Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: MjHmRRm0BgfoJgKVkqVTDNXFcETfj2ZGCw90dmtsIdg=
Subject key identifier: EA:78:1E:61:89:6A:81:42:20:55:B8:BD:B4:B8:DC:5C:26:32:AC:B7
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0198D7A99FF488410156FC4C456CEA6B94B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0B1B
Signing time: Sat 23 Aug 2025 16:01:14 +0000
Manifest this update: Sat 23 Aug 2025 16:01:14 +0000
Manifest next update: Sun 24 Aug 2025 16:01:14 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: T2IwUcxvu5YJvrwyql/HR2VIwrTmmzSTTU2j3TfvC0g=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:9f:f4:88:41:01:56:fc:4c:45:6c:ea:6b:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Aug 23 16:01:14 2025 GMT
Not After : Aug 24 16:01:14 2025 GMT
Subject: CN=ea781e61896a81422055b8bdb4b8dc5c2632acb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:30:11:7c:06:e7:12:71:8c:bf:db:f1:c7:
0a:ea:25:a4:02:63:0b:3e:02:75:7f:cf:a3:c4:0a:
d0:7d:e1:90:d8:d3:20:a8:8c:45:e1:e8:14:4d:ee:
53:f3:40:e3:75:f9:97:0b:9d:b0:e2:ef:01:86:3e:
3e:d1:13:db:6c:90:b4:db:a2:ec:dc:77:b0:37:b4:
35:6a:3c:c7:44:de:53:91:6c:09:84:66:a0:a3:00:
99:a1:30:51:8b:10:5f:64:2b:cd:74:70:47:ad:7a:
21:af:c2:6f:e2:fa:97:cb:b7:44:21:c1:e3:a4:d4:
6a:e6:47:29:a0:1e:a7:a5:af:f4:ad:aa:b9:f6:8b:
6e:c4:7b:10:0d:55:20:36:6b:a7:3e:13:ae:52:fe:
e9:86:73:fa:6d:de:cd:7b:df:01:7d:47:88:3e:83:
e7:41:fe:a6:45:95:cd:98:96:72:c7:31:73:73:a0:
35:f5:85:13:b7:fc:54:1b:dc:be:6c:c6:cb:1d:4d:
60:40:80:ec:ee:fc:0b:a0:c9:c2:24:0f:bc:6d:cc:
1a:41:e1:40:a5:9a:bf:e9:20:6b:67:cf:df:7a:14:
2c:87:46:26:96:9d:a6:ee:32:57:a6:d6:f5:be:2d:
05:ba:3c:7a:85:fd:ea:18:4f:d5:6c:44:55:8d:8f:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:1E:61:89:6A:81:42:20:55:B8:BD:B4:B8:DC:5C:26:32:AC:B7
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:14:d0:1d:5b:bc:86:66:dd:a0:36:4b:d6:b0:fd:4b:a8:
52:c4:ce:dd:01:11:29:84:ed:92:cf:a3:92:80:c3:fd:1e:5e:
bf:e0:80:67:80:54:a8:d2:de:c9:3c:b4:06:cf:c5:27:11:8f:
c5:42:59:ae:22:0f:19:97:6f:20:3d:1d:1d:28:0e:90:18:c5:
ce:42:d1:f6:96:2a:f1:ff:58:4d:1c:7c:33:52:db:aa:44:d6:
9c:82:84:d1:71:58:10:7a:00:ba:76:e5:b5:5e:18:63:f0:65:
1a:ae:37:73:68:7e:a5:85:54:47:15:0c:5a:47:0a:e4:c5:21:
61:29:f2:c2:c5:de:1c:be:e3:7a:f6:af:99:39:67:d7:23:98:
ac:c0:6a:66:7a:a2:bf:4e:ea:f4:d9:35:c8:ad:3d:93:03:fb:
4b:27:5d:a9:9f:b1:f0:2d:48:ab:49:28:38:ab:9b:e5:20:d5:
ec:54:85:f0:5f:e7:36:96:ff:c8:2e:36:86:ce:45:47:f9:de:
d6:3b:9c:a5:66:6d:31:c8:e5:1d:f3:08:5b:16:a1:c7:29:e9:
7d:cd:d6:b7:e4:02:f7:82:cd:e5:3d:e8:f1:9e:66:80:44:7c:
3e:14:a7:09:97:d5:cf:0f:ea:42:81:ff:fc:f6:e6:63:93:ce:
28:2b:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:16:10 2025 by rpki-client