Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: He1gbiVs4RSwff9AjMiFFKeuhjNZZw/nu63BL8m1IOk=
Subject key identifier: A8:30:63:B7:38:2E:DB:30:7E:B2:53:DE:8B:99:DF:3E:D5:AE:53:14
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 019A03A48B00AEE5073243BD9A618C343684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 130A
Signing time: Mon 20 Oct 2025 22:01:46 +0000
Manifest this update: Mon 20 Oct 2025 22:01:46 +0000
Manifest next update: Tue 21 Oct 2025 22:01:46 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: uNs9NGwJkBbJIRaobqiw9TXBiiwTJ9EJk6GBWNWutSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:8b:00:ae:e5:07:32:43:bd:9a:61:8c:34:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Oct 20 22:01:46 2025 GMT
Not After : Oct 21 22:01:46 2025 GMT
Subject: CN=a83063b7382edb307eb253de8b99df3ed5ae5314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:e1:26:34:65:49:d3:16:81:f7:bf:26:d1:
1d:0d:86:b4:95:54:85:3e:a6:eb:f5:e8:fb:da:ce:
b9:52:84:22:93:ed:f9:b4:a9:af:84:13:c3:6a:53:
00:e9:63:3d:34:13:50:0e:f0:cb:0b:94:31:f2:92:
e1:35:95:8b:31:22:83:8e:53:00:29:77:55:e7:3e:
0d:49:f3:2e:e5:2a:62:7b:33:47:c3:38:35:c3:f8:
d0:9f:60:03:f0:a6:78:86:73:3f:e5:09:fa:c7:f4:
55:8e:a4:b5:bb:b4:08:4b:fa:b7:1d:50:c2:12:0f:
d4:b3:76:e7:11:71:30:1f:e4:31:30:05:6c:4b:b8:
71:41:88:f8:11:c7:9f:fb:ab:ef:71:e5:be:68:14:
26:b5:14:db:92:23:c8:6a:d3:62:ae:20:d8:99:a9:
9f:aa:4d:42:42:bc:e9:60:64:9f:ed:97:ec:b7:8e:
88:1b:2d:42:e9:a2:a4:08:70:26:f9:21:61:a1:3e:
d5:95:27:ed:90:ec:2f:83:3c:1c:c0:e9:4e:d9:69:
63:11:2c:48:d0:23:86:a9:8b:44:e5:81:87:c1:f1:
90:c1:f1:89:df:da:75:d7:1c:f6:67:a0:76:ef:63:
eb:cc:91:da:f4:61:94:ab:59:2f:ff:27:e7:bf:0f:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:63:B7:38:2E:DB:30:7E:B2:53:DE:8B:99:DF:3E:D5:AE:53:14
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:4e:77:4f:00:29:77:78:48:e2:86:0c:de:17:a3:c5:f0:
1b:c2:ea:42:62:59:7a:0a:72:e3:5b:31:74:a3:21:69:5f:24:
94:ab:15:63:69:23:3a:92:f6:d0:e1:ee:0e:3e:e6:90:69:dc:
c4:eb:9e:ab:bc:55:0f:d8:1d:27:ac:5e:71:5d:b9:64:94:69:
47:ff:6c:7c:62:3c:3c:6c:81:13:e2:06:40:dd:b7:e8:c3:94:
53:36:3d:a6:2b:bd:94:a5:f3:71:ff:21:65:ad:5b:8d:85:aa:
87:dd:26:cf:40:d9:23:73:7d:1b:1d:90:23:08:c6:4f:35:ab:
54:83:57:ea:b3:72:a8:c9:a3:bf:04:9d:52:1f:14:8d:cd:74:
1d:ee:2f:e2:ae:58:e0:41:35:11:e9:9e:3f:0d:5c:e7:9d:70:
1d:4c:6c:0c:69:b0:36:19:3a:e9:7b:fc:5a:4a:b4:08:a8:92:
c7:ba:cc:a6:47:8a:a0:4d:68:6d:45:54:28:9a:f1:31:80:52:
7e:ea:d4:24:96:76:1c:35:23:f7:5d:a3:b5:be:e5:c6:88:f1:
f7:5e:f0:b9:04:27:07:51:90:c5:3c:46:d3:44:ca:9f:22:c9:
76:f7:f4:a4:93:8e:a2:c4:78:2a:50:5d:ef:72:77:7a:26:2f:
9f:3b:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:35:50 2025 by rpki-client