Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: Dgsvzsa34wbQBicFbhPJGzczaM7muMvjV0ShIbtYCFw=
Subject key identifier: 9F:E6:03:40:80:30:87:0D:42:D1:09:76:CF:B4:6D:AB:A4:43:C7:B4
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 0197B88EA25F8D4471022EF66D963C6C1138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0F85
Signing time: Sat 28 Jun 2025 22:00:44 +0000
Manifest this update: Sat 28 Jun 2025 22:00:44 +0000
Manifest next update: Sun 29 Jun 2025 22:00:44 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: wgTK9rnZExLjM37Vw1qtGjjwI1Vezr3vbG7g1lUjjF4=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:a2:5f:8d:44:71:02:2e:f6:6d:96:3c:6c:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jun 28 22:00:44 2025 GMT
Not After : Jun 29 22:00:44 2025 GMT
Subject: CN=9fe603408030870d42d10976cfb46daba443c7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:0e:b0:29:c5:14:ed:a9:3b:d8:91:f3:46:
74:e7:aa:06:e1:f2:df:49:4c:c3:69:f3:05:2c:64:
fa:70:86:f0:e3:08:fd:ac:38:73:93:8e:80:66:bc:
57:3a:31:ee:6b:46:36:12:41:68:e0:17:22:10:48:
2a:7d:d7:4d:c1:cb:f9:85:65:91:ad:b3:b4:3f:21:
fe:22:87:16:c3:89:bf:ba:d7:26:9c:88:34:d9:3a:
12:74:9e:ee:52:a5:35:15:bb:9b:76:2a:47:4d:8b:
eb:c3:e3:45:b5:2e:50:62:0e:5c:51:33:cb:33:f9:
ca:40:b8:78:65:f1:b2:74:97:15:e3:73:ca:e2:39:
5e:86:4e:20:06:81:b8:b1:5f:32:55:0f:42:0b:52:
21:ae:69:0a:81:4f:c5:61:68:8e:cd:c1:55:90:94:
8f:59:c8:b7:7f:56:64:12:9c:92:28:ba:e2:c6:66:
78:27:13:c7:21:b3:70:2a:e7:c1:25:13:04:5f:14:
33:34:71:cd:f2:15:f0:1e:5d:bc:1f:6e:7b:b9:58:
34:a2:d5:02:f3:d2:8d:7e:5d:f4:39:26:72:e3:6c:
ba:20:ed:9a:60:d0:fc:ae:b8:e9:5b:f3:ab:06:5c:
b0:c9:21:cd:1d:86:13:0d:3f:1d:9d:3a:7b:b9:8f:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:03:40:80:30:87:0D:42:D1:09:76:CF:B4:6D:AB:A4:43:C7:B4
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b7:9f:29:9d:40:d7:ab:5a:0d:ae:28:bd:93:6c:4b:03:f7:
5a:df:7c:59:90:cc:d0:30:74:90:8f:c7:54:ed:32:cb:39:78:
83:5a:f5:bc:1a:ef:b5:07:ca:ff:e4:2f:e6:10:3d:5a:1c:0e:
58:02:08:38:c1:43:f7:1d:4c:0d:3d:7d:60:b2:1e:8a:df:e1:
cf:ab:c7:bc:19:cc:dd:06:f5:f9:35:cb:96:ec:93:65:18:db:
6a:38:fb:0c:49:2c:40:ca:41:88:42:4b:6e:62:b5:93:ae:f9:
26:c3:60:80:64:34:8a:6c:12:7d:e3:46:c7:92:05:71:fb:73:
6e:b9:c3:68:a7:d4:51:df:b0:61:9b:48:93:f6:53:0a:c6:f5:
7b:61:7f:dc:96:06:77:b8:f0:a7:c6:62:b5:db:eb:07:48:3a:
96:0f:c9:09:9c:14:f8:b8:d2:79:26:e0:2f:b2:8e:37:6f:d3:
c9:e1:f9:23:ec:c8:9d:bd:03:6f:f1:03:20:ab:5b:ea:14:e3:
e8:55:af:5b:35:91:18:86:e3:bd:c0:29:b6:ad:38:c2:b8:90:
0c:d2:0c:1a:07:c9:4c:23:a0:14:f7:4a:97:4d:c9:fb:7f:fe:
11:ed:67:f5:2b:20:9e:89:d6:41:24:c1:fd:63:dc:6a:82:87:
49:33:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:11 2025 by rpki-client