Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: n2/zbTi1/OSDp0hnIC5vUVwdA9qgDw5aI0V9m2Ak740=
Subject key identifier: 3F:8A:1F:42:F1:99:08:16:7F:03:62:73:DA:B0:27:A7:B4:DD:FE:ED
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 019A71B7CA6A8E997BCB48F51B17ED3BF1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 1343
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: /efV6p97cqmiQrCxqJ2p/fZp0Y1bhuurgH7+XrHTXoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ca:6a:8e:99:7b:cb:48:f5:1b:17:ed:3b:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=3f8a1f42f19908167f036273dab027a7b4ddfeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:b8:4b:6d:c6:2d:28:31:7a:1a:b5:3b:91:
96:a6:5f:45:fb:21:b5:c7:7e:4e:8e:99:a8:c5:a0:
f8:69:42:a1:de:93:d3:e9:2b:81:f1:b7:12:19:bf:
6a:31:e5:ca:80:a6:9e:4c:f8:32:b5:c7:49:c1:07:
82:2a:6f:63:90:62:ae:81:f6:6b:11:64:89:36:54:
31:b0:59:d9:f9:40:0b:04:dd:08:dd:13:98:cf:bb:
61:04:62:cc:a5:2d:9f:8c:97:56:d4:4e:07:9f:4c:
73:7a:1f:ea:fd:29:b6:0f:fb:a0:d1:43:29:6b:02:
dd:50:ce:da:24:ab:94:fc:53:5c:42:31:d7:3d:60:
3a:39:04:bb:26:04:4a:39:2a:b7:cf:d9:ad:bc:66:
38:ad:4f:f0:22:59:e6:13:82:34:a6:0b:59:da:4d:
b9:6b:f9:20:48:9c:bf:23:60:c3:79:e7:02:c4:14:
02:7b:6f:d5:2c:f3:09:a6:fc:2e:53:14:69:78:22:
e1:b8:94:89:8b:75:e8:29:63:83:d3:be:c7:67:b5:
ec:29:0b:d2:ec:e5:e5:a2:c4:b0:a8:64:87:d4:06:
0b:5c:95:e7:b0:c9:c4:56:ed:26:3e:e9:ce:93:2c:
b7:bd:ea:07:33:71:be:71:0f:1b:38:fb:7c:56:39:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:1F:42:F1:99:08:16:7F:03:62:73:DA:B0:27:A7:B4:DD:FE:ED
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:db:56:b2:f1:d4:5f:7e:9c:9a:9d:28:0c:60:b9:b0:c1:cb:
08:a8:11:e2:61:3f:44:4a:f4:09:ef:f2:b6:61:17:22:ca:4c:
8a:5a:59:47:12:dd:a4:bb:d7:f2:c6:01:26:98:91:1b:3c:4e:
4e:4e:ba:c6:ae:52:10:81:51:b4:41:0a:75:b2:48:67:ca:7b:
81:b9:24:58:52:6d:b8:80:33:9e:dc:04:4b:89:bf:28:1d:7d:
7a:42:bd:76:24:4e:f4:0c:b5:36:da:0d:6c:df:aa:7e:52:34:
f3:62:8e:81:b1:30:47:b7:5a:82:6f:5a:31:f2:a6:83:ca:c8:
39:55:bb:4b:6b:f4:39:8c:d8:7f:11:18:b4:b7:58:f8:9f:28:
50:d1:a1:ce:15:bc:93:c7:5d:d6:ce:c6:63:64:2d:13:ac:28:
04:7f:c0:a3:3e:a2:3a:9b:02:2c:36:f1:84:1c:45:03:63:93:
ff:65:28:6f:33:02:f6:49:46:d5:35:4e:51:ef:96:dc:95:8d:
b1:f3:d4:61:55:cc:c7:4d:10:92:fc:07:5d:e4:c9:6b:60:09:
b8:e1:da:09:7a:22:cc:a8:7f:9f:72:77:b3:9f:be:d0:16:39:
af:87:ec:55:bf:ba:f6:c7:ac:8b:10:f3:ee:ca:5c:47:c4:3e:
12:38:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client