Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: 5JOgIbC+GG4teup0RgQ/1vOYTYO6qc9l/IusCRy1Eb0=
Subject key identifier: AC:A0:56:40:D3:33:E7:D2:FB:0A:95:FE:E7:79:4A:5F:69:1E:4F:BC
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 019849650CDB95CB061F2CD696F403440206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 063D
Signing time: Sun 27 Jul 2025 01:00:15 +0000
Manifest this update: Sun 27 Jul 2025 01:00:15 +0000
Manifest next update: Mon 28 Jul 2025 01:00:15 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: O72QCzUDa+WAUuRtP41+M4833LcP6Poh4QGlAm3eSpA=)
2: v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa (hash: +ztaiH2S/aHDtgvKfj/YkXPsW58SyJ9uS27Ej7psyFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0c:db:95:cb:06:1f:2c:d6:96:f4:03:44:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jul 27 01:00:15 2025 GMT
Not After : Jul 28 01:00:15 2025 GMT
Subject: CN=aca05640d333e7d2fb0a95fee7794a5f691e4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:4a:f1:d4:68:4c:c0:58:8a:7d:ed:33:13:
63:ef:09:a0:8b:61:5a:b5:6e:f5:83:cf:32:cd:c2:
72:1e:fb:08:b3:67:c0:4c:6a:02:e6:8b:85:af:bd:
8c:0b:a1:14:e5:f3:8a:ee:c5:b7:97:5e:d8:64:36:
ad:c3:76:9f:c7:27:5c:2d:d1:5f:86:2b:f4:ac:46:
01:05:af:45:ae:cb:5c:a1:84:8d:1d:39:42:cb:79:
2d:93:22:ff:b1:0b:14:ee:8f:8d:42:8f:67:2a:7b:
bb:54:e2:c8:ce:84:cb:fd:9f:80:0c:f1:cd:ad:7a:
ed:c2:c7:93:3f:de:14:1b:f4:66:27:3c:1b:8a:ad:
cd:d6:59:bf:94:e6:a9:3e:7c:77:db:a7:36:48:28:
b7:e2:f9:5c:5a:4d:83:c7:7f:9c:38:53:fe:17:27:
d0:40:f3:c5:e4:7a:2d:43:bb:e4:ae:e8:f8:19:db:
7f:e8:ca:92:cb:75:ec:6b:54:ec:53:0d:fb:29:7a:
79:81:2a:85:f8:c9:b7:58:41:1c:71:db:e5:6a:87:
1f:82:2e:ea:04:5e:76:e9:d1:2d:20:9f:c8:0d:60:
99:db:a8:51:4c:83:c8:c4:a3:22:e9:8c:ca:79:2b:
a9:87:42:9b:d0:cc:fc:7c:76:2d:99:84:2b:e8:f3:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:56:40:D3:33:E7:D2:FB:0A:95:FE:E7:79:4A:5F:69:1E:4F:BC
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:62:cb:f5:8e:74:6d:fc:9c:c2:ff:0f:4f:99:72:e3:80:
2c:2c:32:29:a1:bb:37:71:6a:fe:76:9f:1e:2a:72:11:c3:b6:
68:2c:87:f4:6c:06:f0:c5:96:60:52:f9:18:fc:a6:0b:cd:09:
61:5a:c1:6f:88:79:c6:ce:60:7b:75:5a:5f:a0:24:6b:1e:36:
a3:af:2a:3e:bc:fa:e8:cc:df:8f:3d:4b:eb:bc:2c:9a:fb:54:
6c:6c:73:79:97:c3:33:d6:9b:86:ab:0c:eb:76:00:94:05:61:
9e:de:ab:2e:90:12:6d:ee:59:51:30:f7:ed:26:00:62:ff:7b:
4b:5b:be:cb:d5:69:cd:3c:c9:52:f9:77:d2:ad:1b:2a:12:55:
63:b2:3c:3b:13:64:3e:29:66:5d:a9:24:74:f1:8e:6e:37:f5:
5a:b8:a8:e5:68:c8:86:8f:d6:55:33:44:8b:a6:fa:22:51:89:
ec:59:7c:52:ea:b9:df:d2:c4:68:ce:a7:0c:62:1c:16:4c:4b:
1e:16:bf:6c:aa:9d:2b:dc:13:95:74:f7:16:f4:62:b8:80:2e:
39:ef:a8:34:55:fc:fd:58:08:fc:4b:a2:17:89:21:59:b1:c2:
98:73:f5:bc:da:68:21:74:d3:61:dc:40:94:db:7c:e2:12:62:
ff:df:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:26 2025 by rpki-client