Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
File: IEBQzFlTby2UB2koI4kMzdqFRQg.mft (raw, json)
Hash identifier: 4Uz8LXS4n1tqdeY7nqRp6iC5ftAAcY3GSp3z6pYj/3E=
Subject key identifier: D1:81:86:3E:BC:3B:76:6C:DF:5E:E7:36:25:84:40:1E:85:59:80:6A
Authority key identifier: 20:40:50:CC:59:53:6F:2D:94:07:69:28:23:89:0C:CD:DA:85:45:08
Certificate issuer: /CN=204050cc59536f2d9407692823890ccdda854508
Certificate serial: 019A71B887FF9633F49EC6A17E3662163221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEBQzFlTby2UB2koI4kMzdqFRQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
Manifest number: 052E
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: IEBQzFlTby2UB2koI4kMzdqFRQg.crl (hash: hvKmv1nEZTTqw1Z3TpiY4uzd/Izdap8H+qpMo+AZWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEBQzFlTby2UB2koI4kMzdqFRQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:87:ff:96:33:f4:9e:c6:a1:7e:36:62:16:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204050cc59536f2d9407692823890ccdda854508
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=d181863ebc3b766cdf5ee7362584401e8559806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:db:f9:97:d6:08:0a:dd:c8:af:2d:b4:14:
e7:46:6e:6a:6f:6f:e8:75:df:d6:7e:6e:86:e3:fa:
1b:ff:bd:58:bc:d3:7f:75:41:6d:34:73:7e:bd:d5:
db:4a:db:a6:a7:74:9b:f0:fc:b0:5a:d0:3d:ff:13:
2d:ef:f3:92:91:63:12:a9:65:4a:88:ea:7a:13:90:
cb:21:bb:6c:ee:2e:45:ea:6b:7c:d1:87:96:72:70:
65:21:43:0d:93:18:29:a3:93:9f:31:c8:14:f3:ab:
e1:08:de:52:64:de:4c:5a:12:13:2f:3e:44:10:87:
22:04:8b:40:66:a4:48:f4:30:64:5f:2c:58:ce:2b:
8b:19:e2:be:fb:fb:0a:0b:a1:80:70:08:f3:e7:bf:
38:2f:98:1d:49:8f:1c:fd:ae:79:a4:1c:16:de:93:
1b:d7:91:fb:16:01:3c:80:58:6b:08:f9:e3:51:29:
19:22:59:72:54:45:1e:e6:4d:a9:8e:50:c2:9c:f9:
84:13:d7:fe:b9:bf:06:65:ed:63:6b:8f:a4:8f:ef:
7b:40:5e:bd:3c:20:65:ef:ab:18:5b:10:45:ee:d0:
20:28:2b:03:de:1c:d0:e1:81:91:68:b8:52:05:af:
89:1b:dd:9f:a6:eb:d1:95:5a:2c:40:c9:f8:7e:a6:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:86:3E:BC:3B:76:6C:DF:5E:E7:36:25:84:40:1E:85:59:80:6A
X509v3 Authority Key Identifier:
keyid:20:40:50:CC:59:53:6F:2D:94:07:69:28:23:89:0C:CD:DA:85:45:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEBQzFlTby2UB2koI4kMzdqFRQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5c:a3:41:cb:2f:54:fe:7e:70:96:bc:07:9a:6a:a6:5e:b4:
b5:d3:91:c0:2b:cf:79:34:66:91:69:fc:7c:87:6a:af:99:f1:
eb:e5:42:5d:e3:3f:cb:a1:4a:90:90:ff:bf:f9:38:b1:9b:fa:
9c:86:a0:f8:f4:b6:4d:d4:bb:d2:fd:47:25:27:17:dc:a5:b2:
c7:4e:92:92:0c:c9:3f:44:b2:65:1f:06:f0:e8:3a:56:75:d4:
a5:9f:05:bb:c7:26:47:23:95:ff:59:07:38:96:dd:0a:f7:9d:
cb:c8:97:b4:3b:dc:69:03:69:e9:c3:81:e1:84:83:98:df:eb:
d4:97:92:d1:69:80:47:2d:1c:1c:31:35:2c:da:96:b0:0a:55:
3e:76:e6:ee:32:ff:85:af:ce:a8:2a:bf:15:e9:b2:8e:4b:15:
66:de:5d:8e:f3:28:61:ff:6b:10:41:15:39:00:1b:8f:6a:5a:
59:34:18:e3:61:2b:de:4b:57:74:8b:63:02:10:0b:8a:7e:ae:
34:46:28:c7:d7:76:42:ba:64:58:4c:2a:e6:81:ad:ce:0e:e2:
57:7e:21:00:bc:e0:07:ae:d5:01:05:ab:d3:e7:89:94:b7:0a:
32:e7:8d:c5:88:dc:95:e0:10:6a:97:3f:3e:9f:bd:55:51:21:
a7:5b:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:57 2025 by rpki-client