Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: It7v4WFTXwwuxPM2fHY9g9eGTSB+TDRNWUtk/NsOjMw=
Subject key identifier: 78:BA:1D:FF:E4:08:93:B3:44:05:F2:53:71:BE:6D:3E:E9:15:53:65
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 0197B70E8FCD82D897CE4463AE0CE320669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 15E3
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: ic7kSQ72ESRHk1K/+WHOiiriWM2HTB9PrET6RznA0OM=)
2: N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa (hash: bj11HyE9bQVpgK8+L49310uUI7++HSDAwFbYXm4t87U=)
3: bXnDK3FrjmreLx1RNLHjlK6yokA.roa (hash: 9KnhQYqvA+XwDxuEoTB3PjhKHhHecpLOEmyBwf4FrSA=)
4: jNg6vqzUy1VgyEygCa4DvoqjfIY.roa (hash: npuJNuYtC10xnW9UN6NXfDz60ESb4bhdw7EsN6BY2Z8=)
5: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (hash: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8f:cd:82:d8:97:ce:44:63:ae:0c:e3:20:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=78ba1dffe40893b34405f25371be6d3ee9155365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:10:bf:2a:37:07:77:06:33:c3:af:69:53:
f8:7a:f3:f7:1a:95:49:4f:a2:3d:31:9f:2f:78:02:
36:46:2f:3e:31:d4:e1:d3:be:a7:1e:df:59:50:79:
bf:51:50:39:0a:ae:c4:8f:28:94:e8:ec:0a:ce:29:
2c:4c:10:52:78:5c:ca:2a:b2:3f:49:17:47:ba:2d:
55:ac:22:7b:1e:ec:8f:43:10:3d:52:d1:0a:44:02:
1d:6e:3c:04:93:e4:86:3c:b7:ed:ba:e1:6a:fb:17:
57:70:c2:90:f8:fb:3c:21:78:40:2b:b6:11:b4:ca:
4a:71:be:b2:bc:e5:07:99:5f:74:6b:51:89:5a:f0:
d3:57:3f:d9:4e:4a:3a:1a:b0:68:c6:9c:dc:c5:c9:
1d:2e:47:00:4d:2b:53:48:4f:8c:51:49:2c:af:0f:
b7:17:16:c9:1e:73:a8:2f:cb:f5:03:41:9d:4f:6c:
cf:a1:8d:6a:ec:31:db:dc:0b:91:13:b6:a4:7c:9f:
97:71:fa:c3:dd:2c:e1:9b:67:f5:f4:e4:d2:7d:cc:
0a:1e:1f:bc:26:a2:cd:06:42:a2:ee:e8:8f:cd:8b:
68:a6:e9:90:e9:42:81:b4:9e:cc:80:fa:79:0b:d5:
85:da:63:6c:4a:22:87:dd:56:fb:50:3a:45:9d:ba:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:1D:FF:E4:08:93:B3:44:05:F2:53:71:BE:6D:3E:E9:15:53:65
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:10:27:6a:76:c7:5a:b7:ca:36:4d:1c:60:1e:1c:b0:f2:c7:
24:d4:02:29:2d:43:36:b4:17:4e:33:19:63:36:f5:63:bc:09:
64:3c:c0:7b:22:33:c3:0c:64:6d:25:22:15:f3:af:ce:95:bb:
58:b4:a5:1e:92:57:37:62:61:89:db:11:ac:44:7b:88:a4:6b:
3a:41:7e:72:d4:ae:58:f8:30:53:7f:0b:ee:ff:d0:4f:9d:0e:
75:45:2c:cd:c8:4d:e0:a8:df:e8:2a:12:0c:7e:e7:df:60:cd:
9f:29:79:25:6a:a4:8d:c2:3c:71:82:2c:28:82:3b:00:a6:2d:
4c:eb:2a:2d:0c:17:0a:07:09:44:e4:a9:18:2b:3d:7f:22:2b:
ec:8b:c1:df:d6:41:88:65:2d:8e:3d:8b:9b:cb:55:3e:f5:aa:
6d:98:6f:33:7d:4e:6e:0d:39:bf:e4:62:9f:e6:9f:8c:40:03:
5c:13:65:a1:f8:47:67:1e:48:ec:16:cf:19:e7:80:6a:1b:8c:
ce:43:3c:ab:71:40:76:ca:4c:69:c1:dc:75:4c:6c:dd:10:70:
8d:cf:e0:d9:37:9c:36:89:42:9d:20:04:9b:29:11:8e:1d:54:
ac:6e:5a:71:d0:c2:5e:e7:74:1b:c0:36:b0:cc:49:c4:8a:bc:
2e:b1:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client