Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
File: IKDFQA4CP5P1GOQwBMM7x50vayE.mft (raw, json)
Hash identifier: SSQV8oMbLPpjJf/wRr1chJCcXKlXFNTit/crN1XzObM=
Subject key identifier: D9:95:FE:B4:0C:56:DD:D6:BC:A4:AC:D1:C6:21:B9:21:F2:FB:9E:86
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 01984407FA26E43B88E7320B5DB10CC19886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 00:00:30 +0000
Manifest this update: Sat 26 Jul 2025 00:00:30 +0000
Manifest next update: Sun 27 Jul 2025 00:00:30 +0000
Files and hashes: 1: HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa (hash: W8tzfEVYuZk67nGO3GJK/wSiRVXk9GPJqQ4Zpo1nq8A=)
2: IKDFQA4CP5P1GOQwBMM7x50vayE.crl (hash: cs3t8bsAk0EwT+uk0DFNi7yPl/NiyWXIKx08mJWlEaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:fa:26:e4:3b:88:e7:32:0b:5d:b1:0c:c1:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Jul 26 00:00:30 2025 GMT
Not After : Jul 27 00:00:30 2025 GMT
Subject: CN=d995feb40c56ddd6bca4acd1c621b921f2fb9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:63:24:8f:4b:42:6c:df:99:ba:f6:9d:9a:
00:15:ae:f2:fd:26:31:27:89:88:cc:7e:24:d9:89:
75:b8:5d:d6:3f:c7:6f:46:98:2b:9e:e0:75:f6:40:
e9:22:cb:9e:a6:f3:c7:35:ae:f4:f6:74:b6:6e:04:
6e:84:74:b2:8a:90:a4:cf:95:9f:c7:63:cc:fd:47:
d7:b3:25:05:35:63:3e:2f:cb:2a:0a:71:ae:2a:04:
be:53:76:0a:6e:a7:a9:d6:d2:89:bb:4a:4a:2a:40:
90:c7:d6:35:98:c0:9f:73:e8:dd:f2:57:71:f0:21:
2c:68:32:e2:f2:5a:c0:0c:53:5e:b5:4c:7b:5e:d0:
62:5c:ae:2e:a7:16:04:a9:d7:db:2d:2c:07:56:58:
71:e9:ea:88:2d:b7:6d:a8:40:45:db:4d:cb:d2:36:
bc:ed:9c:d1:2c:a8:d7:a2:93:8a:d8:92:b7:fc:ad:
15:ad:11:13:55:67:cd:3b:b4:3e:93:7f:e3:c8:e8:
73:2f:42:1e:90:c4:78:cb:20:ee:ef:1d:1c:de:c0:
bf:56:49:9d:bd:7b:ff:3b:67:a2:5c:b4:16:e1:54:
20:56:54:a1:63:5b:81:77:9a:22:14:76:f4:63:f5:
01:11:79:73:48:9f:d6:fd:3b:ae:fa:8b:f3:6c:21:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:95:FE:B4:0C:56:DD:D6:BC:A4:AC:D1:C6:21:B9:21:F2:FB:9E:86
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ae:71:e9:06:35:b2:a6:f4:09:b5:58:c6:48:5f:32:ae:fc:
e4:36:dc:cb:e1:a9:25:3b:75:2d:5d:f6:b3:39:bd:c3:91:5a:
0e:f6:bf:c6:c2:ce:73:cc:83:cb:11:e3:15:74:89:e5:86:39:
29:07:bc:8d:16:4e:0c:af:70:8a:e9:27:7c:93:3d:f2:9d:62:
65:23:55:36:4a:b6:73:f2:b6:a4:ac:ed:c2:3e:8a:8d:2b:bd:
f4:90:bf:7b:2e:be:bb:9d:6f:ff:79:32:26:a9:6b:5b:66:55:
a3:bf:9f:94:10:dc:6a:aa:45:63:fc:56:64:54:d7:10:3d:3d:
77:36:f2:81:d3:00:a0:96:13:1f:dc:f5:c9:8d:77:eb:fb:21:
26:72:b6:ed:69:b8:f6:87:e8:c8:44:33:b1:af:a8:96:1f:c5:
9e:f1:fe:4f:79:71:ae:37:be:67:1d:c0:a0:50:56:82:fd:22:
3a:42:df:91:64:d0:57:b0:ac:68:e9:c2:d5:e6:08:21:3d:56:
7c:1c:9b:85:30:e2:d5:f0:25:35:d0:14:d6:0d:d8:2e:8d:3c:
b2:38:77:06:3f:db:ea:50:26:48:58:c1:11:37:b5:7b:eb:72:
b0:5f:fc:c5:5e:94:e0:2a:7c:23:0a:23:ec:5a:ae:9e:9d:d7:
a4:7e:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:35 2025 by rpki-client