Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: UGdzOtmlsMfh2Lwaq3np63xCXX1lpkfex7aypfQarZY=
Subject key identifier: B5:5E:E0:F2:4A:C2:42:10:00:56:8F:47:46:BA:2B:81:51:75:56:8B
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 0198D5BBE13AF1B5DC02032880BEDE3A4058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 1468
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: rne6tcO73tzjlcid4KHAJVgYPYDQulq2Z1HSyUCdSYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e1:3a:f1:b5:dc:02:03:28:80:be:de:3a:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=b55ee0f24ac2421000568f4746ba2b815175568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:79:cc:c6:ff:8f:56:d6:11:75:2c:0c:37:
1d:23:33:e2:8a:3c:f6:d2:86:7e:c0:1c:fe:1d:6f:
b5:a3:46:aa:dc:5d:ca:a7:59:d8:78:18:c4:12:73:
65:21:d0:c0:0d:05:a7:a5:4d:17:cb:8f:b0:5e:0a:
4a:57:82:d9:5b:ab:03:4d:05:f0:64:e9:2f:c1:aa:
da:1d:8f:7a:b3:e9:b8:e0:f2:f3:6d:9b:91:fe:bb:
38:4e:05:c5:64:91:83:52:e8:27:d2:8f:d9:54:b2:
48:1e:91:67:65:15:8a:49:11:58:5d:4a:7f:2b:5e:
13:33:4f:b6:d6:2d:c9:95:37:83:28:72:24:f6:d1:
b2:87:b5:13:b3:12:63:45:3a:2a:df:33:98:d3:3e:
43:9e:93:a8:80:4a:e0:fa:db:59:bf:2f:4a:9c:a5:
7b:8d:3e:3a:42:92:ea:eb:59:e8:a7:e3:3b:64:38:
8e:7f:78:fc:24:b6:fe:cc:ed:da:f8:dc:e7:e3:6d:
a1:60:07:84:15:11:73:41:4c:1c:14:89:90:22:5c:
53:2d:d3:a0:6d:1f:67:48:b7:38:0e:8d:c8:74:e0:
1c:4d:fd:cf:3f:81:1d:6f:95:e8:d3:5f:8c:db:93:
53:1b:1f:8d:12:b5:e2:5b:24:1c:7f:a5:2e:9d:39:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5E:E0:F2:4A:C2:42:10:00:56:8F:47:46:BA:2B:81:51:75:56:8B
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:15:00:5e:ac:39:40:f0:dc:93:c2:8d:38:4a:7f:23:9b:
5e:b1:98:9c:80:27:5b:b1:bb:5d:e1:dc:a6:08:c2:77:d3:4d:
fd:f9:00:2b:ec:e7:4c:90:ae:90:f1:71:d5:cb:96:e6:30:8a:
70:94:23:07:5d:9d:1e:23:20:81:26:26:e6:11:1a:1e:f2:34:
ec:b7:e2:0d:c8:00:38:2a:93:8f:b9:02:7f:0a:1a:47:07:b7:
95:74:f8:e4:b8:e2:0b:bb:42:a5:a0:28:12:af:70:e0:c3:b2:
b7:de:23:81:65:13:6e:4b:e2:aa:5c:27:af:91:5b:3e:79:2c:
08:bf:80:e3:9c:c9:33:31:c7:31:e4:4d:05:48:98:02:61:63:
cf:6f:dd:2f:44:bf:35:dc:6e:9c:13:8b:26:57:94:65:bd:b8:
d4:c4:a1:5d:93:79:39:ae:59:3b:8c:36:a2:da:60:8c:39:e5:
b2:3d:8c:f1:e3:1c:b7:40:86:6c:c0:48:6c:93:a6:b2:8b:d8:
cb:65:5b:3d:d4:0e:76:01:f2:7a:b2:b3:3f:73:2e:4e:e5:f0:
da:e2:cd:f4:c5:17:0d:39:48:d9:43:2a:58:83:6b:07:d4:50:
4d:a7:bf:26:27:81:7a:e5:e6:0f:ab:27:62:ab:70:e3:1f:57:
ae:c8:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:51 2025 by rpki-client