Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
File: IPblO2l60mO0uk6kmBQ2aog7VK0.mft (raw, json)
Hash identifier: Zke8g1FAiImkY95Fn5x4zaf1XobHEGxqE6LQ1aSF3pI=
Subject key identifier: FC:72:2F:E3:6D:B6:69:13:78:1C:90:E4:9D:8E:44:DB:8B:64:08:03
Authority key identifier: 20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
Certificate issuer: /CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Certificate serial: 01984965C50D09C6C355CAD49E5687B0DCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:03 +0000
Manifest this update: Sun 27 Jul 2025 01:01:03 +0000
Manifest next update: Mon 28 Jul 2025 01:01:03 +0000
Files and hashes: 1: APkFGhaR8YtianTelxgsgSDeVhM.roa (hash: 2Pdlo7CTCPlVPPRVRRuXnXVCI5TavhpFPnrp+xkks5o=)
2: IPblO2l60mO0uk6kmBQ2aog7VK0.crl (hash: rL6ruk+310/ZHueRF5U65VG8vCsUVXLFUIkgNiVia48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c5:0d:09:c6:c3:55:ca:d4:9e:56:87:b0:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Validity
Not Before: Jul 27 01:01:03 2025 GMT
Not After : Jul 28 01:01:03 2025 GMT
Subject: CN=fc722fe36db66913781c90e49d8e44db8b640803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:bf:fa:19:70:f8:8b:f9:37:64:e6:14:eb:
d7:98:fa:fe:a2:78:2e:4f:58:7d:af:fe:76:e4:dc:
89:51:36:f5:0c:8a:b4:a4:b8:c9:71:b1:a7:d1:f6:
f0:f9:13:4c:2c:28:11:d1:f0:e7:83:74:3b:7a:7f:
2a:76:7a:03:8a:b6:1e:f9:d7:04:d9:1b:ba:92:f8:
53:b7:d5:31:95:79:ce:96:32:c5:27:6a:56:ed:06:
0c:73:87:1e:52:8c:a8:e8:02:9d:cc:51:08:a4:b7:
29:07:4d:6e:b7:60:09:ce:53:9e:fb:9c:6d:08:19:
7b:2a:5e:f2:80:05:b3:49:40:92:67:4b:bf:91:b7:
ef:0a:48:57:00:04:1f:f2:6a:17:b0:77:08:5b:5e:
92:f1:7c:24:cc:ca:a9:60:38:df:34:2b:23:9e:a3:
d9:61:3c:55:5d:e9:74:65:41:0a:21:89:72:b9:70:
4b:ff:02:72:af:bf:b6:15:da:b3:51:54:67:b2:e3:
ee:79:9b:74:35:34:4e:a4:b3:99:1a:51:e1:16:1f:
82:73:48:6b:1d:98:d7:c4:9e:8a:5e:b5:51:dd:30:
7c:5f:be:03:29:61:21:89:88:8e:ae:57:a5:20:df:
e6:1c:ce:3f:67:01:11:ec:05:02:c0:0f:ef:2f:95:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:2F:E3:6D:B6:69:13:78:1C:90:E4:9D:8E:44:DB:8B:64:08:03
X509v3 Authority Key Identifier:
keyid:20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fe:bc:e1:0d:4f:a6:f7:ed:1b:d4:b7:98:b1:93:89:63:58:
5c:d7:43:68:72:f5:55:75:83:99:de:bc:df:07:a6:96:b3:b7:
04:62:dd:8c:d5:df:26:ba:b3:fa:b5:eb:ea:14:e9:ad:6a:4f:
5f:8f:05:b2:79:66:5c:ba:ba:a4:06:02:36:54:f6:13:9a:02:
fe:40:56:70:1a:b0:8a:73:14:82:98:4a:f4:2d:1f:d5:92:c7:
90:5e:9c:52:fe:fe:16:4e:9a:87:88:72:fc:84:47:54:d0:dc:
90:6b:f7:e1:c5:c6:4e:f2:82:72:3f:69:2a:50:2c:c7:f2:d1:
ff:99:ee:7e:21:aa:d1:20:eb:53:e0:e2:4a:d4:7a:11:7b:15:
d6:05:b5:92:c9:58:b4:b1:57:09:b8:7c:86:25:98:37:3b:ca:
c6:79:ce:e9:13:3c:8e:57:d0:78:40:dc:b6:32:2f:fe:92:3e:
a9:3b:79:d9:0a:a3:ab:be:e9:5a:87:e8:06:40:a0:2e:3a:87:
aa:87:28:05:d7:cf:fd:a7:b7:53:8c:d4:c5:5a:d2:d2:26:52:
f8:b2:cd:7e:e1:0d:39:d2:48:80:25:ec:02:fc:4b:74:bf:c5:
e0:a9:a6:5a:a5:95:20:68:6b:f9:d2:6b:4b:2b:72:63:92:7c:
d9:c7:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:45 2025 by rpki-client