Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: EZ/HckH4EJ9SjFbpZXEyZWrjHmlB+VdjX0huMY4JG3Q=
Subject key identifier: 01:98:8B:F6:D1:EB:AA:0B:41:6E:DD:41:ED:8E:D4:D4:BC:79:B2:B5
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 0199FD33E9755CF95C965284F28B74E8B2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 1501
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: DU1Fn/QrgvUCHmnmEgBVbJJa0k97FXoGYwUf4SchVk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e9:75:5c:f9:5c:96:52:84:f2:8b:74:e8:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=01988bf6d1ebaa0b416edd41ed8ed4d4bc79b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:c5:d2:ea:90:0b:9e:02:0f:9b:53:c0:1a:
6c:91:e0:6d:02:a6:4c:39:7a:9a:55:a8:7e:a6:fb:
d1:5e:a0:04:c0:b5:3c:ed:30:fc:6e:bb:5e:6d:bc:
d3:d3:fc:b7:c3:d3:b4:de:2b:0f:39:c0:62:c8:15:
5c:ee:7d:4b:2b:e9:6a:d6:b2:6f:4a:af:bf:0a:32:
85:0f:23:60:be:40:0a:37:af:bf:29:09:87:cb:52:
69:d1:63:b9:19:54:6b:a6:78:14:29:ef:73:22:4b:
9c:29:eb:55:06:31:b5:db:93:d6:b3:ab:58:03:86:
f3:46:56:91:4b:9c:f3:63:72:d8:ad:bd:7a:22:5d:
7b:b4:e0:9b:92:60:fc:3f:74:a2:14:32:24:bf:62:
8c:40:a6:2a:23:8c:51:3f:b0:e6:29:ab:bf:a3:b4:
4d:de:c2:88:91:79:63:2b:16:88:66:dd:ea:16:e7:
23:70:9b:3d:30:da:2e:1a:eb:79:d5:63:71:10:86:
15:87:4c:df:26:06:cb:f6:f0:34:10:30:05:cb:6e:
6e:7b:4d:5d:7e:33:1e:47:8a:19:3e:53:dc:95:22:
e8:06:93:ec:68:93:ac:11:06:ef:83:2c:c8:87:c1:
32:66:4b:7e:ac:f8:b8:86:9c:78:69:d0:68:21:b7:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:8B:F6:D1:EB:AA:0B:41:6E:DD:41:ED:8E:D4:D4:BC:79:B2:B5
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:9d:df:08:03:26:d1:8e:bd:e2:e6:f1:ea:a0:c8:31:ef:
8d:3d:1d:68:2c:a6:57:7b:a4:87:9c:9a:bb:c6:41:cd:1e:ed:
19:e7:00:2a:01:e9:0e:56:69:28:5a:8e:1d:95:e9:e1:db:bf:
46:5c:70:40:67:de:27:f0:a1:50:31:94:88:22:cb:78:2b:e4:
59:26:bd:50:f6:39:77:aa:d9:57:13:67:c0:2b:cc:49:22:96:
5e:64:2d:11:a0:9b:b9:75:f4:87:f0:94:2b:fa:c0:4d:e8:55:
3d:86:16:fa:e7:9a:ac:91:c9:08:e5:49:70:56:fb:1d:27:89:
b7:64:1c:4c:7c:16:be:81:0e:01:84:70:18:d8:6a:ec:46:9c:
f4:1d:f1:7e:44:84:21:81:22:2b:d5:7e:20:8b:3d:1f:75:0b:
5c:ad:60:70:c5:11:f2:73:5a:d1:7d:bd:70:01:70:f7:6f:e1:
47:8b:0c:c9:13:a3:65:a0:51:b7:a6:33:22:ab:e4:cf:da:90:
04:f4:ad:59:e7:79:19:43:1b:42:67:02:62:dc:17:8e:27:77:
ea:2a:ee:9f:2c:46:d6:2a:31:f1:74:00:72:e6:08:11:5f:1d:
e5:2e:c2:d3:93:48:54:b2:12:dd:74:3b:8d:73:86:da:78:a4:
61:62:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:07 2025 by rpki-client