Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: UWkdkbGczkNdV0rdp57iYzDfzdQStZoS9QzTHvfXnL4=
Subject key identifier: 93:B7:87:AE:CB:A7:36:55:71:33:2F:77:38:DD:37:CA:DF:18:58:66
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0199221EB4A3485EA1833F840315FECD686C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 05CD
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: PpRGHn9+I+VwyDewTMe+aNpK3VFagTJ3wjTDicHd+lA=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b4:a3:48:5e:a1:83:3f:84:03:15:fe:cd:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=93b787aecba7365571332f7738dd37cadf185866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:5e:66:8d:36:ac:bd:84:12:8f:78:23:24:
4b:d4:aa:53:3e:fe:41:05:e0:35:e5:6f:a1:4b:4a:
28:5d:3e:df:67:e5:01:cf:51:23:95:4f:18:a0:46:
5c:87:2d:4a:ff:47:50:c6:f6:a4:ac:33:31:d7:78:
76:21:ac:c3:2b:32:5f:5d:03:1b:82:61:74:8e:d9:
ae:26:1a:98:5d:e7:8f:4c:92:36:d5:1b:4e:08:35:
8b:a5:d1:12:21:2e:0c:db:9c:a7:ce:15:a8:e0:64:
e5:08:c1:f4:1f:09:a6:1e:31:8b:ae:63:bc:0a:49:
a1:54:9f:72:f9:3f:c6:24:11:3c:be:f8:ba:08:e8:
fc:2d:cd:3b:27:af:50:93:8e:1a:43:23:af:6b:ad:
f2:f3:e1:99:85:c7:43:4b:90:1e:fe:a0:01:36:21:
1e:ec:27:c0:42:da:fe:b9:7c:ff:01:4d:e8:54:14:
ae:cd:34:58:bf:d0:64:65:f5:ac:78:a4:52:76:18:
06:7a:78:fb:7c:b3:f6:91:b7:63:eb:ed:42:7e:e9:
f4:49:1b:ce:16:db:f5:8d:c3:df:03:e6:97:d9:ba:
88:5e:07:83:90:55:63:87:cb:50:09:92:fe:02:99:
e9:1d:a7:70:46:c4:68:3f:b1:ee:22:43:c0:1e:6a:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:87:AE:CB:A7:36:55:71:33:2F:77:38:DD:37:CA:DF:18:58:66
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b7:ef:1c:2b:6b:ee:35:43:05:b3:ce:f3:70:3e:d1:d7:c9:
38:b8:62:41:65:8d:c1:3e:f3:38:a3:0e:3e:80:98:cf:f0:6e:
76:66:2f:17:23:61:f2:ff:b2:ff:d0:65:a4:a1:dc:ff:ed:17:
98:17:c6:aa:11:71:33:1c:bb:af:19:f1:9f:90:f4:a4:f1:ef:
11:5f:13:81:cc:0c:49:3c:7c:b8:6a:94:f6:81:3d:14:49:6d:
87:54:0e:e6:19:94:16:8d:2e:34:13:e6:11:f7:a4:9e:5b:db:
bc:35:70:d5:9e:b9:81:51:3a:e4:2e:03:ba:f4:0c:1c:f3:1c:
6c:ff:32:d1:f9:fc:88:78:42:1b:c1:ed:17:79:72:68:b7:59:
2a:99:7c:a2:a2:18:da:b9:9b:2b:2c:9e:e9:eb:66:2a:ed:e4:
6f:ce:e9:08:d8:10:1a:10:ab:78:87:62:a4:8b:d7:52:6a:c9:
03:74:a0:ca:b1:ce:1e:0a:60:98:97:87:b1:fc:99:6f:7f:96:
7c:1d:c4:f2:f4:34:00:48:8f:31:94:5b:14:92:5f:0f:3c:bc:
11:36:0c:4b:b3:08:62:18:49:05:6e:f3:9c:99:72:ac:4e:43:
68:b4:8b:00:31:e7:c0:ad:e7:4b:bc:1a:7f:e2:3a:21:72:69:
1a:ac:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:26 2025 by rpki-client