Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: XplHmDFx+BwbF0AaSnj5Sm58yl54wAUWZNC6AOZGvhY=
Subject key identifier: A0:6F:64:44:7D:E7:1D:6C:86:3D:FE:29:3B:81:A0:6A:20:A4:3B:EF
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 0198D6CDB5E392D98A8CD19DEF07B7CBE2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1455
Signing time: Sat 23 Aug 2025 12:01:02 +0000
Manifest this update: Sat 23 Aug 2025 12:01:02 +0000
Manifest next update: Sun 24 Aug 2025 12:01:02 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: VmHeklIGY0r4H1vE9NaR+vcik14sbmbTWaCtkZSsh/4=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b5:e3:92:d9:8a:8c:d1:9d:ef:07:b7:cb:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Aug 23 12:01:02 2025 GMT
Not After : Aug 24 12:01:02 2025 GMT
Subject: CN=a06f64447de71d6c863dfe293b81a06a20a43bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:f0:c9:db:32:77:dc:1d:4f:f8:a5:1f:43:
f8:41:96:34:82:26:ef:8d:08:1d:9d:13:80:d4:6e:
d4:6a:05:28:99:46:8a:75:16:cd:54:e2:ea:d0:97:
a9:6d:35:d3:a9:57:37:94:41:cc:21:e2:3b:9e:5d:
40:e3:3f:a8:00:9c:82:2d:48:3e:cc:f0:70:86:c1:
e5:17:b9:7e:1c:91:28:5c:63:ee:9a:38:e1:b4:17:
b7:7a:c5:97:e0:5f:22:ba:7b:eb:48:07:ac:c0:e0:
2d:fc:ca:38:cc:fc:3b:49:a6:e6:92:9f:52:58:de:
67:d6:bc:a4:45:15:71:e0:1c:6d:84:a2:af:25:d3:
17:cb:18:a7:81:ea:76:ca:3a:19:2b:58:8e:82:92:
6c:37:28:b4:c4:ea:55:26:c4:27:86:a0:28:da:8c:
64:3c:c4:da:a1:d8:e3:c6:f0:5b:6f:a8:4e:3f:ec:
d8:4f:da:ff:44:06:be:03:8a:7a:0e:c6:cf:74:b0:
64:87:bc:84:65:27:b0:4a:fe:ec:b4:05:db:9b:ab:
01:31:98:92:7f:22:40:50:5c:d5:1f:a5:70:ff:9a:
e5:d3:e7:3c:cc:3a:b6:c0:2f:72:29:03:11:66:a6:
05:87:37:da:18:0e:12:ad:8a:1c:b3:f1:cf:f9:ee:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:64:44:7D:E7:1D:6C:86:3D:FE:29:3B:81:A0:6A:20:A4:3B:EF
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bc:75:dc:01:da:60:0a:ca:a1:c3:51:56:1b:20:30:5e:32:
b1:d1:63:d5:09:bc:83:f7:6b:a4:73:e9:be:67:e1:47:b6:46:
0e:31:81:a6:20:37:a5:e1:4f:d4:7d:23:e7:57:af:88:ae:5c:
54:e8:a8:a9:1e:3b:a2:25:65:30:44:3b:c8:4c:c7:80:ea:a2:
88:90:7d:1e:d5:fc:2e:9c:12:5d:23:1f:56:00:f5:42:a9:2d:
24:78:a4:ad:88:dd:fb:88:f0:cf:70:1d:40:57:f6:3e:1c:ff:
f2:05:76:f2:8a:42:4d:61:f5:39:60:6e:d2:85:6c:3b:ed:8c:
a0:ce:e6:66:c3:e5:3e:01:19:a3:66:a6:3c:07:5f:3a:59:ce:
f8:a6:48:33:f0:6b:c4:6f:94:ac:9c:61:b9:01:7a:03:32:07:
fe:55:0f:de:7f:5c:15:62:66:8a:61:d3:ed:4e:d1:95:15:af:
e9:b1:71:f1:d0:f2:19:f7:df:a8:51:3d:7e:fc:93:4e:72:be:
45:ca:c7:b1:66:42:83:91:63:69:1f:8c:03:d7:da:e4:bb:59:
16:aa:43:e4:8d:91:b2:2f:a8:86:f1:89:c3:f0:e0:63:66:e1:
ea:c7:58:32:ee:83:cc:60:d4:6d:b2:9f:a2:02:7b:4f:60:23:
5d:49:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:50 2025 by rpki-client