Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: ALvzyxMcJe4UbFySljsQyPLkL5dX8lEKr0pB5rTV0Qc=
Subject key identifier: 5B:AB:CE:66:6E:04:13:E2:08:60:BA:D5:0F:60:91:AF:A0:88:09:34
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 01974EC50E1A35A80BC2057B3ACC4F2A78FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 04DB
Signing time: Sun 08 Jun 2025 09:00:26 +0000
Manifest this update: Sun 08 Jun 2025 09:00:26 +0000
Manifest next update: Mon 09 Jun 2025 09:00:26 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: 1LssaSFWck1LPDJWSq/R/ywxQVwqvOdapbXzXw9ESMA=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:0e:1a:35:a8:0b:c2:05:7b:3a:cc:4f:2a:78:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Jun 8 09:00:26 2025 GMT
Not After : Jun 9 09:00:26 2025 GMT
Subject: CN=5babce666e0413e20860bad50f6091afa0880934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:12:ba:98:97:f4:75:ed:55:44:4d:17:00:
c5:e5:23:4a:7d:5f:7d:2a:32:d8:d3:d5:98:88:1f:
3e:09:8f:17:ff:b2:f1:69:f2:3e:da:09:c7:48:40:
83:e5:64:96:88:c0:15:23:dd:00:90:71:97:40:58:
e3:5f:93:66:0e:fa:d0:7a:2a:12:ba:66:c9:d6:3a:
b3:43:e5:a7:8d:3a:f9:b6:02:f2:43:f5:b4:90:12:
5b:85:89:99:f2:e4:71:cf:08:e2:7f:a2:24:21:43:
25:0e:33:b0:8c:2d:99:41:69:21:81:6b:77:83:f1:
ef:cd:02:7f:3d:e5:ad:07:bc:c6:83:b6:e4:60:2b:
1a:73:db:ea:87:da:04:00:9a:42:1a:78:b7:92:be:
72:07:39:d9:2a:c8:0d:b9:55:2b:df:6b:cc:47:02:
44:f4:7d:74:c0:e3:84:6c:9b:7c:94:ee:67:c1:aa:
c1:74:0b:da:ed:9e:2b:e9:12:fc:c4:b9:fd:ed:13:
74:09:9c:34:07:ac:fb:a3:30:d1:bc:66:1c:02:76:
1e:3f:44:e1:35:f0:86:69:12:84:e3:bc:89:8a:e5:
49:d8:05:28:d2:74:32:e7:a1:f5:48:81:98:83:eb:
4c:5f:6e:72:b6:da:29:07:a5:fd:db:4f:38:c6:34:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:CE:66:6E:04:13:E2:08:60:BA:D5:0F:60:91:AF:A0:88:09:34
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:12:51:82:fe:5e:a0:2d:99:f7:d2:7c:31:84:07:f2:84:
e5:c5:4e:55:38:7d:0f:1a:88:61:b6:e7:48:00:ae:64:b4:fc:
86:fd:2d:e3:a6:b7:93:f2:ba:fe:a9:d5:0b:30:00:c2:4d:36:
a9:23:9e:e5:a4:2b:eb:1f:9a:f8:b9:fd:02:e4:72:8e:eb:fb:
3b:0f:01:ac:e4:69:1e:2a:e8:fe:03:1b:06:87:3a:6a:05:1b:
b5:8a:c2:f3:03:f4:5f:89:87:f9:03:14:d3:8e:bd:0b:f9:00:
0c:e0:1f:13:b7:d3:62:fa:dd:6a:95:c0:cd:61:6e:98:59:5d:
9e:45:0c:91:94:f4:e6:e6:8b:93:54:71:e3:bc:66:f6:d7:8f:
f5:70:cc:52:fb:ef:0a:60:26:9a:3e:02:1b:c5:74:3c:63:d5:
24:9a:8b:00:81:e7:e9:8a:f2:72:75:f9:2f:56:63:aa:7a:a9:
2b:73:5c:e1:e8:01:04:d9:ff:b4:9d:4e:35:81:67:de:0f:d2:
6b:95:3e:8e:df:ce:48:8d:44:e1:72:20:94:a8:c3:2e:18:b9:
8b:8d:62:e2:55:cc:86:ef:20:66:8e:c1:af:67:9c:86:37:a4:
45:a5:be:7e:0b:d8:22:f2:36:19:75:2c:27:54:66:d4:0d:ad:
6d:e3:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:34:09 2025 by rpki-client