Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File: IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier: lzVD9Nz15Baz49/VvM3u2egH8FL8KtA/XNwlGWiTH9s=
Subject key identifier: A0:48:0A:3F:1B:03:92:1C:B9:5B:62:43:91:90:C8:B2:02:8C:CE:50
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 0197B77C254B190F62831C48FA57E770711A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number: 12FB
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: qfTFBdWRb/rOXesJd/lALDVQF3Wgbzy/k4ZrKbuGc0M=)
2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:25:4b:19:0f:62:83:1c:48:fa:57:e7:70:71:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=a0480a3f1b03921cb95b62439190c8b2028cce50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:05:c6:69:91:d4:ad:ce:97:82:c8:e0:6c:
36:dd:42:7a:4b:99:12:8c:0a:eb:86:81:68:98:1d:
42:35:dd:34:b4:af:17:b5:5e:b2:8b:55:d0:80:e6:
1d:c6:63:0e:d2:c2:99:3d:8c:2f:bb:d3:c6:99:94:
97:1e:ea:14:0e:d4:a3:04:fb:29:de:1a:5e:ca:97:
ef:c7:2d:b1:9d:76:5c:0c:8e:91:49:1e:42:b0:ea:
12:39:ea:eb:9a:f0:9d:f0:54:69:9e:99:e2:39:2b:
a0:31:a5:b3:76:a9:fe:d2:41:3d:0c:f7:62:d8:7b:
9b:f6:27:bb:b6:c5:1b:33:ad:47:fe:35:d8:49:ae:
c5:b7:c6:f0:ee:26:a4:b9:04:85:33:d4:57:34:5a:
6d:40:a8:24:d8:26:2f:58:c4:a3:d3:bb:48:80:f2:
63:bc:55:67:91:a9:1c:ea:5a:ee:cb:ff:31:1f:bf:
b5:a9:af:07:62:46:c2:26:32:ec:1c:08:b1:98:e7:
39:30:d5:8c:b5:c5:58:5b:37:08:26:ef:17:03:57:
bf:d2:10:c5:29:74:1e:c3:cf:e7:d0:42:74:97:70:
0d:66:4f:b4:e8:44:06:c4:10:6a:b1:cf:37:56:a6:
75:a0:33:ed:7d:e2:49:e6:be:c2:81:a6:e0:a9:2f:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:0A:3F:1B:03:92:1C:B9:5B:62:43:91:90:C8:B2:02:8C:CE:50
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:fb:fe:34:b8:08:4f:bc:41:1f:a1:02:18:c4:a0:84:51:
2e:f3:a6:80:25:77:bc:bf:66:b0:1f:89:43:0d:6c:61:5b:aa:
a4:3f:6f:dc:32:e2:e5:14:7d:3c:11:c9:1c:09:91:36:54:ee:
0a:fb:da:28:4e:63:1e:ba:e1:05:d9:de:0c:d4:64:c2:53:89:
0b:27:67:67:9e:87:ec:cc:0e:6a:00:80:12:77:10:69:11:ac:
d3:7f:c5:96:d0:77:c6:cb:91:a9:05:54:4d:f1:f9:94:e5:37:
b2:b7:6b:9d:af:c8:f5:d7:7e:40:61:50:da:b5:de:7c:5c:1f:
a5:d6:8f:07:06:dd:08:63:81:ea:c1:28:49:f5:bf:da:f1:82:
d8:74:4b:4c:65:7e:99:68:e9:4f:86:39:bf:93:c1:4e:34:4d:
00:fe:88:71:cc:a1:3a:98:b3:d7:7e:3c:41:be:a0:67:f9:cc:
88:ad:61:d9:09:74:35:ef:9c:02:aa:d5:a4:fc:d9:fb:7b:52:
c3:8e:92:30:be:8f:f1:7d:42:54:dc:aa:5e:63:77:82:11:e4:
d9:78:4e:66:54:e7:17:62:4a:ea:ce:07:52:ca:8e:3c:a0:50:
de:cd:dc:8a:57:56:0f:c6:e4:14:a3:fe:ec:13:15:24:f7:54:
c3:8b:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:50 2025 by rpki-client