Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: 4ZMRSHjURhk3I2esvIO2NBvD6wmC2Wv0KCPS0C3M8yQ=
Subject key identifier: D8:0F:3C:B6:38:22:59:96:CD:35:E4:C6:C9:6F:71:74:B7:02:83:55
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 0197B7EA10CCF778B769F2E0AF0A5140E44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 13D4
Signing time: Sat 28 Jun 2025 19:00:59 +0000
Manifest this update: Sat 28 Jun 2025 19:00:59 +0000
Manifest next update: Sun 29 Jun 2025 19:00:59 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: pKJMdUlHqVemfinY/1spfuxd6EkjYNKe05MvoKhwjoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:10:cc:f7:78:b7:69:f2:e0:af:0a:51:40:e4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jun 28 19:00:59 2025 GMT
Not After : Jun 29 19:00:59 2025 GMT
Subject: CN=d80f3cb638225996cd35e4c6c96f7174b7028355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:4a:57:a4:8e:f0:8e:34:23:d9:43:0c:76:
ec:56:b2:05:85:db:ff:54:c9:f6:d4:58:98:35:6e:
e3:bc:66:7a:38:19:a8:28:57:6e:d5:d8:32:33:9f:
60:e9:e8:69:c5:40:a2:f5:71:81:eb:d1:2a:74:53:
5d:80:8d:8c:8f:1e:70:99:22:bd:f2:ea:77:2f:6c:
43:5c:ed:e4:45:05:38:54:8e:44:c8:4c:5b:f7:00:
48:85:a6:54:54:91:77:da:d1:6c:f7:80:b4:3f:dc:
f2:62:84:17:45:09:1b:ad:88:b4:e3:fc:c2:40:15:
96:f3:25:f4:ef:c9:9c:b1:98:58:79:69:e1:e6:8c:
2b:4f:3d:9a:36:c3:d1:ef:2c:a8:99:d6:35:f7:f5:
61:3a:88:11:01:86:4f:6c:37:3a:1d:fe:ac:66:fb:
13:f0:4c:03:e0:45:cf:d8:3e:09:cd:94:83:58:9a:
c2:40:7f:9b:87:95:be:d3:51:d2:3e:c4:e5:5f:47:
08:7e:5e:80:d1:d2:d5:86:50:ab:68:18:27:a7:74:
5f:aa:a3:f2:64:a9:01:c4:cc:bf:23:15:8b:6e:f5:
c1:b3:2d:85:a3:64:99:d4:81:1d:45:10:a9:90:3f:
63:59:01:7c:c6:4a:92:d8:c3:58:5c:56:42:db:68:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:3C:B6:38:22:59:96:CD:35:E4:C6:C9:6F:71:74:B7:02:83:55
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:62:1b:97:fd:04:f5:15:6a:e1:62:5d:83:e9:6f:75:29:ce:
43:97:51:a6:49:3a:f5:5e:fd:40:e7:2e:71:ec:8f:e8:a4:94:
ea:2f:39:45:2d:f3:3d:e4:b2:20:94:0f:1c:85:05:1a:07:04:
95:de:f9:e8:4b:72:ee:a1:8c:d2:83:17:07:26:2f:03:7d:e6:
1d:52:fb:e0:7f:9a:ec:f3:34:b1:f1:df:fb:57:a9:db:20:7c:
5c:34:d9:53:e1:24:d1:0f:d3:95:7c:0f:5b:c4:00:99:e1:d1:
4f:69:51:19:91:20:50:2d:05:8c:68:5f:fa:fa:04:93:55:b6:
32:ff:9a:75:c4:36:1b:ee:4e:0d:2c:ca:91:f0:19:79:be:7c:
c5:dc:52:10:09:f6:2e:9b:81:b4:60:95:3b:21:91:27:01:f1:
fd:60:da:9d:1e:4b:48:08:d1:0e:f4:93:f0:9a:a7:86:61:a0:
16:1a:d7:74:43:bb:42:35:cb:f5:cf:11:b9:cd:66:62:e5:3b:
1e:b6:c8:7a:2c:7a:8c:56:01:21:2e:ba:d7:d7:02:5c:e4:1e:
59:b0:f8:12:5f:a3:e8:9b:ef:07:81:74:71:e9:ad:d3:09:68:
e9:98:3e:ba:5c:81:cd:61:fd:26:b8:f9:4a:78:cd:74:d4:ba:
e4:9e:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:31 2025 by rpki-client