Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: ELXA0TAo9XEd5T5bQvZZ1YVg/+hOopmxvhXVL46P73w=
Subject key identifier: 56:72:45:80:49:20:4E:CF:4D:14:2E:AA:79:2A:F4:C9:8E:FD:C6:2F
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0197B6A10F15C7F636B27DB1D07DB82C48C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0EE5
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: KiQZnxPNiMkFUnuAxnZw/LGFoJJKHN8XpenIVnJLSP8=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0f:15:c7:f6:36:b2:7d:b1:d0:7d:b8:2c:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=5672458049204ecf4d142eaa792af4c98efdc62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:d5:36:f7:55:d3:f2:26:64:a1:55:ba:c7:
55:4e:c2:0f:d4:91:92:7d:2c:a2:00:d0:26:8d:a5:
22:60:3f:c0:f2:8b:cd:07:58:6a:fd:2a:4e:db:88:
77:12:f2:2d:5a:c0:34:f6:2d:a0:db:e1:a5:0e:c9:
54:dc:1f:36:b0:a8:77:45:b5:12:15:c7:17:ac:86:
a9:c7:a4:59:2b:84:d0:a4:cf:29:ff:17:c1:29:29:
f2:26:67:95:e6:19:6e:47:e5:09:08:5d:47:7c:f1:
d9:60:bb:c5:ea:d8:a0:fb:23:0f:b2:a5:68:8a:dd:
c9:3c:1d:a5:57:c6:60:b8:a5:04:36:81:71:f9:2f:
7c:58:88:08:18:17:cf:a6:44:1a:07:d8:51:ff:19:
ae:c0:c0:ca:a3:0a:cc:e1:e8:59:0f:a9:ab:ea:e1:
e2:e5:1e:8c:8b:70:38:8b:bf:fa:62:dc:de:e5:ce:
18:ff:9c:9f:e2:8c:87:ea:23:a9:af:6f:79:56:10:
f0:0f:ab:cd:8c:2c:4a:47:07:b8:d7:98:2e:8c:59:
9c:3f:0a:a0:60:37:9b:03:86:79:be:90:8e:8a:31:
d5:7e:25:c1:97:ce:8b:a9:eb:79:19:78:16:05:7f:
a4:d3:93:f2:94:0b:fd:65:02:e3:f5:c6:00:fc:c3:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:45:80:49:20:4E:CF:4D:14:2E:AA:79:2A:F4:C9:8E:FD:C6:2F
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:16:5b:3d:b4:e7:7d:80:c8:4c:06:39:db:6a:47:ae:a6:
b6:e5:82:d7:e7:9f:8d:04:ea:65:17:3a:c8:14:bd:e3:9c:bf:
06:71:d0:5e:0b:d3:94:04:d4:79:ad:44:8a:dc:27:d4:e8:96:
77:ae:f1:6b:9b:ae:d6:c5:47:de:24:8e:e7:f8:56:eb:ae:e3:
8b:04:c1:2e:8f:21:e7:22:c8:d7:bd:96:a3:e5:62:50:8b:a6:
a0:ad:d6:bd:a3:b6:c3:6c:e4:1f:95:3e:0a:ec:c3:ad:f2:ea:
46:1b:d0:42:5a:c2:59:89:34:2b:58:01:9c:c5:bf:3f:cd:1b:
78:6b:df:ba:44:af:1e:73:f1:3f:4a:2b:a7:b5:ac:84:92:60:
f5:5c:d0:21:91:34:08:a0:ed:d4:2e:30:84:6a:43:77:42:f0:
f4:09:e1:87:34:05:5d:b3:54:3e:3a:0a:27:46:19:ae:b5:b2:
37:54:e6:b8:72:04:d4:cc:1a:cd:3e:30:75:96:e9:ed:53:5b:
23:07:f0:cf:af:56:28:fc:c2:1a:b7:56:fe:f7:15:bd:45:97:
78:06:3d:58:e7:ad:b5:37:c9:a7:bf:49:e5:0f:b7:1b:c2:12:
46:e9:03:b7:ea:bc:3f:50:62:e5:5a:f8:69:c3:5c:f6:77:30:
5a:8b:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client