Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: xMVacg4WJcnFs5Lzf0tqjwg/Olunjl9/WL3vQ3pvHHc=
Subject key identifier: 2B:73:D2:A1:27:7F:57:5D:73:49:43:6C:82:B1:9C:4B:06:0D:F4:0B
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 01984B54EE2B792228A548C92DE2DD944389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 1261
Signing time: Sun 27 Jul 2025 10:01:53 +0000
Manifest this update: Sun 27 Jul 2025 10:01:53 +0000
Manifest next update: Mon 28 Jul 2025 10:01:53 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: NvWD3h4fa5T7SKHsbkrgkA6jmQ0s3SIV4PPGE8Yz/Ns=)
2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ee:2b:79:22:28:a5:48:c9:2d:e2:dd:94:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jul 27 10:01:53 2025 GMT
Not After : Jul 28 10:01:53 2025 GMT
Subject: CN=2b73d2a1277f575d7349436c82b19c4b060df40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:4e:7d:5c:be:f1:e8:29:21:23:aa:be:93:
34:70:c2:41:82:77:8f:7e:93:cc:e1:f9:a5:f0:eb:
c0:d0:c9:9a:a1:08:4e:a5:bd:93:b1:42:90:85:04:
06:75:64:a7:ba:a1:8e:d0:cc:85:13:97:69:42:ee:
fe:77:5b:97:08:24:dd:78:d4:29:30:11:97:7f:74:
31:e0:6c:53:64:f6:e9:3c:cd:48:40:6e:80:83:d2:
8c:0d:05:a3:77:cc:a9:31:fd:74:b8:91:34:66:c8:
38:12:96:57:b5:51:14:32:af:27:d6:ec:c8:99:96:
21:4b:45:c9:f2:3e:b6:4c:0c:34:32:b0:59:15:c1:
f0:03:01:a5:57:5a:4a:c5:02:be:e3:ca:84:5f:9b:
d3:84:a6:11:42:b6:e4:6a:0a:b7:a5:29:5b:bc:17:
97:ac:f8:4b:3d:b7:15:d3:b5:9d:c4:f2:0c:0d:cf:
67:31:1b:37:49:ab:bb:36:d0:0c:d1:03:f6:31:4f:
e6:9e:35:a9:4f:e0:cd:24:06:c8:37:f3:e0:ba:ff:
f9:ff:65:78:5d:b4:7b:5d:5d:13:ab:72:19:12:61:
df:b8:29:6f:c7:65:22:8d:da:22:44:99:f8:76:c8:
83:60:6f:f1:6e:ef:d5:ca:ff:3e:5a:56:0b:92:b8:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:D2:A1:27:7F:57:5D:73:49:43:6C:82:B1:9C:4B:06:0D:F4:0B
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:55:18:d7:47:61:82:64:10:0b:24:76:6f:09:16:9c:77:01:
05:9f:41:95:09:1b:3b:3e:d1:30:65:27:83:ef:d2:1c:c7:c7:
b3:24:c1:d9:86:2e:47:b0:9c:51:0f:81:81:cc:dd:bb:c7:75:
75:0c:e1:c4:bd:74:3c:4f:0b:4b:f7:fd:71:d6:80:ca:fa:89:
61:a1:6d:b2:85:b6:c1:73:aa:83:95:4a:ff:d9:d7:99:9c:6c:
2e:e1:83:a2:ca:cb:52:9f:a3:99:95:6b:6c:f5:fe:01:b9:aa:
46:c8:ed:75:a5:ce:db:0a:d3:3b:d0:49:48:8b:f8:49:5a:15:
82:eb:8c:e1:6f:4e:21:e6:80:9e:99:09:66:40:3e:58:99:f0:
e9:aa:8e:2c:da:c5:bf:cd:14:ad:65:1b:f2:6b:86:b5:05:44:
cf:a0:20:d2:15:fd:71:e4:d7:ac:af:c9:29:fd:7e:15:0e:ef:
a3:08:e7:20:2f:a8:28:77:c1:d5:90:2b:76:8f:1c:74:0b:ce:
d7:05:3e:57:b6:df:e8:83:21:63:06:70:e3:ef:db:a1:92:63:
a0:bf:bf:ae:b6:dd:97:d9:2a:6c:36:f6:ae:8e:bb:5d:4e:11:
da:fa:6e:e4:a8:7d:56:b9:38:03:da:1c:dd:be:8b:2c:72:91:
04:7c:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:34:42 2025 by rpki-client