Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: rH5GTMMW7+ZX3SXyA5+AWoIXmLTVimlSslTtiGqXcs8=
Subject key identifier: 6C:5F:16:3A:DE:47:D2:86:8B:75:50:98:88:50:DC:36:08:5E:EB:F8
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 019A4F2B9A0F9A08D477533244D1FA8C4105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1518
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: 0nur4/8TS7MK/paefYoVJIHm6LrG752lflEJgmlPPnU=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9a:0f:9a:08:d4:77:53:32:44:d1:fa:8c:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=6c5f163ade47d2868b7550988850dc36085eebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:5a:6c:2f:dd:8d:bb:ae:42:d0:bc:91:7a:
ae:ea:fb:92:e9:c5:f9:eb:1c:cf:7c:0a:c4:2a:a0:
51:d7:92:87:c6:f1:f7:d4:06:8c:6e:b0:1e:a0:94:
9d:7e:a1:39:3e:ec:36:9e:3b:ea:16:54:56:15:7e:
47:d7:b8:57:e2:38:e1:53:21:15:19:ac:90:9a:47:
bf:84:18:f1:16:93:a5:75:83:b7:6f:92:0a:bf:6b:
f7:9f:3e:76:40:87:02:b2:93:ea:d5:b9:ff:a6:f5:
f5:9d:89:b0:1d:31:3c:82:39:95:3e:20:2b:c8:cb:
f8:99:5a:bd:6d:eb:fb:4d:57:d8:3c:76:4c:97:4a:
ee:61:f5:21:02:ec:6c:8c:fd:c1:90:fa:92:c1:69:
31:4f:aa:12:85:fb:f5:85:a5:13:02:e6:9b:41:b8:
3e:b5:66:5b:ba:81:40:7a:1f:16:04:77:c4:e5:e1:
84:ce:5a:71:bc:2e:5f:8c:0d:bc:1c:ba:36:33:60:
8e:b7:f0:52:e5:f4:92:2c:09:84:3d:45:6c:62:57:
32:77:54:4b:22:12:14:92:58:4a:ee:86:81:40:a1:
ae:2e:ea:e0:c6:ea:2f:49:cc:05:a7:70:e7:37:08:
68:41:58:b2:2e:b8:87:c5:6b:02:5a:c7:96:08:a8:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5F:16:3A:DE:47:D2:86:8B:75:50:98:88:50:DC:36:08:5E:EB:F8
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:00:46:c6:d6:c7:88:89:b7:1c:88:d1:32:96:71:94:77:81:
68:a7:2b:7a:3b:4d:2f:d7:9b:7e:07:bf:dd:8e:13:22:7e:48:
a9:ad:e4:90:a4:b7:3a:9d:52:31:b5:03:f4:29:c7:52:2c:d1:
24:12:00:23:00:af:c2:e1:66:f3:0a:00:92:9b:39:0a:5b:d9:
19:21:58:51:2f:d5:a8:85:86:ca:a6:43:89:57:54:50:05:73:
0e:a6:26:98:d4:b7:36:48:d9:93:53:a1:b4:9d:ed:67:95:61:
e5:4f:a5:b1:2a:76:30:9b:9f:d8:93:f1:9a:3f:f4:63:1a:49:
15:d2:28:d2:19:3e:c8:5e:89:85:45:2b:e0:4d:23:8d:37:43:
61:f2:b1:64:bb:4c:57:97:53:ab:3b:3d:d7:e2:ec:0e:86:88:
eb:78:21:58:a9:c0:b9:f6:11:d2:14:4b:7c:1f:16:5f:34:4c:
58:d0:6c:34:1d:a3:15:db:38:e7:77:3e:4b:10:dc:4a:c8:8c:
87:a5:bc:bc:65:61:de:2f:f9:f2:fc:fb:b3:c1:5e:5c:69:73:
96:a6:c5:3b:78:2d:68:8d:61:a7:8c:bb:3f:a4:68:3a:77:bd:
2f:8c:38:0f:6c:31:3d:e2:d8:22:af:68:5a:08:8d:c9:f2:ed:
76:7a:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:25 2025 by rpki-client