Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: 60gzJGoFm4OI80u61HK2U69bvSnwmYDuAwVKoSzHd2A=
Subject key identifier: 15:40:C1:86:40:C1:B3:6D:23:F2:25:10:98:67:F5:7E:97:80:C5:AB
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01984C2FCA328A3BF88566F2EDA9C5D61C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 13BE
Signing time: Sun 27 Jul 2025 14:00:56 +0000
Manifest this update: Sun 27 Jul 2025 14:00:56 +0000
Manifest next update: Mon 28 Jul 2025 14:00:56 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: JRl+eVP4/I/P66q/uI3xDCnTzsRHrT5Tyt7criZsZ9c=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:ca:32:8a:3b:f8:85:66:f2:ed:a9:c5:d6:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jul 27 14:00:56 2025 GMT
Not After : Jul 28 14:00:56 2025 GMT
Subject: CN=1540c18640c1b36d23f225109867f57e9780c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:59:2f:2f:d8:34:f5:6b:85:a3:9c:62:86:
ec:71:5b:83:f5:a9:94:3d:66:af:77:d6:fe:f1:10:
5c:c3:e8:65:18:f2:3c:e4:fb:da:06:e3:bb:5e:30:
38:78:dd:b7:17:1b:f9:c1:99:df:91:1d:5a:7d:ae:
8e:d9:cc:86:39:bf:59:a2:ce:c0:c2:0f:87:ba:0f:
49:9d:52:96:89:b1:67:57:74:73:3c:a0:f0:85:2c:
c3:06:1b:68:47:3a:94:ff:2c:a2:b8:98:ff:d5:ee:
ea:93:54:70:ea:38:db:cc:8b:7c:06:b1:43:56:08:
e9:25:f9:6d:a0:c2:70:05:53:8e:88:ef:e2:34:ef:
f0:a7:f9:b4:50:03:12:69:f6:d3:1e:68:6f:7a:50:
fa:0f:d1:28:4a:c9:3d:5a:c2:05:b6:d3:16:fe:de:
ef:71:a5:c4:37:ee:dc:a9:76:2d:69:16:24:55:8a:
73:3d:c2:90:45:de:e7:0a:75:86:eb:97:db:35:c0:
2c:13:4f:00:81:55:4f:61:6f:f8:24:fd:a9:21:50:
c3:05:81:68:99:4f:43:32:92:8f:cf:4a:31:a0:33:
61:86:05:73:0e:15:88:67:a0:2c:2b:21:51:d7:79:
32:dd:59:83:38:dc:41:03:50:be:06:03:a1:82:5e:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:C1:86:40:C1:B3:6D:23:F2:25:10:98:67:F5:7E:97:80:C5:AB
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:58:30:58:95:ee:82:1d:59:ee:75:67:1d:ff:f5:00:dc:d1:
df:81:7f:a9:7b:7a:91:90:d5:a7:2f:2b:97:8f:b4:9d:93:6d:
70:2d:d2:a9:2d:08:f7:97:72:1d:9f:75:6a:13:02:f0:66:fe:
7c:78:d3:63:60:b3:38:b4:be:e4:96:30:83:b6:e2:08:8d:99:
32:b4:6d:01:98:ef:cf:f2:21:df:23:eb:9c:1b:cf:0f:f7:65:
07:c4:5a:88:96:3f:d8:7b:ea:8f:bf:9c:c6:c4:8f:33:28:26:
65:3e:df:30:06:05:45:c7:8e:fe:c3:33:b9:f5:89:3b:a7:9d:
38:d3:d3:2a:e2:ae:02:21:d6:8c:6d:1d:bb:d6:e8:b3:29:6e:
cf:94:ae:8a:9e:7b:be:6a:64:19:3a:67:1d:e8:04:8d:3b:4b:
25:31:42:6d:83:0a:37:34:19:d6:d7:5e:0d:f8:a1:37:c3:05:
54:4d:07:c6:d6:5d:3a:e9:2d:d5:f7:bd:4f:85:ff:bd:a1:41:
24:f3:0a:ea:bc:fd:ab:a6:02:1a:aa:d6:78:37:f8:2a:02:dc:
00:b2:84:fd:6c:bf:79:43:94:5c:4e:3c:db:fd:73:3b:cf:0a:
2f:8b:48:89:74:50:86:29:43:4f:61:fc:52:d6:81:05:53:73:
8b:bb:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:43:19 2025 by rpki-client