Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: tFLxtYkeHi+S7WIPJhucSsT8w9+evxFIY98D4qk7yyk=
Subject key identifier: 1B:4D:25:50:90:00:51:78:E1:87:0A:32:7E:82:59:5C:09:AD:10:88
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 0198530D50C123620487339DD9DD296891EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 122A
Signing time: Mon 28 Jul 2025 22:00:38 +0000
Manifest this update: Mon 28 Jul 2025 22:00:38 +0000
Manifest next update: Tue 29 Jul 2025 22:00:38 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: xA3jvZf0BZpvDvpuUY/xk0Z1rYvwImpGrERB0DAYv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:50:c1:23:62:04:87:33:9d:d9:dd:29:68:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Jul 28 22:00:38 2025 GMT
Not After : Jul 29 22:00:38 2025 GMT
Subject: CN=1b4d255090005178e1870a327e82595c09ad1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:80:64:30:b9:8a:2d:2f:06:1f:cb:44:b7:
26:f5:1f:53:ce:cb:d6:02:06:e7:2c:5c:75:41:dd:
9a:c4:04:05:00:e0:13:a9:16:f9:f7:c0:c0:19:01:
21:eb:74:34:85:95:5d:96:f1:43:fa:10:92:e1:46:
05:bf:78:ac:02:c4:59:71:71:ab:63:7e:11:02:6c:
2a:d2:8b:fd:d2:f0:dc:5e:81:5c:7b:7b:65:19:e1:
f7:93:19:63:c3:8c:c1:24:46:47:6c:28:87:17:bb:
fe:f9:b9:c9:80:4a:1b:2b:71:3a:aa:2f:27:30:a7:
ad:e6:e8:69:ed:38:0b:72:14:45:e8:92:f8:64:9e:
02:77:75:85:c6:ca:73:99:17:32:22:4b:12:9b:d9:
ad:dd:92:cc:75:17:a2:77:0b:e1:ae:75:91:38:4b:
63:93:d6:dc:c2:68:d3:de:45:58:1c:af:4d:c9:0c:
f8:67:2e:e9:ae:1a:0a:9b:7e:78:a7:a8:c9:af:a0:
dd:f4:96:a1:94:48:d2:50:4d:2c:be:7a:9f:0a:3d:
ca:5a:e2:57:36:9a:fb:31:4d:5b:6e:50:b9:b1:3d:
e0:64:42:d1:ac:fa:39:b3:d1:d4:fe:e7:3c:6a:01:
67:d4:a3:92:28:d1:c1:c1:af:d6:32:c7:8e:6e:b5:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:25:50:90:00:51:78:E1:87:0A:32:7E:82:59:5C:09:AD:10:88
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5b:e6:fe:27:f5:2d:8d:2d:9e:fc:4b:3f:40:3d:4e:89:8c:
12:59:4c:1a:cb:91:f9:4b:3b:1b:89:44:03:c6:76:e2:89:7c:
cd:64:41:70:0d:96:cb:2d:a4:57:cf:e5:87:39:02:f4:91:05:
ce:e7:dd:13:ee:51:25:41:1e:a0:37:53:f1:99:47:23:de:5f:
f6:c7:a4:6d:14:2b:84:cc:38:18:75:36:1f:33:fb:ca:71:1c:
7c:38:3a:b1:3b:d3:f1:c5:2c:b7:37:22:36:ab:f3:eb:ea:53:
9a:e0:eb:6d:71:10:d4:25:70:68:3e:bc:51:12:7f:1e:cf:e9:
ad:a7:b6:ba:c9:22:c9:6e:88:90:69:54:30:ef:7d:16:dc:cb:
72:bc:a8:69:d6:1f:9f:7d:da:60:6b:1c:12:70:63:42:b7:50:
af:a9:f7:a2:8d:bb:4e:db:95:df:b5:0d:3c:90:14:fa:58:fa:
38:9c:3c:c3:ff:11:59:cd:c0:be:8e:87:27:44:75:6a:68:d5:
6a:c5:0e:13:53:06:c8:f9:25:38:e8:40:70:05:37:06:36:e6:
6e:87:72:c2:9f:99:16:d7:98:de:89:f3:a4:84:27:fb:8c:68:
d7:b8:3e:a1:7d:54:85:6f:a2:ce:22:cc:6a:7b:42:66:74:d7:
a5:fb:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:43 2025 by rpki-client