Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: vksmDkaryQpzkxB06NMDefSjc2u5au+m+KTvBTi8ZdQ=
Subject key identifier: A9:95:0C:EB:FE:B7:38:B1:CD:33:D7:A7:21:C6:2C:09:84:1F:02:02
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 0198D472E3C48975C9020410333708DAF5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 1018
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: kzeVfdVZlDzxYIMGml6fCReZ0Vd6fCtP/dGUMCO7bVg=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e3:c4:89:75:c9:02:04:10:33:37:08:da:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=a9950cebfeb738b1cd33d7a721c62c09841f0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:8c:04:83:73:79:26:ff:f2:63:30:f6:6a:
a5:58:82:8c:0c:ff:d9:d6:83:46:2a:05:95:cf:4e:
90:69:a6:8f:1a:43:7a:f1:9c:62:85:01:93:23:6e:
64:9e:04:e9:a7:1f:4a:ec:8b:23:56:9b:45:30:e6:
cc:de:ff:b4:8b:5d:5d:08:22:cb:68:39:e6:c9:37:
a0:4c:2c:a4:66:59:10:92:bb:6d:33:50:c3:c2:e9:
cb:b6:50:6f:31:8a:eb:68:e5:cd:ce:81:a2:bc:30:
f5:ea:9b:e3:c1:1f:c7:4e:94:63:54:16:a4:55:63:
22:19:18:ab:8b:08:62:2e:6f:ff:f9:ee:d9:3e:7e:
23:3c:38:5a:1e:62:57:dd:fd:62:11:d0:e6:c5:79:
b4:5d:f2:75:64:08:ce:47:8e:1f:67:03:30:9c:91:
93:83:58:a4:14:1b:ff:40:9f:eb:1c:f4:3e:8f:f2:
ba:ef:f6:26:b7:d2:dc:0e:7f:7d:46:76:c8:dd:9c:
5d:70:91:67:f7:83:9c:74:62:74:94:ad:fc:db:2a:
35:45:06:e4:ec:2d:52:34:83:65:75:f4:f1:82:7d:
29:2f:24:a6:2d:63:30:01:c9:04:0b:0f:af:a0:78:
e0:d2:40:75:53:61:94:2f:30:64:fb:ca:48:a4:4a:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:0C:EB:FE:B7:38:B1:CD:33:D7:A7:21:C6:2C:09:84:1F:02:02
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6f:8f:37:b2:88:71:d6:fe:a3:ba:83:fe:ad:06:2f:52:43:
cd:a8:7a:06:66:4c:2d:b1:a4:5e:d6:e4:d1:99:5b:3b:1c:d7:
e3:ba:20:e9:d3:07:d1:fd:db:6c:27:da:23:71:0d:df:3f:b7:
82:9e:65:75:d6:56:37:eb:55:a6:ed:c8:af:62:2e:4a:54:89:
ae:56:ec:ba:64:74:bd:37:a3:3c:8d:1f:6d:6e:61:95:23:8e:
b9:be:3b:48:1c:a1:50:94:7a:e7:cc:a1:de:f3:a8:ba:42:42:
9f:ab:60:72:21:44:49:c4:21:68:3c:21:ec:41:cd:b3:f2:50:
87:98:e3:f3:d9:07:53:d1:0e:1f:2f:94:26:22:a5:06:ae:30:
39:28:6c:96:19:b5:fb:d2:c1:b4:47:47:64:4d:e4:ed:93:45:
dd:1c:d2:a2:45:7b:36:f1:03:36:ba:5a:9b:60:cb:b7:49:c9:
9f:70:5e:5e:2c:6e:77:16:db:7a:07:55:eb:61:8d:1a:f6:36:
d0:91:f3:91:5e:2f:44:46:fd:7d:b6:0b:43:70:36:23:f3:05:
f4:96:9b:42:55:11:4e:c4:20:a5:24:cf:cb:9f:de:8b:c4:f4:
9a:bb:44:ed:58:cd:aa:3f:53:a4:c0:0d:21:6d:a5:12:4c:6c:
96:8b:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:07 2025 by rpki-client