4:3a:d9:a9:
3b:ef:7a:64:ca:08:8e:a9:4e:e1:a5:61:f4:ae:5f:
df:40:33:e3:c6:21:8a:f6:0a:21:f2:1d:8d:4c:e1:
3c:d9:8f:33:97:8f:60:af:15:bf:d6:77:8d:9b:4b:
15:e1:2a:ef:eb:14:4d:65:f5:08:f6:35:a6:57:af:
55:27:23:66:e1:9d:d8:6d:1c:ce:ca:d0:71:f8:59:
ea:51:aa:8f:18:f4:d1:83:98:ad:fa:10:88:e9:6d:
56:31:30:73:d3:83:f7:dd:4e:fd:1e:fa:90:0f:b9:
c8:b5:5e:f1:0b:27:07:87:67:a3:d2:15:bb:09:b0:
28:c6:80:e1:5b:ef:b0:e0:70:6d:10:4e:da:8a:91:
41:0e:23:04:73:51:84:2d:4c:db:20:bf:17:aa:70:
0d:2c:ac:dc:22:76:41:75:7a:82:e3:3a:b3:b7:5e:
54:8c:2f:2f:c4:1e:92:c4:fe:08:4a:26:9a:fa:a7:
73:22:5e:8e:40:ac:22:be:8e:1d:e4:af:3a:af:6b:
8c:97:f8:79:37:d8:3d:41:39:35:08:80:7f:bc:b6:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:6C:7F:26:DC:4F:40:33:A5:64:79:6A:B9:B5:EA:99:71:D8:DD
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d8:c2:17:38:32:ae:c3:c2:d5:95:66:61:79:a4:e7:17:87:
57:c8:b1:bb:4e:47:45:7d:79:94:0d:a4:85:69:bf:9e:ec:36:
e1:28:88:e2:20:68:bd:c4:2e:80:18:a2:8f:97:9d:ad:e7:dc:
a7:14:07:cd:c6:b9:85:82:05:ea:04:76:41:48:20:67:c8:dd:
3f:88:c0:cb:29:cc:61:6c:db:53:f2:ed:8f:88:e0:4d:cf:c6:
09:07:18:be:92:3b:9c:73:6b:c6:51:00:d3:f3:fa:ac:82:24:
7d:82:70:67:dc:67:fc:36:41:33:a0:13:51:c6:c6:5e:44:cd:
3f:86:05:f1:e0:d0:c8:5e:77:ab:7f:c2:7e:31:62:ef:7f:e6:
2e:31:f7:1e:29:4d:79:0d:c2:23:21:ab:e5:ef:6a:1b:4b:bd:
71:1a:d7:10:9e:4c:83:48:28:06:e2:fa:dd:66:d6:ad:83:79:
f2:ac:fd:0f:21:13:93:8f:0c:3d:2a:cc:a5:88:b7:70:94:5c:
62:cd:da:b9:b5:cd:69:9e:45:b9:b4:7c:7d:7c:0e:72:24:3a:
e7:67:b3:ce:ad:d3:a9:d6:24:28:f8:e0:f9:7f:5a:48:9d:48:
ab:e3:49:4f:fc:ba:9b:67:d0:c5:b8:b5:b5:0c:67:49:90:ed:
6e:4a:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:02 2025 by rpki-client