Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: vmNC/ciuuN+V/SOjHejSnASnkucZEQi25AmVE75lnjo=
Subject key identifier: EF:7E:6A:11:5B:42:FC:72:F5:FF:FF:E0:F6:F2:AD:5D:49:C3:35:7A
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 0198D54E21625ED984E01114ACC23D678D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0CAF
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: j87w2NfZFq9Q2wqbLEd5fsR9vH1w2v1z8ad/CV+tWXI=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:21:62:5e:d9:84:e0:11:14:ac:c2:3d:67:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=ef7e6a115b42fc72f5ffffe0f6f2ad5d49c3357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:cc:39:1c:fa:2f:eb:d1:82:ff:20:f5:6b:
60:92:e0:6b:a3:e9:a4:c7:9d:82:1e:1c:3a:6d:e6:
72:0c:aa:c0:6d:bc:22:1c:93:fb:60:24:05:06:bf:
53:5a:d1:e8:8a:e0:2b:33:29:d7:8d:a5:53:c3:84:
9d:81:ca:91:b4:b2:8e:00:15:fb:1d:e9:e8:c3:2d:
7e:2c:70:d2:da:ec:28:bd:2c:0f:12:34:bb:e8:3b:
82:0e:98:3f:4d:2a:17:64:f0:f0:d4:24:05:ff:46:
7d:be:47:b5:fb:dc:13:81:ba:59:79:52:44:93:f1:
63:2c:b1:06:a8:bb:24:d6:ee:70:71:13:e0:0d:10:
b6:f5:3a:63:07:7d:0f:49:89:75:2f:07:86:db:8d:
46:68:1c:43:1d:20:33:93:ca:a9:5e:5b:bd:ac:0a:
35:21:82:83:86:9b:a7:01:cc:a1:f2:97:41:bd:c5:
20:87:ef:8e:b6:d8:02:d9:56:b4:c8:fd:7e:b2:44:
4a:20:77:86:d7:d8:5d:89:90:84:61:b2:9b:e9:6d:
d8:df:f9:f6:bd:a6:8b:89:3e:0b:dd:c0:cb:1d:6c:
ed:7c:23:21:c5:41:33:e5:1d:e2:ce:83:72:5f:ce:
5a:fa:55:00:4c:a9:76:ab:cf:db:6c:68:9d:08:ce:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:6A:11:5B:42:FC:72:F5:FF:FF:E0:F6:F2:AD:5D:49:C3:35:7A
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:76:6d:b3:19:e3:fe:32:3a:ee:bf:9d:fd:b7:9a:a2:1b:
72:e5:f8:e6:09:4e:4f:99:8e:ba:5e:b3:5e:5a:4a:28:ae:60:
16:d6:bc:74:54:c6:8d:7f:b8:e3:e4:50:8e:52:ab:ba:f9:de:
a5:ad:c3:fc:95:d5:66:03:4a:5b:fc:fc:42:d0:5e:4b:8f:00:
6c:be:68:2b:2d:9b:19:9f:de:0b:ff:8f:01:77:cd:34:de:71:
fd:03:a2:bd:94:4a:2e:7f:86:92:58:25:a3:ce:14:97:61:c6:
99:81:5d:65:af:bf:e7:82:2c:e7:be:95:58:4b:a0:3e:95:7a:
eb:7a:03:cd:32:1a:ed:fa:35:d7:9e:54:7a:d1:6d:dd:15:f8:
43:ea:e9:00:43:c4:a6:84:11:37:65:20:95:1b:63:45:de:b6:
a4:8b:0e:68:dd:d4:18:65:e3:4e:29:1e:2b:35:0e:6e:79:a7:
7c:e3:12:26:94:dd:7b:28:23:db:97:87:00:07:bc:08:92:73:
e5:ba:ae:6d:e5:8f:8a:d7:1e:78:55:38:bc:29:e4:b7:ca:24:
05:36:5c:5e:e2:00:2e:16:de:e3:8d:4b:e5:b4:5a:c8:7c:92:
69:eb:0c:4f:b4:bb:7c:ac:31:05:83:db:39:f0:fe:2e:8a:2b:
e6:ce:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:47 2025 by rpki-client