Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: 93x+U57kCfcznZIyOOWwl/PbPoYlIOV0niMd5cJf5mE=
Subject key identifier: 24:E3:9E:30:53:EF:EE:97:F4:F9:3D:61:86:65:A6:BA:3A:5B:FB:8C
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 0199FCC609ABAA06A9269D45D4C3BD679635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 149E
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: TJdCzBZNcVm+DYwSbZ6OU1Gvbv75F+cV6pNsyxvvzKI=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:09:ab:aa:06:a9:26:9d:45:d4:c3:bd:67:96:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=24e39e3053efee97f4f93d618665a6ba3a5bfb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:b8:11:17:00:63:25:1e:dc:21:18:ec:7a:
41:cf:97:b5:a1:f0:49:c0:97:0d:fd:16:1d:7b:73:
4f:05:fd:83:0e:18:25:89:22:ae:2e:08:ad:70:e2:
3f:a4:ab:6d:be:26:a5:ab:ba:8b:7b:42:7b:9e:6c:
7e:3b:ef:12:7c:37:f8:69:b4:fa:d2:bd:61:9b:0e:
46:0d:2b:3d:aa:a2:19:3d:47:15:67:0b:45:4f:be:
4f:46:02:f2:ce:82:94:3a:e7:1e:7f:7d:f3:c7:dd:
af:15:8b:30:06:bc:76:e7:cb:e3:a9:29:5a:6f:c4:
f9:f3:2c:d9:e0:0f:08:cf:7a:5e:de:09:45:9e:af:
f4:3d:40:1c:9f:13:3e:d0:e5:4f:c2:af:06:9d:52:
a9:bb:be:cc:5d:1b:82:21:17:54:80:86:3a:74:d9:
35:f5:7a:9a:bd:12:62:60:c6:1f:79:17:af:61:ce:
31:aa:b0:e7:8d:20:5a:92:95:f3:e8:ab:65:af:eb:
fc:ea:06:b2:38:c2:84:98:5c:85:bf:0f:cb:f5:a4:
93:92:25:c1:cd:1f:5c:8c:bd:89:27:d3:59:ac:a9:
0b:40:c7:5c:3a:7d:3d:ed:db:ae:3b:d9:92:9f:4b:
6a:b8:a5:de:c7:ac:32:bb:61:48:88:68:cc:0b:53:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:9E:30:53:EF:EE:97:F4:F9:3D:61:86:65:A6:BA:3A:5B:FB:8C
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:db:a0:fc:53:99:2c:1f:c5:e1:8c:e7:08:cf:b0:31:0d:
95:74:57:43:7a:ef:62:45:68:e9:5e:7d:cd:ee:b4:43:01:56:
e6:34:73:94:f4:43:5f:c4:85:dc:7d:c0:fd:4b:cd:a4:e3:e9:
c4:5d:86:02:71:ff:c9:c5:69:c9:08:59:6e:10:f6:ad:fc:7e:
aa:9d:0e:eb:53:53:96:9f:af:09:a2:2c:26:4c:a7:da:af:80:
0a:0d:0d:06:3a:6c:eb:65:5f:dc:11:86:d8:42:3c:cc:24:36:
61:5d:64:6e:bb:22:f5:f2:93:e8:bc:6e:c2:3c:7b:3d:99:fa:
ef:0a:6c:8b:7d:66:5b:31:24:92:0c:cc:db:a0:e8:a8:e5:58:
8e:44:58:d8:d3:2f:d4:ba:ab:3a:84:d5:de:ea:64:7c:4f:a3:
2e:c9:0b:41:00:d0:ee:2b:50:ce:8d:48:95:c0:88:70:7b:db:
6e:03:6d:96:6e:35:86:97:aa:eb:51:31:c5:0d:ac:59:56:1e:
dc:bf:8c:98:ff:07:e2:6b:46:fa:d8:e6:85:fd:9d:fe:17:c7:
05:f3:d2:86:04:ea:3a:4c:a4:13:04:31:0b:73:02:e6:90:49:
70:29:ff:ce:83:0e:e1:f7:1a:1f:19:76:03:37:df:32:17:d0:
50:8f:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:36 2025 by rpki-client