Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: kdeCWD++T601jKzIV9w/1Yvo1Zx4/NxZ09F4cZIXwZQ=
Subject key identifier: 20:67:81:37:FB:89:E2:07:43:D3:51:33:1A:57:AE:38:A7:49:59:06
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 01984B54D1D5065F1B3D0DF2F5377A23C665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0F32
Signing time: Sun 27 Jul 2025 10:01:46 +0000
Manifest this update: Sun 27 Jul 2025 10:01:46 +0000
Manifest next update: Mon 28 Jul 2025 10:01:46 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: 8xZK7MDNLspSwJlhOqQxmq7M160Pw0uZRyVIgWHk7h4=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d1:d5:06:5f:1b:3d:0d:f2:f5:37:7a:23:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Jul 27 10:01:46 2025 GMT
Not After : Jul 28 10:01:46 2025 GMT
Subject: CN=20678137fb89e20743d351331a57ae38a7495906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:1a:70:18:43:17:25:84:81:23:fb:3e:86:
91:f8:fe:10:3d:9a:32:2b:03:fb:52:61:8d:7d:28:
df:94:04:c5:42:49:5e:be:96:89:35:72:4b:5b:d6:
6a:45:dd:b3:9b:b3:5f:d0:c8:2e:76:94:86:e4:99:
f0:11:87:c5:3d:b6:75:59:bb:6e:b3:39:74:01:5f:
45:8c:7d:4c:c9:16:b9:23:78:14:ad:39:a7:10:f4:
96:36:5b:21:86:46:31:58:65:49:95:e4:1d:b1:53:
2a:f5:61:06:22:f4:2e:c7:17:ff:08:4b:8f:6a:a1:
d1:19:e0:71:a3:84:b3:88:16:b1:29:2f:63:06:d8:
1f:dc:fe:8f:cc:39:75:1a:1b:d7:9e:81:98:dc:66:
5b:99:94:04:74:df:76:33:45:4c:4d:5e:8c:39:9c:
7f:1d:37:e9:c0:26:20:20:64:8f:36:c5:83:d2:92:
1d:56:c8:c8:fe:2b:1b:1a:34:e0:ee:4e:d1:01:4e:
ba:34:95:d2:72:81:44:eb:79:85:8e:1b:7c:bf:02:
62:0c:41:c9:df:da:f1:12:26:ca:44:8d:eb:70:67:
19:bd:f2:35:b4:7f:f0:d4:87:10:1d:49:bd:15:ef:
bb:5f:eb:4b:43:c0:9e:cd:4a:31:3f:7d:ed:01:f7:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:81:37:FB:89:E2:07:43:D3:51:33:1A:57:AE:38:A7:49:59:06
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2b:6b:53:40:79:1f:84:02:71:80:b4:82:14:e6:bd:22:16:
35:1b:11:b3:82:42:a8:c3:2f:35:7b:eb:7c:d1:23:e6:75:a2:
90:43:99:f4:79:a2:c1:01:fd:4e:40:0a:a7:1c:c4:1e:9a:2e:
52:de:2a:b5:60:b7:8b:36:5e:e2:2c:54:0d:52:ec:17:57:b5:
8d:3e:fe:26:13:1c:a8:04:25:6f:59:da:09:f4:4d:e4:08:4a:
a8:4d:ed:87:35:f4:ec:1f:75:f2:7b:04:cc:dd:fc:1b:2d:f1:
62:61:2f:92:ec:de:33:8f:9c:54:d7:0a:af:34:7d:d6:d9:4f:
db:62:36:aa:e4:57:de:df:67:14:5b:1a:78:13:45:95:ac:44:
18:67:f5:97:54:ca:0f:79:27:39:36:90:8e:df:ce:5d:02:25:
ba:3d:20:a6:7e:5a:59:c5:30:7b:16:89:61:89:58:8f:4e:e0:
cd:62:6d:1f:0a:f5:23:e0:6f:10:e0:6c:48:49:8e:e5:f4:7e:
ed:e4:d9:1e:e0:1d:3e:d1:d1:fd:c4:5d:da:e8:04:2b:9d:f5:
63:6d:7d:f5:ed:45:53:6a:36:7f:ee:59:7e:23:88:d8:95:19:
6d:5a:86:a5:2e:65:b3:48:bb:e7:ea:67:00:2a:43:97:4c:e3:
bc:ab:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:55 2025 by rpki-client