Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: cCOXTloAM30r1JXwTAdNt4p1PMVoQ9HWS7JFKgPoAlk=
Subject key identifier: E0:95:0E:43:0A:78:DC:CE:C0:90:DA:C9:A6:E8:AE:F3:C9:FE:BD:28
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 0197B6A12F32F37E86B9425C917DF68617D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 11D9
Signing time: Sat 28 Jun 2025 13:01:45 +0000
Manifest this update: Sat 28 Jun 2025 13:01:45 +0000
Manifest next update: Sun 29 Jun 2025 13:01:45 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: 7N4jp3suYblaJEouWaC90/r79w9prWf2aAwaC4c+NI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2f:32:f3:7e:86:b9:42:5c:91:7d:f6:86:17:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Jun 28 13:01:45 2025 GMT
Not After : Jun 29 13:01:45 2025 GMT
Subject: CN=e0950e430a78dccec090dac9a6e8aef3c9febd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:44:47:44:4d:94:55:7d:af:31:4d:1e:a2:
a7:20:e8:e6:1e:ce:5d:ea:70:db:b1:d3:71:af:06:
e1:7a:0c:d1:67:5e:e4:9a:d3:ac:7b:04:fd:2b:40:
0c:67:3d:77:1a:f9:26:af:90:34:dc:ce:e1:9d:5e:
89:ae:ef:df:63:62:2a:40:fd:19:20:dd:5c:99:4c:
93:f7:56:c8:03:81:78:3a:5c:a5:d2:01:60:62:f6:
ad:f5:8c:8c:79:d7:2d:28:e4:d2:ba:73:1f:64:6b:
a5:39:ca:55:a9:e3:9c:f4:e6:d4:15:ab:ce:d2:1a:
aa:36:2d:f5:6a:82:ee:ae:66:17:a7:d8:79:36:bb:
0b:13:c3:dd:2b:da:8c:bb:cc:09:b7:51:0b:41:c0:
4e:15:5f:e8:d1:62:1a:a4:67:ff:91:2f:76:da:a7:
f5:b3:38:4d:02:b1:16:d3:9a:ff:b7:21:14:f6:6e:
c9:f8:aa:40:77:b2:bb:4e:64:19:be:ed:87:a2:f9:
c0:6b:81:ac:67:ce:bc:88:30:25:85:45:11:ba:8d:
40:f6:4a:e4:d5:38:65:81:b7:cc:67:57:e7:57:40:
e9:03:1a:2d:c5:56:ad:22:f9:b0:69:62:6b:3f:29:
82:f7:d2:a9:df:40:7c:3e:7b:bd:96:fb:92:c1:bd:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:0E:43:0A:78:DC:CE:C0:90:DA:C9:A6:E8:AE:F3:C9:FE:BD:28
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:84:1c:04:3d:5a:6b:aa:ed:dd:1e:2a:4e:ea:66:e6:ca:
02:5b:91:46:c2:81:05:cb:81:4b:59:bc:aa:85:b5:74:f3:6d:
aa:c3:c5:29:ea:00:a4:54:8f:0d:5f:c6:83:93:bb:77:c1:ba:
04:41:e5:d7:23:a8:f4:44:f3:43:fe:40:e9:99:4d:55:b7:d9:
2b:32:58:36:58:a9:cb:98:30:45:90:af:8b:e7:ef:fb:9c:9c:
00:23:5e:8a:3d:f9:02:c0:ab:b1:55:ce:b9:26:f8:ef:b3:44:
86:5f:8d:af:4d:fc:16:49:f6:91:53:37:48:56:42:4b:cb:75:
bf:2f:e2:17:e5:29:8d:58:82:52:b8:e2:c1:a3:cb:94:d6:68:
c2:5b:e5:1b:e4:47:2a:6e:72:e6:55:e7:f5:a9:60:8c:1b:03:
38:8d:7f:1f:d1:27:7c:27:71:4e:23:9e:49:c7:d8:ee:19:53:
8b:5e:59:31:b8:c8:d4:9b:dd:a4:3b:13:35:2d:14:52:3d:c3:
dd:98:fa:5c:29:b5:59:34:15:b0:ad:61:f5:38:5d:96:a6:2f:
55:b1:e4:90:53:bf:11:3b:0f:f2:90:01:2d:d8:41:b7:cb:7e:
0f:14:44:52:52:cb:30:2d:01:f3:2a:67:83:ef:16:f7:8b:a3:
8d:a4:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:23 2025 by rpki-client