Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: jmimppAtt5pvX2NueVvRiTuOsssexvzP6PDoCRxrXzQ=
Subject key identifier: 1C:83:1E:FF:8F:0B:E4:F1:C8:16:5B:47:E7:8C:CE:9E:DB:79:BE:04
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019768BBC7FC56F77871FE540BDB18A0E1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 13AB
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: QIx0QchwcVPD3IzbWER5uAW4Io+2D/pNFs9VGot9G1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c7:fc:56:f7:78:71:fe:54:0b:db:18:a0:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=1c831eff8f0be4f1c8165b47e78cce9edb79be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:e7:7a:1a:3a:fa:d3:8d:12:79:2f:4a:21:
90:2e:45:35:c9:7e:4f:66:cc:d2:b3:a9:be:e0:c2:
8e:12:37:5a:24:36:9b:68:61:f6:bf:0f:e0:b2:af:
1f:3a:56:7d:c8:2d:86:b2:d8:95:4c:61:02:94:9a:
12:6e:7a:c3:50:68:cb:d6:4e:4e:af:69:5d:0b:2b:
74:6c:ac:82:80:2c:07:ff:0f:19:f1:48:c8:bf:56:
ef:f3:90:ad:7f:e6:2a:1c:4f:38:99:2e:ff:ed:e8:
61:50:3e:24:b0:23:a1:e0:6f:3a:93:a7:4c:d8:38:
82:8b:fe:2d:e3:da:87:04:c0:4a:d4:66:cc:b1:8e:
77:b4:d8:25:9f:7b:34:e7:51:18:00:3a:13:49:94:
b1:64:b9:80:2f:57:ea:a3:ee:ec:71:de:3e:c1:78:
2a:46:f3:7b:89:72:6a:af:65:f9:2d:22:eb:92:ac:
b0:29:27:8b:59:e8:c7:d8:7d:3b:96:13:9b:92:9d:
64:d4:d9:75:cc:fb:23:6c:c5:f0:fb:af:fc:06:6d:
89:d6:42:9c:c7:55:85:3f:03:e5:a1:ba:38:28:98:
38:7b:d1:49:94:f5:0b:d9:9e:8a:42:54:dc:2a:4e:
a0:31:6e:16:9d:8a:cf:ad:b9:fc:f0:65:47:78:19:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:1E:FF:8F:0B:E4:F1:C8:16:5B:47:E7:8C:CE:9E:DB:79:BE:04
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:06:e1:90:95:b9:ea:86:db:d3:20:c0:83:20:93:06:7c:
f5:9a:ed:66:b2:96:40:99:ae:6f:3a:9e:27:ad:48:79:c4:44:
47:b1:11:30:c5:c3:fe:28:ec:c4:ca:5c:46:db:a8:79:0c:12:
b3:8a:16:c4:b6:8f:39:16:4d:bf:cc:2d:92:b7:76:ba:24:44:
54:40:ce:a8:ec:18:80:88:5a:e6:61:9e:37:87:ed:6d:ef:cf:
3b:e8:5c:db:1c:02:a7:62:f7:5f:a5:b8:40:96:5a:b7:a6:43:
9f:7f:14:d1:b3:ad:73:f6:88:8c:4b:45:7f:54:cd:a6:05:bb:
f9:2b:a4:3f:73:7c:4c:2a:aa:1f:4e:90:26:f1:a8:44:65:49:
c6:84:5d:45:06:18:fa:00:30:15:c6:f5:53:71:5c:41:b1:74:
6a:56:a8:3d:ab:6f:b8:ca:ed:87:b8:65:68:78:31:8e:63:1b:
a3:3f:68:fb:e9:bb:81:fb:13:a3:a9:72:aa:fa:40:0b:4c:93:
84:52:3d:55:d1:af:fa:ec:62:40:b2:33:83:48:bd:f2:21:e7:
6b:43:0d:5b:ef:a2:c7:54:fc:e9:39:54:1a:16:d7:68:d7:f6:
72:7d:c3:d1:68:74:1e:db:fd:95:3f:58:b6:b4:28:32:7f:f0:
d7:81:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:32 2025 by rpki-client