Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: yVyxwTJIfWh9DbEKjsfmgIbyBUHkg6gEJ+XBdsh4M3Y=
Subject key identifier: 55:69:0A:9C:D4:3F:30:BA:0A:A4:87:06:82:D7:22:41:AF:A2:6E:3E
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0197B70ED447CF7FE6F2B11D7C8C550E854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 0511
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: LFiY2QLHFPYqeXjdUFuiaCedZll8IeylsCb82ZiulVw=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d4:47:cf:7f:e6:f2:b1:1d:7c:8c:55:0e:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=55690a9cd43f30ba0aa4870682d72241afa26e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:82:2d:58:81:d6:5d:4d:94:06:69:87:a8:
9b:07:14:be:37:52:58:d4:69:7e:43:79:f6:7b:a4:
ea:bb:cf:8e:f9:bd:52:27:42:f3:8f:e9:e7:de:77:
2f:83:0d:18:c6:58:81:76:a7:4e:a6:a4:80:7d:7c:
06:e4:e8:70:82:55:ae:65:68:4f:02:36:bd:06:be:
2b:a7:de:f1:fa:19:4d:74:aa:5f:90:40:f3:38:55:
9d:be:f2:7b:d8:2d:19:d5:eb:0e:94:17:d8:a7:6a:
9d:3a:e1:76:c9:46:83:97:e8:38:1c:d5:94:6a:36:
22:19:e4:cd:fe:45:0c:4c:b2:54:0a:94:e9:91:da:
f1:16:f0:1d:50:59:4d:6e:73:15:ed:15:7c:37:67:
0f:b0:ea:ab:76:df:3a:ee:ae:06:f5:9a:0a:0e:9f:
c9:c9:cf:fe:2f:6e:ec:48:0f:6f:04:9b:07:0d:e6:
6e:e3:73:df:ac:cf:97:e9:40:ad:12:5e:4e:a9:ab:
3b:d3:65:36:9e:ce:07:c1:62:a3:e6:cb:c7:a7:bd:
19:71:7c:20:26:82:9e:85:81:df:6f:f2:a3:94:6c:
45:a2:b8:55:41:af:c6:fa:ea:50:52:e3:38:25:02:
02:b6:b2:1c:75:03:a2:79:e8:96:77:02:5a:e0:23:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:0A:9C:D4:3F:30:BA:0A:A4:87:06:82:D7:22:41:AF:A2:6E:3E
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:c5:96:4d:96:03:57:b9:a3:d8:1e:69:92:5d:e9:c9:18:
5a:ed:52:59:3d:e9:32:58:78:3c:2e:c3:cb:35:4b:77:08:61:
0a:0d:e1:a4:15:3c:bf:1f:79:7c:a9:cd:b2:16:f7:de:3b:22:
8a:09:5a:00:c8:4f:14:27:f8:b4:18:d8:11:3b:da:00:47:d0:
c1:d6:68:a5:08:4b:31:d5:44:5a:e6:4f:6a:84:d7:9a:bd:ef:
f6:e6:e1:2e:29:33:e1:e4:5c:99:fe:9c:96:f5:00:65:9a:de:
50:25:42:29:7b:18:0c:43:6f:af:11:45:71:6d:16:e8:fc:56:
5c:be:b8:86:62:91:aa:b3:85:23:80:6e:be:7c:39:5f:db:e0:
29:b9:33:27:be:aa:34:a6:cd:cd:8a:4c:5a:8e:d1:6d:5c:92:
36:5e:34:c4:80:63:b0:13:74:86:e3:30:38:48:1a:7c:a7:b1:
c9:5d:db:8d:c3:d3:da:d9:3f:84:92:19:d6:5d:f9:ae:f7:66:
ec:42:00:1f:2a:54:7e:1b:4c:b5:a7:da:be:b1:99:74:10:ec:
67:df:31:eb:be:5a:c3:3c:ea:74:11:bc:6b:0a:8a:33:42:37:
d9:de:7e:ad:c1:5f:aa:b9:82:a0:0c:73:ca:be:c6:6d:33:ca:
87:84:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:51 2025 by rpki-client