Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: T1Za4VpMyJbrIUY5UMyc4TE9BiYy6+lzJPYxs+1NI1w=
Subject key identifier: B2:1C:B2:3F:BE:81:DE:6E:EE:9A:2C:BE:A2:35:DE:C9:11:2B:A1:14
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019A10158399548533CB2275383C771EBF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 14A8
Signing time: Thu 23 Oct 2025 08:00:36 +0000
Manifest this update: Thu 23 Oct 2025 08:00:36 +0000
Manifest next update: Fri 24 Oct 2025 08:00:36 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: hlyynSz26VxtgnbuGjeeOVQSWV/VjP+nyMuxD/E/Qv8=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:15:83:99:54:85:33:cb:22:75:38:3c:77:1e:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Oct 23 08:00:36 2025 GMT
Not After : Oct 24 08:00:36 2025 GMT
Subject: CN=b21cb23fbe81de6eee9a2cbea235dec9112ba114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:80:df:3b:e8:1e:8e:d4:ea:be:75:41:5e:
60:3d:91:48:a2:8a:8f:6e:c7:f4:64:79:0e:84:e4:
f0:c1:83:c5:b2:cd:26:b1:8f:0c:d2:72:2e:70:fb:
aa:ea:8b:ad:31:1c:db:49:88:a8:98:53:8c:45:a0:
63:92:9d:c8:74:88:fd:3f:8e:cc:66:a8:57:75:9b:
1a:7b:d8:61:87:13:2c:12:53:97:d1:ff:27:4b:2e:
a6:84:fd:40:ad:ce:71:66:e7:c7:18:02:ce:11:6f:
01:13:31:4f:00:71:d5:94:4f:65:5d:6a:24:6a:d6:
72:4f:e8:5d:02:8d:2d:1c:b1:96:72:fe:16:ed:56:
44:71:bd:93:e2:9a:53:a4:bc:41:9a:06:f6:64:0d:
57:aa:e3:1f:a8:c5:03:2d:fa:91:1e:c8:db:08:72:
9d:6c:7b:51:39:98:d3:a3:63:5b:63:9d:1b:1e:27:
fc:51:b6:02:e6:01:6b:00:16:07:09:ec:67:af:ca:
71:7a:da:d4:c1:9a:17:01:c3:5d:f7:50:87:94:a7:
48:81:82:1a:70:99:cd:b5:6a:41:1e:36:1b:b5:22:
e0:eb:8e:5c:36:a4:5e:e4:a6:bb:2a:06:3b:5a:08:
ca:52:ee:b6:ea:46:5f:ec:62:1b:74:9f:99:fd:be:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:B2:3F:BE:81:DE:6E:EE:9A:2C:BE:A2:35:DE:C9:11:2B:A1:14
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bd:62:2f:a8:6c:19:d7:90:8b:16:fc:01:4c:c9:3f:4a:99:
92:e8:02:29:b2:6d:1e:e7:0c:ce:4d:5e:c5:5a:66:07:0a:7c:
67:ff:de:29:c7:81:64:33:b2:a3:6e:dd:d9:16:3a:5d:35:05:
3a:92:39:19:2b:d4:54:49:2a:02:50:f7:a4:31:c9:77:7c:10:
dc:d5:ce:85:c6:2e:97:75:45:eb:c5:23:59:05:05:f7:ba:f4:
9d:51:5b:75:7a:fd:1f:ad:c7:5e:a3:8e:d7:c4:15:a7:4f:ec:
e3:fd:8d:df:a8:e5:ea:3c:4c:82:68:ac:f9:7b:08:98:8b:40:
72:e1:fb:1d:5c:64:4b:94:37:f8:d8:d3:40:fd:b7:27:6c:23:
3b:31:87:d0:3e:4b:c0:b8:6a:5e:4e:7a:e6:34:77:58:b0:32:
3f:1b:87:c2:e4:b6:5e:1e:10:d6:a8:a7:c0:00:14:83:72:23:
19:6f:c0:b7:b4:0e:5d:ce:7c:4d:4c:d4:0d:2f:b0:56:51:83:
a7:99:a3:1b:f2:24:42:56:52:93:64:63:f0:5f:80:b4:e9:58:
d0:c1:a0:07:d9:6c:68:9d:d0:d0:b3:f5:9f:14:f9:ee:34:0d:
5f:b7:c4:14:3b:d3:8e:35:ea:e0:e8:33:5a:a9:03:ff:1a:c4:
e4:09:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:37:49 2025 by rpki-client