Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: nI5apwnp3K49H1pGtPxj8a6sCs+T48ipO42sdgEVR9Y=
Subject key identifier: EB:A9:FA:BA:1C:35:91:D4:A1:74:53:85:4D:07:0C:87:40:48:D9:DE
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 0198D4DFD852A44C96E5DC5E2A40A3F8E050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 022A
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: TxPZc9X4zjp+eXnk2YphlQ+bE3LIXQ04caQr+5ANjwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d8:52:a4:4c:96:e5:dc:5e:2a:40:a3:f8:e0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=eba9faba1c3591d4a17453854d070c874048d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:ce:9e:ce:1a:df:54:d6:40:97:b8:26:1d:
7b:4d:5e:7a:6d:6c:fb:70:8f:b6:d2:8c:b3:de:fc:
e3:c3:99:30:65:3b:2c:a9:78:c7:13:d7:8a:0f:a1:
b6:ed:67:f2:75:1f:3c:a7:94:5d:01:b6:d8:ba:05:
59:c5:2c:50:a9:84:0f:e8:ce:f7:6b:8d:6b:22:bc:
92:a6:d3:f3:e7:a8:e4:1b:43:fa:54:9a:f7:e7:2a:
8b:82:9e:74:9e:11:74:b8:06:d8:dc:42:95:55:2b:
97:3f:23:c0:f1:d5:f1:d5:6d:b3:29:00:11:a1:c7:
f1:17:9e:65:ba:d9:85:0f:2c:56:93:a8:65:9e:1f:
5e:ce:d3:37:61:f8:31:f3:af:7d:f7:fb:c4:67:34:
e8:ac:9d:f5:0d:2c:8c:13:47:f7:36:09:45:dd:0e:
20:61:76:d6:3f:53:80:34:30:bc:a5:34:19:bb:b1:
c3:26:6d:05:4a:f4:76:69:ae:98:4b:5a:a1:32:bb:
a2:20:23:ae:88:98:b6:39:1e:bb:af:6e:65:bf:8a:
cd:de:3f:56:d8:27:27:3d:d5:ba:0c:53:be:e1:a1:
ed:44:8a:28:8e:1c:b3:60:e2:34:cb:bb:6f:45:f0:
f0:22:56:1a:e1:2e:25:1e:e0:46:da:17:22:b1:fe:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:FA:BA:1C:35:91:D4:A1:74:53:85:4D:07:0C:87:40:48:D9:DE
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:c1:a9:a2:68:bc:84:14:05:89:6f:94:d2:dc:b0:ef:4a:
6a:e3:8c:bf:df:b2:37:c9:bf:22:5e:84:e2:7d:a3:b6:7f:65:
ab:d0:a5:f7:92:d4:d5:57:16:d4:e6:ac:56:72:e2:da:3a:50:
ba:26:0d:88:a6:e6:a1:78:85:4f:1e:d3:1a:4b:f4:06:88:df:
95:5e:99:54:92:13:2b:d4:be:09:af:16:c2:06:74:b7:23:e2:
eb:c5:18:d6:3d:6d:32:91:be:ed:cf:21:88:34:86:1c:49:6b:
e9:c6:23:9c:e6:2c:3a:19:4e:2d:0f:2d:39:b9:6c:b1:72:05:
e3:5a:06:54:a0:66:47:ad:07:34:79:9e:67:62:3e:47:ed:a7:
26:f4:a6:38:bf:c4:4f:0d:9f:2f:80:28:3f:af:d9:7d:ba:81:
bd:3c:bd:71:36:da:8a:cc:a5:fc:bd:50:a0:f5:e2:f0:aa:1a:
5c:80:b9:81:0c:2e:8f:5c:1d:3d:c8:da:bd:dc:39:44:f7:c5:
d3:7b:ff:31:44:cd:53:61:b9:e1:75:ab:8c:f5:04:b3:7f:b3:
85:c6:b4:27:bf:97:16:66:a6:e5:08:13:b2:f5:d8:b2:23:3c:
86:0a:1f:98:de:ed:47:b5:a1:df:23:28:c3:bc:15:5e:62:da:
ae:89:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:32 2025 by rpki-client