Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: HCqbaWIBDcnRFqtL4bX/ZwtPWVMTcIJi/vHypE14Gac=
Subject key identifier: 49:C8:99:B0:F4:65:D6:05:29:E5:99:BC:E3:A6:84:3A:E6:23:10:41
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 019879AE29BE1004BD759FAB39740B4B5171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0FE9
Signing time: Tue 05 Aug 2025 10:01:53 +0000
Manifest this update: Tue 05 Aug 2025 10:01:53 +0000
Manifest next update: Wed 06 Aug 2025 10:01:53 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: YrHo+93J5f0U7q8ebn6LE3xQeOHhmt4BEBWRE8SoQYA=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:29:be:10:04:bd:75:9f:ab:39:74:0b:4b:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Aug 5 10:01:53 2025 GMT
Not After : Aug 6 10:01:53 2025 GMT
Subject: CN=49c899b0f465d60529e599bce3a6843ae6231041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:87:83:f0:e7:7f:91:88:a0:0d:b2:b6:77:
b3:9b:d3:65:7b:89:cf:44:fe:79:09:47:f2:8a:ff:
8d:26:80:d4:9c:4a:8e:eb:0b:85:80:91:28:dd:d1:
7b:5e:be:a6:9f:98:5a:3c:af:61:8a:b5:21:89:39:
89:2f:16:a9:46:a6:93:63:ce:f3:41:94:c2:91:99:
cf:61:05:22:ca:42:10:fa:74:ff:94:25:f5:1c:f1:
20:b4:97:06:69:d9:2c:3c:a1:75:85:4d:59:aa:f0:
3c:59:24:32:ff:0d:48:db:37:da:06:ef:60:8f:0c:
7c:2c:f7:6f:88:30:c0:3a:ae:50:2b:c3:fc:cc:bb:
67:07:f3:14:2b:d4:d5:88:9d:cc:9d:0b:b3:a4:2d:
b3:e3:f2:78:cc:7e:88:eb:92:d0:ac:2e:65:97:1a:
8a:a4:cc:5c:77:6e:d7:6b:9a:05:5b:57:77:af:4a:
9e:1e:19:90:a5:f4:c8:41:6b:12:17:a7:93:2e:11:
1c:70:1c:8e:20:b9:d9:9d:83:34:25:78:8b:a3:64:
d9:76:04:db:80:c4:4c:ed:83:bc:f8:f8:61:f0:e9:
15:35:fd:52:30:81:fb:e9:30:4f:ec:30:84:00:ca:
10:d6:c1:b5:df:25:00:b7:1e:c4:1f:07:6c:b0:1d:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:99:B0:F4:65:D6:05:29:E5:99:BC:E3:A6:84:3A:E6:23:10:41
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:25:97:ee:cf:36:06:20:ea:9b:73:90:2e:3d:49:85:65:a2:
6a:00:ed:4b:fa:c6:fa:aa:fb:70:12:80:43:89:df:69:f6:4b:
4c:a6:79:b6:3b:98:b3:30:1f:e6:10:ed:9a:66:89:e2:f7:99:
65:57:d3:18:3e:b9:f4:61:2b:3a:81:8a:9f:3f:d0:d4:0d:91:
eb:a9:b9:70:e4:8f:14:c1:61:3e:ca:54:f6:51:79:f6:0c:c4:
7b:5e:e3:a8:4e:da:40:d3:8b:ce:38:35:c3:27:0d:6f:26:d2:
95:83:e7:90:0a:7e:9b:73:3a:f4:91:fb:c2:ae:00:23:d8:6b:
2c:c4:34:98:2a:8c:af:11:0c:01:e8:68:ed:0f:0b:db:9f:4a:
dd:5c:80:89:87:90:91:8b:8b:ca:e0:6e:52:25:7a:e5:48:86:
eb:e6:13:32:4a:23:9f:c7:18:fe:ce:08:3e:ff:d9:83:e5:06:
c8:29:40:f6:7b:71:ac:69:e0:20:32:9f:b7:7a:35:e0:a1:e1:
8c:cc:84:51:1b:a2:05:66:3a:74:d8:3d:37:97:14:ed:57:d8:
5d:dd:4d:a7:bb:fd:24:15:cf:18:30:09:e6:11:21:1f:5b:2f:
76:44:90:a7:b2:81:72:91:d9:6c:04:c4:4c:7b:01:5b:4c:f0:
3f:8d:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:28 2025 by rpki-client