Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: EGy0x/J0XH91CtDxhxTIDW6lvhPrFR8W+/uRUU6d4Ng=
Subject key identifier: 86:D6:89:47:17:70:77:83:2E:D0:9D:61:C7:D0:EC:1F:6C:3E:65:05
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 01976D3DEAB307351732BBE355456B503AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0EBF
Signing time: Sat 14 Jun 2025 07:01:03 +0000
Manifest this update: Sat 14 Jun 2025 07:01:03 +0000
Manifest next update: Sun 15 Jun 2025 07:01:03 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: OZGyzpyvNPs+8YQdmCuC4OBhqloeVsbW7CaFax5NMkg=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ea:b3:07:35:17:32:bb:e3:55:45:6b:50:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Jun 14 07:01:03 2025 GMT
Not After : Jun 15 07:01:03 2025 GMT
Subject: CN=86d68947177077832ed09d61c7d0ec1f6c3e6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:6c:88:3f:52:90:c5:2e:61:a9:47:12:db:
a5:fa:86:71:34:27:49:33:37:f9:11:c4:46:74:a5:
68:0a:f0:5a:d2:0b:5c:5e:af:ee:51:d9:50:ac:29:
27:57:65:cb:b0:95:4b:c5:46:3b:4f:e7:77:27:b7:
d3:e9:f5:ba:ae:26:c6:7d:0d:98:8a:0b:c3:8a:37:
77:bd:3e:35:0f:09:9e:39:8a:91:ff:c9:a3:dd:af:
b2:7f:bc:79:c3:bf:c6:5e:bd:fc:57:04:80:09:81:
30:bf:1f:3d:0d:f4:8a:4d:f5:10:ac:fe:48:3b:53:
50:08:8b:e9:b0:02:b0:de:82:08:7d:da:31:2d:37:
06:4b:db:6d:f8:6e:49:2a:1c:d0:e9:33:2d:f4:36:
1c:08:31:ec:03:e5:f0:36:aa:c8:b8:93:dc:4a:87:
6b:f8:cd:c7:5e:56:31:aa:e0:a6:ed:70:c6:bb:2c:
3a:8c:05:b4:a2:c6:62:aa:fc:49:6b:84:5c:02:02:
87:89:23:0b:73:62:04:f5:42:8a:17:f1:bf:32:d8:
2f:7a:05:b3:6e:14:e7:75:f3:99:aa:f6:93:9c:3c:
41:9c:a7:6d:61:9f:5e:f4:f4:fd:89:08:8c:99:85:
ef:ed:34:fa:d6:96:74:9f:b6:ba:dd:7f:56:57:3e:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:89:47:17:70:77:83:2E:D0:9D:61:C7:D0:EC:1F:6C:3E:65:05
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:6d:8d:33:17:1c:7c:70:bd:05:c9:9a:86:42:1d:6d:2c:
8c:70:a7:56:0d:c0:24:cb:7d:36:fb:09:a5:82:ef:32:a6:76:
80:c4:73:eb:45:53:1d:e0:87:28:ba:91:ca:16:9e:74:2f:0b:
1a:36:4b:cd:25:c8:db:32:31:c0:7c:9e:c4:2a:c5:e4:c0:96:
2d:01:96:54:94:98:10:81:1c:6d:1a:e0:13:b9:14:ea:05:95:
4d:6d:88:ba:11:ce:63:e9:58:8e:49:31:b7:ec:2d:df:bd:30:
58:05:45:a7:78:54:0f:39:68:9a:1b:6d:64:35:1c:74:81:cf:
fb:61:b9:1f:cc:4f:07:95:d8:88:2e:04:ae:b9:8d:8d:83:ed:
1a:30:11:22:62:64:f0:21:7f:d1:68:6a:a3:98:7c:1b:c3:29:
a4:7d:f9:fc:63:69:78:90:2a:0f:9b:bb:d2:ea:dc:8b:4d:52:
b3:b9:6d:ed:14:29:43:58:e0:f7:54:82:89:6b:b4:91:c7:a1:
86:47:84:75:89:d6:fd:2e:ef:d9:39:bf:2a:f0:4d:2b:db:e5:
c0:70:42:97:c9:4b:bf:bb:d8:41:e0:54:dd:b1:92:48:12:70:
b3:6a:82:0d:2e:46:13:59:8e:05:85:02:84:d5:e3:0b:16:d3:
3a:40:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:22 2025 by rpki-client