
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: M4n7yHCUhdnq0qUPBmN2WUT9DB4UwFfa61QnBBid2v8=
Subject key identifier: E7:89:16:94:5E:B2:F5:F7:4A:42:A3:79:AB:C0:91:6F:E2:D0:16:91
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0198D65F8D9E6C233A006FFFE31F96C7A681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0F7A
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: Q/VW5sfQIXKOkCHU6FfSjoiXQmwG7nWyHf94g3HVb98=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8d:9e:6c:23:3a:00:6f:ff:e3:1f:96:c7:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=e78916945eb2f5f74a42a379abc0916fe2d01691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:55:27:80:ab:f5:bf:ed:05:e8:87:9a:a3:
b6:30:d7:49:ca:c3:e7:fa:c9:da:57:e5:37:d5:ea:
60:f3:fa:eb:b8:84:45:cc:b4:5c:0f:5d:c6:0d:d7:
50:d1:c4:e9:27:c1:c5:e3:5a:97:c5:2c:d6:35:0b:
4d:0d:77:b0:c2:7b:ac:12:f8:c8:fe:2c:b4:7f:6a:
50:a3:7a:45:74:07:80:22:b9:47:94:9f:c1:ac:90:
1e:e8:47:89:87:1e:ba:09:5e:10:2e:ee:0b:f5:78:
d1:57:51:75:61:57:a4:dd:ab:ff:17:0f:01:df:50:
57:50:f0:9a:53:15:32:4f:50:87:0d:6e:f5:44:ec:
b8:af:b6:f4:57:b2:b6:06:69:2b:52:4d:01:95:f3:
d0:25:62:5c:9b:dc:22:a4:46:b2:c7:ee:2b:2c:33:
cd:8c:3b:b8:4a:2c:13:38:6f:23:f4:93:22:75:cc:
1d:5a:7c:1d:05:e4:2e:c9:28:af:3a:4d:04:96:cd:
eb:62:1d:60:72:6b:d3:ba:11:08:8f:47:11:86:9b:
98:96:4f:27:a6:66:00:70:60:83:a3:4b:c2:6a:32:
40:1d:de:c7:ec:72:f8:14:65:64:70:0a:38:db:78:
7e:bc:6f:09:af:61:9f:d3:fd:5c:a0:2e:b4:f5:50:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:16:94:5E:B2:F5:F7:4A:42:A3:79:AB:C0:91:6F:E2:D0:16:91
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:f7:8e:b4:61:c4:dc:31:84:82:50:f1:37:49:17:6e:38:
b6:4e:57:39:5f:c8:eb:bf:14:b4:1f:48:e8:6d:b4:5c:bc:e5:
28:dd:4a:2f:f0:18:e1:cd:86:55:93:45:8d:44:4b:44:62:d2:
a0:45:0d:3d:c9:a3:2c:60:68:3e:53:8b:5e:74:94:c8:6a:af:
c9:a4:f7:70:11:37:79:ce:dd:46:98:bb:3a:74:97:0c:53:9b:
b7:4b:26:f3:87:74:d0:73:30:e7:dd:a4:a9:af:77:60:6b:d4:
bb:41:53:0c:7a:0a:b5:b5:b1:1a:3e:87:2d:f3:8d:e8:84:90:
1d:8e:b2:51:bf:89:e3:3d:f1:00:7c:e3:f4:75:df:7c:14:4b:
9e:1f:f3:ee:52:46:00:a8:3a:bf:fd:3a:a7:d3:37:a0:92:71:
e7:ae:93:56:5d:59:7e:80:16:6e:e3:d4:d9:fb:df:6a:59:e2:
99:13:e6:3a:c0:81:a9:4c:16:5a:6e:eb:5b:a8:04:4e:ea:ba:
8c:dc:ef:8e:28:93:0b:e1:c5:53:0b:71:7e:f7:df:87:68:4a:
2e:8b:27:94:f2:6d:06:8d:ef:48:b0:d9:89:01:8c:c9:2b:d6:
83:78:1f:6d:3a:c8:8d:6b:62:bb:e1:a3:02:5d:c3:58:f6:47:
de:19:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:10 2025 by rpki-client