Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: px91h+zUKzPr77FzanNGVuBXSId+pmgaGf7NPNrULKE=
Subject key identifier: 79:FC:AF:1B:BB:5A:1F:35:F0:0B:5A:85:C4:E4:40:4A:60:6F:9B:C9
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 0198530E67D483E2FA59E3BA69691A762C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0FD5
Signing time: Mon 28 Jul 2025 22:01:49 +0000
Manifest this update: Mon 28 Jul 2025 22:01:49 +0000
Manifest next update: Tue 29 Jul 2025 22:01:49 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: aIS5srHZABt0ppecDeE1BIoXCk4kK0DYB//vhJqKCG8=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:67:d4:83:e2:fa:59:e3:ba:69:69:1a:76:2c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jul 28 22:01:49 2025 GMT
Not After : Jul 29 22:01:49 2025 GMT
Subject: CN=79fcaf1bbb5a1f35f00b5a85c4e4404a606f9bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:52:d3:bc:7a:42:1c:de:d0:36:71:4d:e1:
4a:b2:ac:2d:a0:10:c2:30:9c:df:17:5e:e7:aa:b4:
44:50:57:46:df:b6:07:df:07:54:64:11:5e:04:bc:
8b:c8:a4:1c:ea:c9:1c:bf:7d:0a:5e:50:4d:63:ec:
9f:60:97:2b:eb:a2:ac:e4:be:f4:60:0a:24:7b:45:
ce:a8:8c:99:91:91:1b:79:da:93:1a:2b:0c:80:95:
cd:72:66:49:90:8d:f6:a9:30:10:05:cc:a0:2f:e0:
30:07:a1:be:88:c4:c3:54:cd:48:53:9d:f4:f0:f6:
f8:cb:ce:f8:89:f0:ac:a5:fc:b5:28:94:89:13:bb:
e3:24:56:0a:da:d0:84:fa:5b:0f:7f:f4:94:27:bf:
0c:6f:2d:be:49:de:d8:e1:01:3f:ca:59:26:16:5d:
0e:90:89:52:68:34:5a:b9:54:4f:30:bb:6d:da:42:
11:97:d4:38:ce:ae:1e:45:ef:81:88:87:d4:cc:f8:
46:05:4c:d1:cc:66:ec:f8:5d:c8:e6:f3:48:74:cc:
76:73:78:4b:9e:f9:8e:82:22:d4:14:3d:db:cd:52:
2c:5d:06:fc:b1:ea:67:36:11:f9:79:e3:55:6f:f7:
c9:fe:8b:ca:e4:ae:53:b1:53:d3:bd:38:ad:9c:fe:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:AF:1B:BB:5A:1F:35:F0:0B:5A:85:C4:E4:40:4A:60:6F:9B:C9
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:4d:35:fe:63:0e:0e:17:a3:cf:47:ee:a6:69:69:a1:d9:
44:e3:5b:f4:2f:72:39:91:8f:e6:c3:1f:c4:28:30:7b:6c:b2:
93:33:89:90:d6:6f:65:76:79:fc:f7:9b:24:43:9e:e5:06:f3:
45:95:64:0f:5e:65:27:9c:62:b2:50:f0:72:4b:35:3e:02:a7:
fa:01:b7:15:94:c3:13:9e:bb:3a:c3:7d:79:c5:c5:3a:99:8b:
e3:38:bd:a8:5c:1d:c8:18:af:ad:7f:d1:6a:79:e8:f3:1c:04:
47:eb:80:e4:c1:b0:cc:31:a8:a2:c2:e6:cf:da:d0:32:e2:37:
5d:46:d3:b3:e4:56:fd:76:d2:18:58:34:9d:84:9d:ca:29:8b:
0d:f3:b6:53:ad:af:96:f1:3b:40:3f:f4:78:53:3e:08:9c:a9:
fb:7a:65:49:a7:ca:e9:55:f6:03:9e:4d:bf:17:e2:a1:81:0e:
ba:37:79:d9:9d:b2:f6:17:55:3c:51:c1:25:1d:1d:3d:34:55:
39:35:c4:a2:27:5f:1f:69:9e:20:0a:fb:79:4c:33:f9:35:df:
c2:a2:e2:75:99:38:94:37:06:d9:7c:89:a3:08:da:30:3b:ec:
b0:04:da:f1:7f:65:6d:14:8b:cc:52:52:b8:b1:d8:14:c1:1a:
75:26:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:43 2025 by rpki-client