Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: ELEIklg7a+807vlFFGl3kaKNsXaSTjp99ArUfUbbcMA=
Subject key identifier: 49:F9:FF:A7:A5:55:6F:B6:08:5F:1F:96:CA:54:02:91:74:5D:D3:25
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 01984399FAF8A2B7215E6F60527E93FF4637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 22:00:21 +0000
Manifest this update: Fri 25 Jul 2025 22:00:21 +0000
Manifest next update: Sat 26 Jul 2025 22:00:21 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: WIjQBxH1tVK4JKjEUo2lmLAzaS69Zcrt45rBXMpQloI=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:fa:f8:a2:b7:21:5e:6f:60:52:7e:93:ff:46:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jul 25 22:00:21 2025 GMT
Not After : Jul 26 22:00:21 2025 GMT
Subject: CN=49f9ffa7a5556fb6085f1f96ca540291745dd325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:4f:9e:97:d9:89:f6:83:d0:65:bd:15:39:
ae:a7:5d:3e:83:0d:f9:ea:da:b0:36:36:e2:da:bb:
2b:64:b0:d4:48:01:3f:78:3e:b5:84:68:9e:0e:e6:
69:b8:fb:81:3a:54:9a:27:2f:f4:5d:5b:6b:3b:ed:
17:5b:63:fa:8b:3f:7c:16:83:2f:4c:26:c2:a6:57:
a7:24:2b:55:9a:52:62:30:8b:e4:2a:ea:ce:1a:cf:
6e:23:15:f2:b0:0c:ca:75:5f:95:89:c4:c9:4e:81:
d2:ed:87:0a:7a:fa:68:08:a4:5a:df:7c:a7:16:83:
02:cb:58:bf:5d:68:5f:db:b5:4f:d0:3b:d0:dd:51:
1f:70:fb:4d:f9:d9:9e:18:2d:b6:ea:44:88:d0:fb:
7d:cf:61:06:d5:4e:9a:44:5f:59:fa:3e:e4:6b:08:
c1:2a:b5:bd:c4:b6:ee:1b:1d:66:b0:af:5b:41:20:
48:50:83:fa:f4:d1:a5:5d:5e:52:06:3c:15:49:52:
3e:5f:e5:68:d7:80:f1:f4:27:c0:2e:aa:15:43:d2:
a5:01:54:9b:d0:81:cc:16:07:85:c1:61:7e:da:60:
bb:02:71:1c:66:8e:9c:3b:e2:13:75:5f:6b:ce:73:
14:b8:f6:77:d9:74:00:36:c2:ee:73:bc:55:c0:bb:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:FF:A7:A5:55:6F:B6:08:5F:1F:96:CA:54:02:91:74:5D:D3:25
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:1a:0f:a4:73:24:aa:ea:02:42:86:33:18:e6:1f:bf:63:
26:77:7e:73:2e:f9:be:ad:69:de:08:ee:f9:a5:5f:7f:e0:62:
69:ca:f1:39:d5:19:0e:14:e6:00:df:8b:86:c9:6b:5f:7c:ad:
df:ad:b2:42:a4:cd:bc:53:c1:72:35:16:98:cc:0f:63:96:21:
1f:52:b9:6a:6a:c9:46:7b:97:52:2e:e5:fb:37:1a:49:af:b2:
d2:25:99:d4:e6:38:98:32:d8:70:73:96:4a:49:e8:25:68:8f:
98:54:0c:6e:60:87:c5:13:33:39:dc:09:1c:1d:14:b6:15:03:
0e:9d:ab:0a:cf:6c:5b:fd:4d:3e:c5:d0:1f:e7:de:c7:65:58:
79:1a:a9:13:75:cb:19:11:2a:40:71:13:91:af:43:5a:6f:1f:
39:41:29:f4:57:2f:aa:90:0d:58:2f:e3:42:c1:07:61:1e:14:
b0:ca:e0:a7:fb:95:c6:ec:fe:fb:8b:a5:1d:3b:e3:75:c7:2c:
0f:2f:da:df:88:93:fe:98:5b:a6:f7:cf:29:44:84:70:81:2a:
f0:87:f1:a3:77:9e:28:ca:d9:6d:31:ad:c5:7b:03:78:b6:c9:
07:03:a8:22:a8:b5:53:91:fb:4a:3b:ac:6f:cb:7b:96:33:d0:
3e:b0:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:46 2025 by rpki-client