Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: o4puESVUSScTCjNgVOsjuwGts1MbrAsFs5M9C9xUOI8=
Subject key identifier: AB:50:BB:6A:F5:36:70:4D:63:EA:B0:23:FA:EF:03:B7:53:EF:6E:DD
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 0198D4A7EE1FA7DF2D9F1A3E2579330B744F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 10B0
Signing time: Sat 23 Aug 2025 02:00:31 +0000
Manifest this update: Sat 23 Aug 2025 02:00:31 +0000
Manifest next update: Sun 24 Aug 2025 02:00:31 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: 9B4PsXE4auiKTU8v9Jt28JRo27e00vEpNFCkVdX8Drg=)
2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ee:1f:a7:df:2d:9f:1a:3e:25:79:33:0b:74:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Aug 23 02:00:31 2025 GMT
Not After : Aug 24 02:00:31 2025 GMT
Subject: CN=ab50bb6af536704d63eab023faef03b753ef6edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:e8:2f:1a:3d:68:2c:43:55:d7:46:aa:aa:
00:f3:23:be:6b:50:e0:2b:a9:16:01:d0:e9:e5:0e:
1f:6d:ca:d3:6a:fa:a3:9c:85:54:26:96:5e:66:58:
1b:ff:1c:dc:41:a8:fd:c1:0e:9f:93:c3:ea:df:c4:
b0:11:5e:72:ba:0c:f0:51:c7:34:2d:47:a3:3e:77:
44:f5:a2:d0:c7:d4:93:97:41:a6:9f:a8:63:56:91:
bc:af:19:19:fb:25:a9:52:85:07:69:d2:53:d4:96:
c3:9b:2b:f5:84:07:9f:a1:75:58:30:34:93:5d:fb:
20:3d:ac:3b:2c:09:34:f0:88:27:09:ca:39:67:26:
48:82:30:33:f9:bf:0d:a5:a2:81:47:5a:af:0e:38:
cf:d9:93:1d:5e:ff:44:a7:c5:06:8c:00:70:30:29:
e8:f6:bc:5a:a0:5d:a9:3f:09:71:6a:30:de:ec:d1:
14:d8:a4:24:78:72:c3:d5:37:28:09:9b:ec:21:e4:
7e:62:e2:fe:b2:ba:55:44:00:ce:71:89:ad:c2:5f:
f4:a9:6d:69:6e:13:45:0a:1a:b9:e0:6d:74:71:06:
fa:9f:d0:12:c5:3d:05:19:6d:f6:5b:99:8c:18:93:
9d:80:4c:95:d7:f7:64:f7:a1:e2:1f:e2:e2:4d:74:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:BB:6A:F5:36:70:4D:63:EA:B0:23:FA:EF:03:B7:53:EF:6E:DD
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f8:96:b5:b1:e0:43:fa:6d:0c:2e:22:0e:3f:83:ce:56:da:
e2:a5:de:68:c2:58:48:4e:c2:fe:cd:a8:74:10:43:32:3d:b7:
5e:9d:bf:c3:10:73:9d:a6:c5:bd:75:4b:7f:1a:b5:77:63:55:
38:52:75:e9:c2:29:f0:6f:5f:84:ee:a6:33:57:32:c4:1a:22:
3a:4b:fd:40:6a:5a:19:20:23:28:69:52:ae:37:c0:97:3c:82:
96:58:ca:96:f9:fd:c7:4e:03:88:f7:e1:f4:11:fa:57:ee:dc:
79:2a:4c:89:ec:50:a7:be:46:24:7c:49:7f:46:dd:38:b4:bd:
aa:b6:b1:51:d0:29:56:37:1e:3b:d2:8e:37:d4:e2:b3:a7:64:
71:28:c4:6a:2e:c5:f1:c1:b3:7a:bd:95:29:ac:bc:09:1a:e0:
f9:df:a8:00:f4:07:6e:9b:30:cf:ab:79:24:7e:dd:6d:ea:51:
b0:7b:40:82:6b:86:dd:c1:d3:93:df:7d:16:9a:2c:d9:7e:4b:
c7:fa:d9:72:62:92:64:7b:22:67:09:f9:ef:e3:ad:d2:e6:22:
ac:84:d7:56:6d:09:19:1f:d6:33:9c:54:14:e1:a7:b5:2c:cb:
c9:aa:32:85:a8:40:21:3c:c6:9a:6d:3e:4d:2d:64:98:dc:b8:
3c:26:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:31 2025 by rpki-client