Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: Y+upcFJasBxEeEhd9RmbWKmHlV24hkq564jMhR3Vsws=
Subject key identifier: E0:AB:1E:64:51:50:FF:A7:8B:43:24:36:5D:5C:47:15:B8:E2:FD:1C
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0197B7EAA42BB59F0167D8F6BB5397634093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0A86
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: HCpmrpr3CA2s02Ij9PdE2Lyv3ov8dzr2S9wWS5PtOIA=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a4:2b:b5:9f:01:67:d8:f6:bb:53:97:63:40:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=e0ab1e645150ffa78b4324365d5c4715b8e2fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:52:da:b1:ab:97:0f:f7:3c:28:2c:27:f1:
b7:fa:e4:7c:07:bb:3d:bb:12:f7:bf:b3:12:85:7f:
40:fd:48:42:02:0f:94:52:d7:1a:f8:a0:7c:57:76:
0f:4c:36:a0:76:ad:de:e5:e1:5c:1a:26:b6:54:ae:
7a:84:71:29:f0:1f:e2:43:39:23:99:82:7c:e0:5c:
20:5d:72:2f:a0:0b:51:92:84:25:4d:98:09:15:f0:
cf:e7:10:c3:99:ab:d0:3b:40:d2:23:d0:b3:57:2d:
38:2e:e2:e3:f3:f8:19:53:c5:5b:67:67:10:ea:db:
e7:4c:ad:ae:eb:b7:35:c3:a6:86:4f:9a:af:39:d0:
e3:7b:31:d2:56:16:ae:5c:59:ac:ea:00:e5:66:09:
09:02:aa:c5:d9:a8:d9:2a:3a:be:62:2b:b9:aa:ce:
3c:51:78:69:16:f5:2f:48:ba:63:6c:53:e5:6b:a3:
4a:de:35:f0:eb:fd:ac:4c:99:a3:00:f3:91:7a:c6:
7a:75:ac:bc:ae:16:3e:3f:99:05:cf:ae:c0:03:2c:
e8:8b:fe:17:e5:cc:15:b4:18:e9:a6:e3:72:31:15:
55:5b:83:c5:61:4f:04:f9:89:75:65:eb:58:5c:97:
73:39:cf:13:b0:d9:2f:56:e0:aa:77:4e:6b:03:7a:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:1E:64:51:50:FF:A7:8B:43:24:36:5D:5C:47:15:B8:E2:FD:1C
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dd:9f:0a:47:c1:98:41:5c:6f:16:eb:c9:a7:22:58:10:8b:
ea:20:6b:ce:98:99:70:30:95:dd:a5:95:3c:bc:0b:f3:bb:4d:
d4:c3:e4:0a:14:79:31:f0:30:0a:d4:24:5c:4e:c4:28:61:10:
a0:af:3f:3a:73:9f:52:e1:1d:e2:d7:bc:aa:6e:46:98:98:0e:
70:35:e3:e5:81:2d:d4:97:86:64:92:85:49:89:b6:3c:a6:3d:
23:df:d6:3b:33:2a:75:14:6d:36:ac:5c:72:7c:98:50:f9:4f:
d3:4e:bb:d8:a6:46:a7:28:00:53:c3:61:f2:23:eb:cf:27:f1:
16:c5:5b:2f:72:27:97:fc:5a:a9:0c:86:06:9b:59:a4:7a:be:
9d:f8:d7:35:fd:67:d7:56:5a:69:cc:8d:5f:32:0f:fd:a3:fa:
29:b7:3e:64:00:a5:84:ba:3c:3c:87:6c:32:d9:56:c2:62:40:
c8:e8:22:da:56:0d:5d:f8:4d:23:f8:39:a7:43:67:ca:12:20:
5a:83:e4:2d:9f:57:30:72:96:10:fb:7e:ab:2b:c4:8d:da:d5:
b1:83:cd:94:69:73:39:fc:81:46:95:ce:66:4f:2f:a9:9b:4d:
b3:a9:8e:3f:ac:63:cf:c3:8c:c1:6a:5e:6e:fd:9a:2f:bf:93:
53:db:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:36 2025 by rpki-client