Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: 6oV1ZT5bAgfzOiVtFTqKvXwKGBFI4Lq8XaBK4RlvrY4=
Subject key identifier: F8:BF:41:BF:66:8D:56:FD:3B:B4:17:C4:39:88:55:89:5C:B1:A7:FA
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 019851C34E55C17B4755A3667345670CE0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 1637
Signing time: Mon 28 Jul 2025 16:00:10 +0000
Manifest this update: Mon 28 Jul 2025 16:00:10 +0000
Manifest next update: Tue 29 Jul 2025 16:00:10 +0000
Files and hashes: 1: 5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa (hash: hg0a1WqZnkeotSAobKNfSLW7zXmEvmKKXZqeOoYZdnY=)
2: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: 867uO7kC8cCstRSwbk/iGZX+d2x6qRpD/Qn3rADChys=)
3: jNg6vqzUy1VgyEygCa4DvoqjfIY.roa (hash: npuJNuYtC10xnW9UN6NXfDz60ESb4bhdw7EsN6BY2Z8=)
4: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (hash: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=)
5: v7n-0r9KgIhGKTchu2jwbHB0z74.roa (hash: Uqi7ReaJs7BBVFTKxxZ3ijn7JitQR2P+yiINISqSbUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:4e:55:c1:7b:47:55:a3:66:73:45:67:0c:e0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jul 28 16:00:10 2025 GMT
Not After : Jul 29 16:00:10 2025 GMT
Subject: CN=f8bf41bf668d56fd3bb417c4398855895cb1a7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:e2:f1:c8:d2:ee:10:01:0b:73:d0:af:aa:
76:a5:43:c6:fd:ba:82:14:b3:31:d1:af:8e:31:ae:
9d:d7:ea:4d:9b:ee:55:ab:5b:c7:8e:d4:67:12:57:
17:18:43:87:cb:dd:a0:61:38:03:1f:35:39:1d:00:
cf:81:8a:7a:66:91:50:9d:9b:bc:3f:cf:42:cc:88:
74:aa:76:7e:d9:cf:77:42:b2:fc:2c:57:57:9f:d9:
98:8f:88:00:8b:93:61:fb:4f:97:c2:16:18:6d:c7:
83:7c:7b:15:42:9c:ce:cb:31:b4:b7:58:4b:ba:ba:
c5:3c:33:03:50:bc:56:6f:bd:3a:88:9d:a5:a4:a5:
e7:f6:e7:3a:f5:5d:16:df:93:cc:6c:7d:2a:3d:4d:
20:0c:5f:39:3f:ca:4d:d7:8a:bb:cc:1a:ef:6f:84:
2a:5b:67:89:4e:5e:05:a1:bb:51:4b:cb:b3:95:58:
a0:5c:8e:c2:fa:2c:13:50:1c:53:f8:74:72:58:df:
a2:df:51:60:b2:e1:34:d4:11:76:c7:ae:58:50:9f:
b5:87:89:43:74:df:0d:4a:ab:e0:7b:b6:6c:59:9c:
e7:d0:85:c1:5e:45:43:d7:58:b7:1d:a6:62:ea:bf:
7e:fd:fd:01:c5:09:cc:60:6c:d2:67:bc:c3:55:57:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:41:BF:66:8D:56:FD:3B:B4:17:C4:39:88:55:89:5C:B1:A7:FA
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:44:ce:81:11:2c:df:8d:ef:b9:57:0d:d1:94:73:f6:c2:7b:
fd:32:0f:9c:99:40:24:78:45:f3:ea:56:d0:31:d2:3c:0d:2a:
d5:41:33:fa:69:a8:17:cc:57:b9:76:64:b4:28:e5:19:8e:49:
bb:80:80:2f:94:84:45:e5:f7:0e:8b:5d:2b:73:11:89:51:a7:
2c:4e:11:1d:b1:2a:7f:de:b5:1e:19:25:8b:f4:af:ef:7f:65:
02:eb:2f:5f:3e:28:56:34:ca:c4:5a:ad:93:96:87:1b:b7:a2:
61:fd:76:43:30:dd:fa:52:24:65:80:08:c8:f9:e8:91:1f:89:
aa:4e:a9:50:82:29:53:f8:ab:f8:6d:b5:f3:23:be:f4:9a:84:
c5:1e:7b:5e:3b:a9:78:8d:a8:98:db:d0:6a:98:a4:0b:bf:c2:
d0:12:da:48:d2:51:c3:2c:d4:73:5f:e8:22:60:79:25:33:47:
c2:d6:10:15:4c:78:18:e6:5a:ca:b4:29:34:f9:ba:8f:9c:4f:
7f:70:eb:94:9e:26:14:b1:df:f6:a6:4a:7e:91:6b:b4:1e:20:
49:34:61:ca:6c:46:8a:ff:f1:0d:21:8b:cc:82:1c:81:45:5c:
d8:c4:78:ee:e6:e0:7d:5c:1e:d0:08:77:fc:6f:51:6c:88:a4:
99:9c:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:59:39 2025 by rpki-client