Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: rWWCc/ziElth1mlCVdCj9IiTgOv2TEjJyPY8qOOCdlc=
Subject key identifier: B2:F3:EA:8F:67:5E:F9:35:7E:2D:DA:10:D9:C6:29:46:FA:22:99:64
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 01992F35101049EAADE530B9AC5B4A50541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 16:00:30 +0000
Manifest this update: Tue 09 Sep 2025 16:00:30 +0000
Manifest next update: Wed 10 Sep 2025 16:00:30 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: 70Er6EDlCcYE13yJYooGPg0iDbiRIVufpwQ+p9HRuSo=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:10:10:49:ea:ad:e5:30:b9:ac:5b:4a:50:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Sep 9 16:00:30 2025 GMT
Not After : Sep 10 16:00:30 2025 GMT
Subject: CN=b2f3ea8f675ef9357e2dda10d9c62946fa229964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:6c:17:d0:6d:18:df:e6:ba:2c:72:0a:77:
1f:50:92:fd:5c:e3:2f:83:92:17:76:ca:91:70:c1:
ce:27:73:50:27:74:2f:37:04:b4:e6:95:a5:46:c8:
f5:1a:bc:b4:db:f3:cc:5e:c7:15:8e:87:c8:40:ec:
35:19:cd:48:86:1a:9a:4a:13:2c:39:67:52:c4:68:
5b:a3:e7:36:27:fd:4d:35:b6:be:79:45:73:ad:ca:
fd:c6:50:9d:ab:66:ff:40:eb:5c:4c:e4:6f:22:18:
46:2e:90:81:4d:3e:74:08:be:3e:30:cb:4b:95:5e:
75:81:ee:25:9b:0f:d9:bb:4b:98:e5:d2:f7:6d:bc:
77:66:ce:ad:6f:cb:c1:80:b8:d0:57:fc:04:49:4a:
92:a9:9a:68:97:4c:40:24:d2:2d:16:4a:f5:92:13:
45:5f:c2:35:92:d0:63:eb:e5:d2:7c:95:2c:3d:52:
de:75:5d:cd:79:41:7b:a8:56:64:f4:38:ab:82:fb:
05:4a:2b:cb:b7:54:fc:d6:93:2e:8e:68:c2:3e:9a:
ce:74:68:79:ab:8a:06:47:61:86:0c:b5:c2:f9:fb:
99:fd:6f:6a:87:f1:55:50:ca:1d:6b:91:fe:9b:af:
13:55:a5:e6:72:a9:78:31:10:e9:0e:0f:f0:fd:f5:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:EA:8F:67:5E:F9:35:7E:2D:DA:10:D9:C6:29:46:FA:22:99:64
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:d4:e6:1b:00:19:8b:2a:49:64:86:90:2e:60:83:a2:b1:
7d:38:a8:d9:9f:49:f5:c9:aa:e1:5e:86:a3:fe:3d:77:5e:dd:
b0:0f:a4:e1:43:8e:cc:6a:d5:28:86:14:a4:ee:bf:49:9e:a3:
72:b8:85:01:a7:9e:1e:da:12:0e:16:22:c9:b7:1f:a2:77:55:
16:fa:f1:e0:0a:a8:b8:0b:da:c3:19:69:61:90:55:25:3b:51:
af:52:32:56:e6:69:33:5d:45:8b:20:4e:4c:1f:17:44:33:01:
41:e6:7b:a7:f6:0a:55:a7:1a:65:d9:30:a2:54:5c:0e:3c:df:
b5:05:54:51:0d:42:72:ca:39:3b:07:50:d1:2a:c1:0f:34:4b:
d9:fa:6d:0e:6b:79:34:f7:fe:a4:a1:ab:9f:a9:bb:4d:40:07:
f0:4a:82:8e:54:2b:54:4c:8e:9b:75:4b:8a:ed:4e:81:c3:bc:
9f:f7:4a:74:91:06:37:69:50:04:dc:48:69:24:a4:6a:f0:a2:
3a:e7:84:e2:f7:9d:d9:9f:38:d8:8b:77:16:29:2e:34:bc:94:
c0:7a:ba:5f:92:eb:13:03:26:df:8a:72:83:01:fd:a2:73:ec:
15:92:c9:04:5d:2e:c3:71:44:95:7d:1a:c2:7e:a9:6a:b1:43:
dc:73:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:13:36 2025 by rpki-client