Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: Q/mKN649ITAG178cKagHpDsdpV/9HHBaPyEv2UlzeQY=
Subject key identifier: C0:A3:55:0E:FE:16:CE:EE:AF:40:17:D2:A1:CF:F5:1C:A3:DD:48:CB
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 0199228C411E5D0BD8E58F260F6599B8AEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0CD7
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: eQg2Gv53bsDx+FGzTsrbCuKc+KZ1tHhsduC0CCmWkvg=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:41:1e:5d:0b:d8:e5:8f:26:0f:65:99:b8:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=c0a3550efe16ceeeaf4017d2a1cff51ca3dd48cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:ab:f6:40:d5:56:0a:c1:e2:2e:ea:9f:8b:
9c:2a:75:66:5a:6a:d2:10:f6:04:e7:2d:5f:4b:24:
e0:22:e4:19:1c:03:0e:34:be:fa:a0:67:17:3e:1f:
bd:6d:c5:d1:c5:d8:69:75:96:0a:4e:63:5f:21:9c:
a2:9a:f7:01:81:ff:e7:01:7e:de:16:c9:ba:db:9e:
33:a7:00:26:06:e4:4c:b3:e8:30:6b:0d:65:6a:00:
bb:ed:7a:3d:66:69:ec:d7:e7:58:2d:c8:db:41:52:
d3:ab:db:79:e5:d2:b1:b3:97:86:ba:34:94:16:96:
6d:fe:b2:a9:bf:d8:e4:bc:c6:9b:dd:68:c5:5c:fe:
85:25:06:ae:c7:f1:47:b4:af:80:8b:e4:8b:fa:a1:
e0:2a:15:d5:4e:c7:da:77:27:32:18:86:b8:74:39:
c7:c9:20:76:c4:f7:8a:fc:38:9c:d3:da:e6:a7:46:
b5:b5:f5:cd:7b:a9:56:54:71:05:03:c4:85:6e:d9:
52:f8:57:67:a4:b9:3b:81:4b:8b:48:e2:41:5f:3f:
54:52:61:d3:98:e9:60:fe:09:58:46:cd:d7:24:d3:
f6:3d:be:1c:cf:9d:a7:54:94:b7:d7:bc:5b:da:56:
53:1b:c0:fa:43:93:95:e3:cb:d8:a0:fd:92:83:5b:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:55:0E:FE:16:CE:EE:AF:40:17:D2:A1:CF:F5:1C:A3:DD:48:CB
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b4:dd:ce:bf:b4:a6:ab:c4:f1:f6:8b:6e:e6:85:ef:98:33:
2e:87:e2:5c:79:5a:99:c4:91:b4:27:f3:4b:1e:69:06:ce:0a:
bd:a6:67:08:14:8b:78:d6:53:32:be:d9:0c:1c:7f:69:e5:6e:
ba:5a:de:c7:8a:3d:2a:c7:ee:a6:e8:4f:a1:96:3a:3f:2e:df:
89:ed:34:41:61:9c:d5:08:fd:a3:46:90:51:97:a5:b6:28:29:
43:de:0f:3f:7e:ad:2e:fe:8a:2f:b5:ef:f3:51:23:83:6b:3d:
32:19:b0:3d:76:39:76:a5:da:a4:69:30:0b:7a:26:8c:9b:93:
74:d7:6e:65:77:57:2c:82:4b:ef:a2:5c:49:3e:77:48:1d:db:
27:84:66:87:23:56:e7:86:f5:bd:00:99:5a:3a:2c:72:fd:10:
4a:1f:c3:d1:e5:e8:3a:42:62:fb:52:d5:b2:e9:f6:7a:3f:49:
bd:70:b7:a9:80:04:e8:14:39:df:8c:9d:fe:ea:5e:2c:fa:0f:
d7:e0:76:37:f2:9c:b4:fc:a3:3f:6e:7f:01:e2:a4:31:ef:a1:
76:82:c7:e9:25:1f:63:ba:2c:ea:2e:41:a7:01:7f:b6:b7:ac:
fa:6d:fd:56:78:a5:76:70:38:11:e0:ed:ef:d5:3f:48:03:3b:
f9:71:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:08 2025 by rpki-client