Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: kh6uxpoXtM1akkI8i5KK2eOLUGZl1ijqtCkzeEWsxnI=
Subject key identifier: B7:0D:22:9B:52:27:80:EF:2F:CC:F1:03:F7:0E:C5:B5:E2:74:DE:74
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 0199FDD918E5EBE878A7336CB138519F2C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 1263
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: b726OzsD8afTcg33JFif+E/yMu6AlYV9sdnHrOllZtY=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:18:e5:eb:e8:78:a7:33:6c:b1:38:51:9f:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=b70d229b522780ef2fccf103f70ec5b5e274de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:87:3b:0b:b8:19:4c:62:77:8c:9b:1c:d5:
dd:f0:b0:77:78:f8:05:82:0f:f0:7b:e3:26:5b:2c:
68:72:bc:94:4a:e6:13:0b:d2:ef:df:d4:0d:97:1d:
cd:6c:73:4d:3e:6e:49:de:50:8e:9b:9d:a3:4d:27:
e9:71:d7:4d:a2:d5:45:3b:9b:a8:bb:04:d1:69:a7:
af:03:ae:05:c2:b1:6d:40:ad:63:52:f7:34:29:1a:
bf:41:57:2a:54:e5:82:4a:1f:c1:ca:73:0b:72:0e:
48:76:90:3b:04:01:70:f2:96:0b:a7:77:76:c6:36:
52:ac:af:90:bb:c0:ba:7e:35:7c:5d:18:9b:da:cb:
fc:9a:ba:3d:38:44:a7:93:9b:c4:c6:61:52:c3:d6:
f6:03:97:9c:37:94:52:e6:c3:9d:61:bf:22:df:18:
2e:0f:11:37:91:1e:0b:07:07:72:08:27:e9:b9:39:
27:c9:61:53:c9:33:e2:39:84:4c:6a:17:c5:3e:f6:
87:42:d8:68:b1:b6:d3:8e:e4:39:87:8c:ee:03:42:
43:49:03:99:6e:3f:89:13:19:80:42:6b:6a:9c:c2:
da:35:93:e9:e2:45:73:2a:71:dd:30:5a:6d:71:e6:
8c:20:32:9b:72:31:b9:60:bb:e5:85:c3:f4:e6:99:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:22:9B:52:27:80:EF:2F:CC:F1:03:F7:0E:C5:B5:E2:74:DE:74
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:68:d3:35:86:54:3c:3e:98:e1:b2:7a:8d:f8:f1:ba:d3:c1:
c0:65:ed:0f:b6:9f:c1:32:40:56:d4:f0:25:3d:b2:9b:eb:8d:
e8:b6:3e:8d:49:4f:b1:e5:6a:71:c9:97:a2:00:e2:d4:55:2f:
0f:04:4b:61:6f:e1:cf:48:52:dc:34:ca:8d:6a:73:2e:93:10:
62:57:38:38:49:aa:31:f5:f5:1f:de:fc:ad:d8:9a:0f:9d:79:
74:c6:d2:12:76:45:6e:79:90:ea:e7:f7:c6:6a:39:7f:5f:ac:
db:74:ef:3d:9b:2c:df:2e:9f:62:86:b8:bf:64:f9:af:f7:f7:
dd:e1:fb:37:5d:b9:9e:cf:c5:c1:fe:37:d3:61:17:62:f1:15:
74:a7:c8:a8:47:84:c7:af:99:c0:51:85:02:bb:45:68:d7:ba:
84:57:09:ab:ff:35:4c:9b:11:83:bd:2f:b4:00:b9:f0:1b:0d:
08:94:f8:f8:23:da:0d:7a:13:c9:ad:aa:5d:8c:3c:08:3f:ff:
c1:df:36:b0:5f:3f:53:46:0d:8b:30:89:4d:bf:70:a8:dc:06:
a6:9c:90:c6:f7:70:ea:97:a8:86:13:f2:62:53:eb:03:5e:14:
e4:dd:ba:1f:ae:ca:95:94:fb:26:a1:5b:be:87:7d:26:a1:e8:
83:75:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:10 2025 by rpki-client