Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: 57RR24uiMAVoyMT4J0n7EmgNgZLV5L3qo3QuXFPGiz8=
Subject key identifier: 2C:67:B1:B0:D2:CD:E4:F5:31:25:5C:DC:BA:46:E9:9C:45:E1:0C:FB
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0199FFC7AABC253D2A088E75D5F13478BF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 1014
Signing time: Mon 20 Oct 2025 04:01:39 +0000
Manifest this update: Mon 20 Oct 2025 04:01:39 +0000
Manifest next update: Tue 21 Oct 2025 04:01:39 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: xGoptkkWZxMlKC2/MnOvs3n4KWlUcUAht7RN9kbk2+4=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:aa:bc:25:3d:2a:08:8e:75:d5:f1:34:78:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Oct 20 04:01:39 2025 GMT
Not After : Oct 21 04:01:39 2025 GMT
Subject: CN=2c67b1b0d2cde4f531255cdcba46e99c45e10cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:e3:94:a6:8b:61:4f:e4:59:b6:da:2a:40:
09:04:a4:d7:57:6a:a2:0f:43:aa:6e:c4:5c:61:33:
2a:eb:14:07:6f:1e:b9:0d:da:c4:cf:8c:9d:07:8a:
7a:72:66:4d:82:74:1a:cc:cf:14:34:a1:cb:0f:06:
5a:84:78:77:46:be:27:6b:cb:9e:b7:29:c0:51:98:
04:3b:d2:5e:ad:d7:88:03:9e:18:d6:65:c3:88:49:
a8:be:26:29:95:e1:26:62:50:f0:59:21:d3:47:fb:
23:e0:96:9f:d3:1b:10:f1:b7:73:b3:a5:79:f2:f1:
72:76:6d:b4:85:16:62:07:9c:f9:83:ad:43:41:4a:
c8:40:54:bd:33:9e:80:2d:4e:1d:70:11:f0:db:50:
d8:97:aa:01:ea:16:f4:58:45:61:ee:70:a2:7d:1b:
57:c3:b8:e6:44:c7:d2:d0:71:ec:87:58:b6:48:3a:
54:06:67:c8:59:3f:b3:42:9b:6c:d5:1c:68:14:c1:
1f:2b:25:00:70:4f:a8:7c:a9:c6:4d:22:4e:7b:6c:
69:09:5b:01:f9:2e:b6:03:ab:60:af:8a:b7:05:f2:
ce:f1:6d:c0:3a:71:ff:3d:d8:50:2d:6f:4e:4a:1a:
14:46:34:c9:7b:74:bd:97:03:9e:82:96:c1:a2:6e:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:B1:B0:D2:CD:E4:F5:31:25:5C:DC:BA:46:E9:9C:45:E1:0C:FB
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:53:16:14:59:d8:8c:d2:d8:7e:1e:f0:32:e9:a1:07:68:
24:ab:05:dc:8c:ad:22:c8:03:5f:a3:77:c4:18:db:f2:64:1b:
00:f2:4d:8a:de:12:64:f7:4a:8e:ff:b9:f9:4e:c7:ad:b5:28:
4a:f3:f0:bc:a2:e1:26:bc:9e:08:84:b8:88:86:ff:a4:e8:e8:
5d:1c:bf:07:7f:2a:92:99:50:83:17:0d:7e:7c:58:be:14:94:
00:7d:d7:67:dd:58:76:22:68:e4:33:20:87:6b:e5:87:ca:4a:
66:ff:f5:a5:e0:eb:ec:49:a2:eb:ac:c5:30:be:3e:c4:71:7b:
44:01:06:ab:0e:57:b3:ab:c9:0c:e8:09:23:fe:63:da:64:b6:
e7:bf:3c:59:bc:ee:bc:15:d2:6b:50:fd:7c:30:a1:36:2e:a7:
ce:e9:0d:5d:51:83:fe:50:68:1b:ce:e0:4d:21:19:c8:69:b0:
36:1a:de:5a:4c:da:07:b9:d7:5b:df:a3:3b:30:96:3b:c8:40:
a7:56:82:10:cd:13:a3:9d:75:b2:fc:f9:c1:61:62:5b:70:4e:
fb:8a:c5:c3:9c:bd:06:69:13:d9:88:d8:22:fb:5b:8c:22:1b:
6e:ba:47:57:9e:b1:4d:e4:9b:73:6a:d9:db:8a:10:a7:45:fe:
39:35:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:48 2025 by rpki-client