Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: WET25lhgc/cnJD0rrbWGX6p899pgSpcyHDUoT4JHd9Q=
Subject key identifier: 3A:88:28:9E:CB:BD:BF:6E:B1:C9:9E:92:6E:5C:49:56:53:26:89:73
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019894B7D07539F8304BC7BB644B85A37C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 16:02:11 +0000
Manifest this update: Sun 10 Aug 2025 16:02:11 +0000
Manifest next update: Mon 11 Aug 2025 16:02:11 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: mEGHiFPrwLhFbLqlKaSSkk7ZXIUWW5mS4F52WBPUUI0=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:d0:75:39:f8:30:4b:c7:bb:64:4b:85:a3:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Aug 10 16:02:11 2025 GMT
Not After : Aug 11 16:02:11 2025 GMT
Subject: CN=3a88289ecbbdbf6eb1c99e926e5c495653268973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:fa:59:5e:82:15:90:f7:42:83:04:38:36:
3c:31:55:38:52:3e:e1:94:b7:26:b0:ca:e8:fd:09:
7a:5f:5f:52:e7:6a:a0:24:c4:ad:d6:ac:55:89:3a:
3e:27:d9:b3:55:3e:51:11:9b:e8:90:35:8b:95:75:
ac:21:c1:90:6a:6d:d2:13:1d:49:89:ef:33:43:f3:
c2:00:95:45:5d:ec:13:8e:05:17:aa:90:fa:b0:d3:
1a:1e:62:cc:25:b3:c3:81:cf:95:82:2e:77:4e:b9:
57:76:ae:e5:dc:72:32:f4:f0:d2:6f:b7:36:d0:7d:
e6:67:9b:54:4d:ae:8c:87:34:ae:57:90:1f:43:1a:
c8:9e:cc:81:fc:0e:b4:fc:82:dc:c6:7d:f5:a2:59:
e0:b6:38:09:f3:69:02:9c:8d:07:4f:28:f8:df:67:
28:5e:a8:6a:e5:5d:f3:81:4f:96:02:c1:52:d8:c1:
94:75:6c:ef:e6:c4:19:be:21:4a:71:49:26:45:1e:
47:9f:13:7d:64:84:6c:08:56:29:6b:13:79:23:62:
08:93:07:fe:7c:27:96:38:96:54:7b:4d:f8:eb:09:
76:27:61:69:0b:5d:77:91:35:17:8b:46:19:bb:91:
ab:3c:c3:03:62:7e:df:11:79:70:0e:b3:66:32:4f:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:28:9E:CB:BD:BF:6E:B1:C9:9E:92:6E:5C:49:56:53:26:89:73
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:80:33:c9:da:16:da:2d:a5:25:3f:83:f6:32:dd:f2:dc:
57:fc:e3:51:0d:86:6d:75:1b:63:db:5c:27:f1:7e:49:07:5d:
61:a7:1e:d5:27:3a:be:11:6a:0d:59:5a:17:64:3f:5d:ef:b2:
44:53:bf:87:33:ac:f8:66:59:df:8d:91:4d:8a:aa:52:aa:a5:
e0:da:01:02:9e:a9:fb:4b:2c:bc:55:cf:00:d6:48:73:0f:16:
d3:22:4f:36:c3:cb:31:9e:f0:d6:d1:79:f3:6f:6d:9d:16:24:
5a:1c:07:72:5d:38:8c:e0:9c:ea:b9:02:b8:21:90:7c:c4:03:
d3:11:1a:d0:fd:c4:7f:25:3d:b6:b0:01:c1:a7:0a:2c:6c:bb:
e8:ab:65:a9:0d:45:4b:e8:d2:62:a8:d0:a4:47:b9:70:6a:0f:
80:60:72:4f:6a:8d:19:14:73:8a:21:23:6d:24:2f:b1:a5:cf:
39:92:cf:20:49:d2:19:c0:35:0a:4b:e0:45:b1:28:c0:c5:54:
4f:57:22:93:77:e4:b2:a6:26:02:79:c1:71:3a:f1:88:5a:b4:
36:b0:73:e3:61:59:4c:66:22:c1:c3:1f:df:4e:a8:31:b6:88:
7e:4a:7f:2c:a4:17:9e:6c:d8:1f:ee:fb:10:21:84:d6:c7:0b:
34:fa:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:34 2025 by rpki-client