Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: wgwfde4aCp4mi+AskP56fFjsa993bfreHRid5lDrbVs=
Subject key identifier: AB:5E:71:C9:1C:4C:7E:A1:BF:7B:6C:27:B2:0F:D1:C0:5D:D8:67:94
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 0198D660DBADE041121D44087C68D954BBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 47
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: RtP6knlCdnBq/0DF7Zi0VPaumHoQfVbm9izlMuoaAPg=)
2: WnjDTxLEaqOui0Ha0cHV61JSgqM.roa (hash: /Hg6cfcRzcdPSVYjlpQQ2lt5H6wf7ZaOp41HGAyx/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:db:ad:e0:41:12:1d:44:08:7c:68:d9:54:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=ab5e71c91c4c7ea1bf7b6c27b20fd1c05dd86794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:28:cd:91:9a:6c:80:94:5a:30:1e:2d:e4:
6f:20:92:04:55:ea:ef:0d:be:8c:99:72:f2:23:13:
67:49:e5:4b:db:5e:03:02:c6:8d:0b:18:58:55:5c:
3d:f3:4f:19:d4:c1:59:7c:68:99:15:c7:fc:57:18:
71:c1:e7:ce:ef:80:ed:84:20:7f:61:7c:9e:ce:12:
72:50:f1:e0:50:1c:ae:e5:3b:a0:c1:4f:71:f1:27:
de:a3:30:be:60:85:b5:34:ff:a2:41:1c:08:e5:96:
ba:1b:93:3d:e7:7a:42:ef:92:23:c8:d7:fe:60:78:
ea:02:36:0b:c8:0d:dc:c5:b7:02:70:26:8d:10:bb:
79:23:4c:fe:f0:c4:ad:ef:71:6c:f6:30:82:c8:d5:
0f:63:b1:67:02:7c:14:a8:12:2e:63:f4:7d:ec:48:
e8:54:d2:cf:f3:78:b6:14:11:81:0f:53:cb:34:a1:
e7:b6:77:d1:48:db:8a:a4:2e:98:02:69:47:43:02:
3f:c5:dd:20:d2:89:14:04:bb:be:60:35:f4:17:b4:
77:6d:7a:34:b2:6b:f6:6e:76:a0:c1:0c:bc:21:f6:
02:b3:c6:cc:46:07:4c:40:c0:96:01:be:69:a1:5a:
01:a3:43:a4:86:be:a9:81:be:e2:57:d6:5f:eb:2c:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5E:71:C9:1C:4C:7E:A1:BF:7B:6C:27:B2:0F:D1:C0:5D:D8:67:94
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:26:90:93:5c:33:83:a9:49:86:cf:42:f4:2a:97:b8:bf:
6e:4b:93:27:43:99:54:61:d8:29:f0:d2:aa:3d:1c:f8:c1:cc:
87:22:d7:73:8b:b6:d9:1e:05:68:81:8a:31:c2:88:da:5e:09:
5b:30:06:a4:bc:81:3a:90:96:e8:c5:c0:4f:05:e7:0c:88:d9:
32:9b:94:6c:46:7b:1e:f2:42:83:01:ee:9d:0e:15:04:b8:ce:
76:73:17:7d:ba:67:a8:64:c0:dd:00:92:62:17:87:a3:d4:9a:
14:a4:fa:ea:d0:cd:9b:7d:b4:89:15:3c:54:20:d1:5f:3c:27:
aa:f9:0b:b7:8d:14:d0:2a:9a:ea:50:3c:67:19:7c:a7:da:93:
eb:7c:de:28:09:2a:70:e8:b3:7a:8a:18:2c:df:af:d7:41:bb:
c4:c6:28:26:47:c9:1c:f2:dd:7a:b5:f2:91:f1:9f:98:d7:8e:
ef:4f:ed:3b:74:36:16:db:d3:02:83:c7:82:c0:7c:15:fd:6d:
8b:31:0c:23:db:0d:87:a1:7e:56:64:d9:21:19:77:87:36:91:
68:54:8b:8d:c9:6e:38:56:3c:53:40:7c:cd:22:ff:2f:9f:c5:
30:28:84:b9:5c:b5:24:10:fb:14:ed:6a:fb:d7:e6:c2:56:da:
a6:97:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:14 2025 by rpki-client