Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: F3uFw0O/xG7TD0WrYxsnhrODEglotA7m60fcYFKEzbs=
Subject key identifier: 56:7F:43:9E:13:ED:2E:C6:59:15:C5:12:01:7F:AA:EB:E0:38:C5:98
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019922FA9A773C1D31FB4381C967C41E3BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:12 +0000
Manifest this update: Sun 07 Sep 2025 07:01:12 +0000
Manifest next update: Mon 08 Sep 2025 07:01:12 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: Jj0dh7GT+L47aHbPXp1YBPmJSENcg7RiggHh4W7AeaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9a:77:3c:1d:31:fb:43:81:c9:67:c4:1e:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Sep 7 07:01:12 2025 GMT
Not After : Sep 8 07:01:12 2025 GMT
Subject: CN=567f439e13ed2ec65915c512017faaebe038c598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:4f:f5:2a:7f:14:7e:83:18:0b:d4:ee:f9:
33:c8:7d:bd:4c:9b:0c:bb:dd:a6:d5:c8:c1:c8:f1:
1e:50:18:1b:8a:56:eb:fe:66:c2:c8:85:96:74:1f:
d8:16:d2:61:f0:48:4a:31:a0:46:ec:1d:09:6e:00:
ed:b2:dc:ce:20:5d:9f:c3:e5:60:b3:66:c0:51:b5:
07:05:1a:46:60:91:fb:09:6a:8d:08:a1:00:fa:a2:
c9:54:ed:7f:e9:34:3e:91:35:f6:e8:62:8d:c4:e9:
85:22:f4:7d:d6:53:7a:0c:4d:b0:5c:9a:58:3e:7f:
0d:76:5d:47:af:a4:13:81:bb:54:cd:f6:fd:29:ef:
b5:fe:88:01:d3:21:b5:fe:88:b0:ae:8b:50:b3:38:
e2:b2:24:e3:c6:7a:29:bf:02:7e:8d:7e:98:09:51:
c1:c2:ec:5e:00:ab:fb:53:bb:b8:0f:6b:93:c7:ca:
c6:d9:b2:2f:09:1d:22:1a:39:ea:b7:e5:d5:25:76:
65:05:90:e6:ea:09:b2:dc:23:17:33:ee:31:75:0a:
8e:75:80:80:c9:c5:ba:b4:be:60:81:22:c9:06:c8:
c9:56:a3:42:63:2a:d2:f8:33:62:dc:fb:92:30:b7:
61:16:46:5e:d5:b9:1e:d6:5f:5c:69:c6:be:31:f1:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:43:9E:13:ED:2E:C6:59:15:C5:12:01:7F:AA:EB:E0:38:C5:98
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:ff:ac:11:ad:35:74:03:d2:63:98:5c:3b:25:be:dc:c3:
d0:21:67:bb:dd:08:74:71:79:9f:35:ff:b6:10:52:4d:40:e7:
00:bd:0b:d0:3a:59:87:10:59:e7:82:20:37:7b:c1:39:35:ac:
8f:44:16:4a:db:01:ab:d5:ee:56:a8:0d:bd:02:17:84:09:b9:
ee:ca:0e:f7:90:b2:dc:d9:26:72:5a:f8:c8:61:39:15:f4:87:
00:1e:6a:b9:e7:11:e6:57:a5:b9:f0:2c:7c:9d:67:84:85:50:
df:30:2b:c2:b8:96:18:58:1f:8f:e2:c6:69:ea:15:26:78:ea:
6d:08:6a:03:e9:82:73:33:22:fb:5c:ba:d4:c7:d4:ae:96:39:
4e:8c:62:c1:22:4e:c9:ca:49:36:3f:9d:ec:51:e1:0c:c1:e9:
ae:42:16:11:d8:76:f7:2c:a6:2e:17:75:7a:44:d9:bb:88:b4:
2f:a5:7a:56:b8:ef:94:40:4d:4d:de:be:b1:b4:7a:9c:5c:24:
f8:80:cb:99:dd:a1:aa:1b:9a:49:eb:59:7b:ea:fe:a5:fc:02:
46:70:8d:a7:df:92:49:d8:9e:a3:a0:74:39:d6:6f:c3:0c:cc:
81:57:18:f1:fc:5f:d8:0d:d1:c8:72:75:c5:69:dd:45:cd:44:
7c:18:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client