Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: ZylxTtuCmkLTdBdxphNmhc+GB1nUU8kLCAQduTOyHrk=
Subject key identifier: 6C:82:AD:F9:A6:83:55:68:17:06:9D:F9:1F:0D:ED:2C:AB:71:2A:73
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 0197B96AE345DC2F3375B4308F534A77405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0C1C
Signing time: Sun 29 Jun 2025 02:01:19 +0000
Manifest this update: Sun 29 Jun 2025 02:01:19 +0000
Manifest next update: Mon 30 Jun 2025 02:01:19 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: rcbKGMtsaZesRmHSUkgfVtKcaOMp7MhUPydahJ/yWwo=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:e3:45:dc:2f:33:75:b4:30:8f:53:4a:77:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Jun 29 02:01:19 2025 GMT
Not After : Jun 30 02:01:19 2025 GMT
Subject: CN=6c82adf9a683556817069df91f0ded2cab712a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:d5:fd:19:c2:21:b0:b2:89:74:23:e4:92:
4e:90:27:4b:d5:19:6b:90:ae:df:15:a8:08:3a:17:
2f:38:60:16:a4:db:be:53:b6:0e:c3:a4:c9:d0:ec:
18:ca:cb:2d:6d:d5:64:b3:a9:e3:01:b1:2a:93:3f:
39:45:23:06:99:20:5d:1e:8a:3f:f5:e9:e9:e7:ce:
e6:38:39:15:43:34:a7:1f:59:de:ec:4d:35:87:67:
fb:7a:87:b5:42:28:72:ab:9b:cf:53:ae:6e:0f:09:
07:63:f7:9d:ef:a6:39:a5:2f:76:53:69:5a:94:3e:
a5:b9:c7:58:4a:40:f7:5e:ef:f5:f5:1b:56:2b:bc:
4e:60:00:91:ac:d1:a6:2b:44:32:3b:1c:41:9f:df:
0d:88:b6:ed:8f:4b:e2:90:02:bd:49:6e:40:ab:bd:
5e:53:56:f3:db:32:a3:16:05:b5:d0:bf:3f:3f:b6:
a2:94:b1:6d:47:fa:34:12:1f:7e:c8:8e:d1:90:ee:
16:21:2b:30:1a:c7:42:ff:ba:2d:af:40:2e:cd:f7:
ab:3b:41:f7:95:0b:c9:41:ba:7b:42:d1:35:db:b8:
e2:0f:ae:c7:21:78:e3:bc:7f:23:d0:da:19:6a:96:
ea:1d:eb:2e:9e:c5:81:2b:6d:bc:9b:59:47:8e:16:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:AD:F9:A6:83:55:68:17:06:9D:F9:1F:0D:ED:2C:AB:71:2A:73
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:0b:bf:15:f9:10:32:f5:3e:61:33:c6:1d:37:cc:29:10:
70:0a:dc:3b:55:f8:ee:58:04:dd:b7:dc:b4:ff:49:66:3e:e9:
78:fd:2b:a9:9c:a7:d7:7f:28:91:6c:b3:77:9b:c7:5d:5d:71:
c6:03:27:2b:71:5f:5e:76:e5:35:06:f6:84:4f:bf:5a:55:f2:
1d:5f:db:ce:27:00:7e:e9:dc:38:0f:1d:09:22:c6:59:74:fc:
a9:04:ff:48:27:3e:13:84:78:ac:51:69:6b:c6:75:d0:b1:09:
17:8e:6c:ea:4f:8b:98:58:f5:bf:56:88:ce:e7:c7:39:19:d5:
15:d4:b2:ec:67:66:3a:b4:a2:2c:a7:1f:a0:d2:d3:a4:e1:1a:
39:16:ae:51:ce:db:c5:13:f6:46:9c:1c:41:ea:e9:2b:09:6c:
d6:c8:4f:c4:43:cf:80:f2:2c:d7:e5:da:8c:3b:d9:b4:a1:c7:
35:b8:0c:39:6c:12:d8:7e:d5:83:1d:82:e8:d1:f0:8f:50:e9:
8f:b8:d2:2c:ce:b0:2e:cd:4d:bb:a0:f6:56:2e:96:6a:c9:d8:
fa:a6:69:2e:9e:46:e5:dc:35:93:be:b1:d1:ae:85:9e:7e:95:
c3:2f:5d:b7:ea:6d:cf:e8:4a:cf:c1:03:af:a4:3a:df:92:d4:
1d:9d:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:12 2025 by rpki-client