Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: hd05HzXAqqHk4wt25z1he104oR8ITAbEO7JvNmHqIFc=
Subject key identifier: E6:40:98:E0:19:70:85:9D:CF:8C:7F:71:2D:48:27:EC:6B:04:56:70
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019A51BEA3FDCD932148204A154CD342E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 14CA
Signing time: Wed 05 Nov 2025 02:00:39 +0000
Manifest this update: Wed 05 Nov 2025 02:00:39 +0000
Manifest next update: Thu 06 Nov 2025 02:00:39 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: 0FHSYbRU4NNqYhg41hy0aY7b9pv7zXWNvbFOC72kkS0=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a3:fd:cd:93:21:48:20:4a:15:4c:d3:42:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Nov 5 02:00:39 2025 GMT
Not After : Nov 6 02:00:39 2025 GMT
Subject: CN=e64098e01970859dcf8c7f712d4827ec6b045670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:5c:b4:a0:18:5d:7d:79:44:e4:33:eb:d8:
2c:9f:a3:67:42:fe:30:7c:e6:47:70:b7:d5:cd:dd:
5a:cd:f0:57:a8:de:61:fa:4b:d0:de:74:a6:33:9f:
8a:8c:ab:83:0c:93:6a:53:e9:b9:36:72:e0:ed:fc:
85:ef:72:6d:45:55:86:85:1f:70:e8:f1:2d:4a:dc:
f4:2c:ea:81:ce:99:6c:ef:94:24:76:97:33:0f:5e:
2d:e8:bf:29:ba:02:f4:4f:84:aa:ef:d0:d1:f2:dc:
3b:eb:40:38:dd:51:a9:0a:2a:96:18:cf:79:09:69:
33:80:45:39:3c:28:ae:72:19:bf:a3:57:63:61:cc:
5f:aa:b2:d9:ba:7b:d4:9c:7a:2f:c1:45:d1:0f:7f:
79:04:a5:3c:22:fc:62:4c:f0:5b:e7:22:80:e5:68:
b2:08:79:e2:bd:7a:ae:28:54:52:ec:f1:b0:44:b1:
28:84:01:c2:b5:73:e9:d7:26:28:5a:c5:b5:8c:76:
4d:a5:8a:d4:3f:0d:bb:e5:de:24:c4:9d:53:49:ff:
88:86:e6:1a:38:7c:1a:7f:42:a5:09:c5:e4:fc:ae:
d0:85:f1:52:2b:d4:ac:eb:b6:60:b0:30:0e:81:26:
ad:fc:ef:72:4e:56:a4:0e:cb:77:c0:da:11:7c:54:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:98:E0:19:70:85:9D:CF:8C:7F:71:2D:48:27:EC:6B:04:56:70
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f7:e1:9e:d0:83:4e:84:7e:33:09:70:a6:47:01:1d:dd:ea:
bf:ff:0c:19:fb:06:81:aa:cd:db:01:37:57:dc:bc:7c:b5:d3:
85:84:db:fa:56:bd:46:de:db:8c:d0:da:5d:8d:1f:e0:ca:6e:
76:bd:0a:21:e5:2d:1f:d3:ef:22:3f:d2:bf:bb:f9:5e:52:23:
12:da:dc:da:1e:d2:5e:d9:41:5c:ca:ad:16:7d:d6:0a:0c:98:
3d:2d:f2:31:40:85:ca:04:b8:d0:96:94:2b:dc:05:67:17:71:
66:33:0e:ce:49:e8:6e:a3:27:9d:e5:bc:84:7e:8f:7a:e5:a9:
8f:d3:7a:95:87:f8:94:fd:a7:0b:3d:b3:93:64:69:be:db:2c:
50:c3:19:f7:f9:4f:1f:38:f0:c6:39:5a:62:47:6b:b3:a2:92:
ba:6b:e6:a1:3a:57:81:2c:7e:18:f8:e7:a4:2c:38:0b:3d:89:
de:83:1e:12:44:d0:5e:a7:30:1b:fe:89:d2:5c:32:85:3e:93:
97:e2:e1:ae:b7:2e:7f:aa:38:06:bf:ac:9e:f7:2d:8b:8e:51:
0f:74:cb:bd:20:60:df:85:74:2d:59:90:66:59:a5:c7:0f:8d:
07:2b:39:6e:ce:46:d9:23:a6:33:1d:58:d7:59:4d:96:a4:71:
b2:71:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:20 2025 by rpki-client