Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: 4vqlPMwbTd6cGS+BOCPLul7uXHFUdUZJ3jXVq4qeCqI=
Subject key identifier: CC:36:5F:77:6A:4F:61:B9:32:66:5B:6C:87:5A:05:5E:05:41:9D:B7
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019848F79F98122469686C08D4393733DDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 0305
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: pJt01zWdIOR9CdQ9K4qKwCvbutr6I8oZCo8jEPDr6EA=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:9f:98:12:24:69:68:6c:08:d4:39:37:33:dd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=cc365f776a4f61b932665b6c875a055e05419db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:b4:1c:35:e4:61:61:db:0d:ac:6f:64:4e:
42:05:b1:29:34:e8:31:ac:97:4d:63:ef:42:39:ad:
93:6d:b3:c6:55:ac:4b:fd:aa:c6:d3:96:cb:9b:c5:
36:ef:c9:ea:35:36:0c:07:97:f0:3e:45:f5:4e:66:
81:50:76:c3:6c:2e:d9:55:64:17:0a:17:7b:7e:f9:
62:54:12:89:a0:2b:d3:dc:ac:9e:3b:90:0a:df:c7:
f3:2f:bd:23:72:25:a8:75:1e:ca:bf:ef:aa:07:c4:
f1:07:34:f4:1d:b9:9e:04:c1:b9:14:39:d3:5c:86:
6a:ab:a3:45:de:38:24:58:cf:bf:59:b3:14:26:65:
40:51:67:ff:35:b0:31:ad:65:0b:33:94:db:fa:4f:
fc:fb:a7:7b:d3:e3:be:c4:d4:0f:e3:0a:79:b9:ad:
ee:ad:c7:01:c6:37:8c:7b:50:c5:ae:59:07:e9:c4:
0b:bc:f3:5c:78:4d:59:86:af:b5:d9:31:4e:4b:7a:
a2:ed:ee:d6:71:34:0c:c5:d3:6c:60:50:3c:53:8d:
eb:8e:e9:0a:38:ba:70:f0:c1:6b:c2:20:d8:d1:9f:
a0:82:28:c5:22:bc:56:88:f9:e9:97:9b:73:6f:72:
b9:16:3c:94:61:18:ef:32:8c:11:e7:a4:45:b6:10:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:5F:77:6A:4F:61:B9:32:66:5B:6C:87:5A:05:5E:05:41:9D:B7
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:49:f6:b7:0f:bb:3e:a6:37:25:9f:d3:01:7f:5c:a8:7e:
c3:a1:0a:07:c5:61:df:45:3f:f2:f3:28:19:fa:e4:ed:b9:e0:
c0:1e:e1:3b:38:50:d4:31:3a:9e:c2:f8:d6:f2:50:f6:3f:bd:
db:24:c9:f7:91:c3:29:fb:24:b6:c1:5d:06:56:13:ae:9d:61:
26:b7:4c:85:08:37:be:7b:c1:cc:de:40:c5:de:62:a3:c1:54:
ad:c7:6f:e7:24:77:be:09:2d:0e:a0:8b:67:34:88:c4:c3:9f:
4f:b4:30:ea:af:74:a2:46:2d:b7:d4:3f:8d:62:43:72:2b:a2:
dd:45:fc:65:1a:37:66:92:c4:21:71:f4:33:10:84:e4:3a:6f:
08:9d:db:d9:b4:55:c1:cb:56:6b:b7:a5:c5:eb:b1:35:28:96:
a4:a7:c6:51:81:af:f4:ec:32:9d:bb:ce:69:e3:21:29:72:97:
f1:d3:67:19:e0:80:17:0e:3c:81:60:ef:01:bf:63:37:f6:32:
85:71:d7:7d:3b:a8:eb:a8:41:d6:28:d2:96:cf:58:4d:dd:21:
c5:d5:0b:a8:32:6e:23:c1:d1:7a:51:73:2d:33:8a:c0:d5:62:
ad:e4:c4:fe:df:91:5b:75:7e:ec:03:ca:ea:2f:15:e1:a6:de:
9c:85:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:25 2025 by rpki-client