Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: iZIsGH2C4NapDExgnc3GycRtHvkSLmhiepPM1QcF1tc=
Subject key identifier: 53:B2:4E:CD:13:02:04:E8:D3:4B:8E:A5:E6:A2:27:00:29:EA:A9:C1
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0199FE46C6B774B4BF5332E12E1C833AAF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 063F
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: rZHnfuD2bY9I/3YzTfBGnHYwQKZxluQbBKEfKKJzLXw=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c6:b7:74:b4:bf:53:32:e1:2e:1c:83:3a:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=53b24ecd130204e8d34b8ea5e6a2270029eaa9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:de:1b:b5:f8:1c:f1:b0:05:0d:9f:a0:b6:
40:ed:02:00:bd:4b:c3:bc:2a:61:66:84:43:ea:91:
63:b5:30:51:17:77:e4:bb:29:b7:6a:71:66:63:4b:
f8:6a:6f:ab:62:27:52:73:31:f8:17:70:39:a9:41:
db:f7:b9:12:b0:d2:99:15:56:74:48:ad:29:32:2d:
1e:95:06:a9:c4:56:8d:2c:02:d4:3d:7f:59:78:68:
10:55:be:05:e9:f7:08:36:98:ed:7d:3a:ba:f6:78:
76:0f:0c:a6:e4:41:be:c9:a0:42:8c:44:85:97:01:
06:50:8a:13:5a:70:27:9a:a9:03:a2:7e:4d:18:89:
ab:4c:20:40:42:bb:de:ef:f0:60:73:6c:0c:47:42:
ae:8f:07:59:67:51:62:2d:0d:45:0b:29:c7:92:78:
a7:d9:56:44:87:00:99:14:7a:4f:a2:ed:7f:ee:95:
58:4d:06:0f:57:dc:12:49:47:38:d8:6b:52:c5:5d:
0f:29:e8:5d:6f:3e:2e:e6:65:f3:76:4a:fb:8b:46:
a4:7c:8b:96:b3:ad:cc:2a:ce:02:9d:b8:86:a4:9a:
0b:7e:f2:b8:ab:84:f9:a3:35:3d:f8:80:38:1b:12:
e5:aa:37:a8:32:f2:34:94:80:06:3c:b8:ab:13:1f:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:4E:CD:13:02:04:E8:D3:4B:8E:A5:E6:A2:27:00:29:EA:A9:C1
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:d3:dc:f3:e4:78:5b:67:37:d7:5e:4f:df:85:40:80:52:
84:91:f8:95:eb:48:36:22:35:b4:62:bf:78:4f:37:f5:e6:93:
cb:0b:bb:02:4a:84:37:59:41:c9:04:34:cb:74:06:42:ca:d6:
6c:d3:64:3d:d5:b1:61:81:4a:a2:32:a3:da:3b:48:80:47:c2:
c0:0a:72:1f:02:47:a2:f1:31:45:a0:e5:ee:b0:c0:f1:4c:14:
c4:61:cb:01:1c:96:7b:e8:4a:80:ee:42:43:ef:ed:bf:47:bb:
45:1f:47:42:94:e5:f5:70:87:dc:97:2d:43:ed:2d:f5:14:70:
7f:47:0b:59:77:dc:8c:96:74:dd:26:e6:b6:76:5d:08:e7:93:
14:cd:e3:58:7f:51:dc:66:7e:6b:89:77:78:f6:31:6e:d1:28:
e4:25:62:e8:5a:d4:2b:56:69:07:e3:c7:d9:db:01:4d:01:a8:
6d:00:ad:c6:40:d8:71:3a:8b:ab:74:b8:bc:72:97:4a:84:a5:
44:ee:e2:c2:fc:ad:74:3f:ea:32:1f:59:f2:b1:82:7e:17:c1:
6a:5a:27:b2:98:53:24:6a:13:e0:4c:ef:3e:16:ef:e2:b4:5d:
29:2d:e0:c3:46:f4:17:2a:ea:14:55:0d:5c:85:e8:bb:ce:c3:
e5:ea:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:50 2025 by rpki-client