Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: YIuYG0FUU2rYa1ZGFUECpBYdXjsmma9GfymXkM3IZMQ=
Subject key identifier: 2C:7B:40:37:CC:3D:BF:A7:07:62:E4:45:D6:45:B6:9A:30:AC:BA:13
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 01974A7B2F66FA848939CD664EB13A036EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0F4C
Signing time: Sat 07 Jun 2025 13:01:16 +0000
Manifest this update: Sat 07 Jun 2025 13:01:16 +0000
Manifest next update: Sun 08 Jun 2025 13:01:16 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: 75lPvjcbY8UhV+2BM6H5VquxPZGX3IOxYbDIxMa+Whk=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:2f:66:fa:84:89:39:cd:66:4e:b1:3a:03:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jun 7 13:01:16 2025 GMT
Not After : Jun 8 13:01:16 2025 GMT
Subject: CN=2c7b4037cc3dbfa70762e445d645b69a30acba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:70:33:63:d2:e9:a3:41:c6:8b:1f:6b:ad:
f3:2b:46:da:18:24:c5:99:86:23:40:43:b1:9b:86:
68:eb:c2:b5:af:d3:fb:f0:fc:6e:49:9c:8a:c0:fe:
0b:67:8f:78:de:fb:65:2a:4f:5e:d6:fb:e8:48:f7:
6f:72:b9:b7:f3:61:ab:48:25:97:6b:f4:67:79:ba:
ba:61:16:95:5e:b7:54:ba:0b:c9:c1:d5:29:51:e9:
cf:8f:3d:5c:42:28:b5:c3:d3:16:a0:1b:11:d5:8f:
c7:e2:1b:ed:51:7d:ac:51:65:50:7e:8d:13:af:f3:
22:91:9e:13:21:6d:1a:ee:f5:3c:15:a8:93:b8:6b:
0b:83:85:f8:c0:27:df:0d:bd:88:92:e1:6c:28:46:
ac:3c:68:9f:9b:a6:86:fa:72:28:bd:30:8d:a5:39:
21:4d:2a:91:9b:d6:97:49:1b:dd:0d:c0:b3:8b:50:
8e:d1:93:50:2e:27:b0:35:84:24:a4:8a:ab:6b:a1:
f6:3e:ff:04:a3:1c:ef:77:73:96:f8:e6:db:8b:9a:
27:3c:2c:8b:78:89:2b:ec:78:a8:3c:76:6e:56:c8:
b4:ef:2e:87:75:23:93:58:c9:35:f2:63:f5:02:d1:
7f:a1:83:24:c1:d2:89:83:29:00:a1:a7:9c:d3:9a:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:40:37:CC:3D:BF:A7:07:62:E4:45:D6:45:B6:9A:30:AC:BA:13
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:52:fb:b4:0b:6e:34:50:de:c8:a0:c3:5f:67:ee:63:54:
51:31:46:0f:39:6a:22:ea:ec:bb:96:42:af:c2:0b:9c:4a:2c:
cf:69:60:eb:13:0e:ca:2c:89:28:67:34:36:93:8e:ca:36:91:
79:d2:35:02:2b:0c:6a:ec:12:3c:28:64:69:3a:8b:0b:7a:65:
2c:02:22:2c:91:36:de:7b:52:78:c5:4f:c0:1b:83:68:85:4d:
f7:92:06:52:f3:52:17:bc:ec:23:e3:48:5c:cc:2c:2e:12:b7:
92:42:f2:22:cb:80:b7:8b:a8:b2:63:2d:bf:60:de:42:29:a1:
ce:46:55:44:79:ca:58:15:44:19:17:0b:3d:02:5b:80:1f:e8:
19:51:9a:3f:95:4f:a8:48:fb:25:3d:18:6b:44:fd:85:12:b6:
ff:91:83:db:3b:2b:4d:6c:5c:31:0f:1e:0e:30:52:3a:c7:5e:
ad:61:a4:49:12:94:50:fc:01:54:72:3f:0b:74:d4:9c:12:7e:
a3:8b:a7:d9:0e:8b:d8:cc:20:4e:94:c8:ae:77:fe:33:81:39:
0a:e7:c0:0c:37:f9:b8:a0:1c:ef:59:6f:8d:8b:10:98:6c:5a:
4e:58:f0:b3:0c:57:e5:3d:53:3b:4a:42:92:ba:cf:fa:5a:0c:
8f:52:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:36 2025 by rpki-client