Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: au9apHPqf4ALmlklyJXuR5YgBFJbop8Y/hdn5RFyiiw=
Subject key identifier: 94:6C:C7:37:7D:34:66:63:3B:8D:DA:54:BB:FB:6D:5D:AD:84:43:AD
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 01988167FF00A09D23C76DF2A9215E07825B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 127D
Signing time: Wed 06 Aug 2025 22:02:13 +0000
Manifest this update: Wed 06 Aug 2025 22:02:13 +0000
Manifest next update: Thu 07 Aug 2025 22:02:13 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: 9KcYyLBof/VzcTn5Y0WEMa+hDcaCa7jejMycbL5qFuY=)
2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:ff:00:a0:9d:23:c7:6d:f2:a9:21:5e:07:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Aug 6 22:02:13 2025 GMT
Not After : Aug 7 22:02:13 2025 GMT
Subject: CN=946cc7377d3466633b8dda54bbfb6d5dad8443ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:75:5f:93:05:2d:95:96:06:4b:10:95:33:
3f:e0:87:b8:13:60:4f:db:97:fd:7c:13:f8:4c:e6:
21:00:2b:28:60:40:b0:f5:c8:47:3e:ec:4f:db:aa:
77:72:cd:3b:a5:7b:a7:d9:30:63:a5:fe:62:51:c9:
e8:6d:a6:3a:90:a8:02:82:e8:4b:1a:1b:8f:68:4a:
e7:77:c7:4e:c1:a4:29:19:51:25:f0:b6:1d:c0:2f:
36:f6:97:d7:15:e9:eb:f6:98:77:66:5a:6e:67:8c:
e0:c0:c2:a6:36:51:fd:96:0b:06:45:7e:9c:d0:3d:
68:4a:26:04:77:a7:49:5b:2f:f7:6c:9e:dc:6f:0b:
1d:dc:64:cb:ef:db:7d:f8:b5:c7:4f:c3:ed:97:81:
68:10:48:b7:ea:d2:9e:3e:70:82:23:2f:4b:81:8a:
51:a6:6b:2f:b2:1d:d9:e8:f3:c6:4b:cb:b3:19:df:
0f:8e:e5:a1:4b:a9:d8:db:c7:aa:4c:a5:cd:f5:ef:
7e:a6:a1:9e:48:9f:5d:59:0e:76:67:56:ef:5e:13:
db:3b:c6:e6:72:98:ae:48:bb:65:9a:f7:07:39:82:
2a:7b:68:3e:b8:b0:29:32:b8:dc:f0:f3:7a:a8:db:
b6:84:5f:42:ef:fb:66:33:2f:0b:d0:6d:ae:f5:e2:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:C7:37:7D:34:66:63:3B:8D:DA:54:BB:FB:6D:5D:AD:84:43:AD
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:83:38:fa:83:05:c7:9b:25:91:a7:17:c0:56:83:c9:70:bc:
7f:0c:5f:12:bb:d5:78:57:bb:bc:da:b6:93:9e:32:78:5e:bb:
44:d4:5a:4a:a6:3e:7c:fb:1c:48:9c:fc:4a:51:6a:6d:7e:64:
fd:b9:39:67:15:ad:6e:34:25:17:b7:9d:84:ad:0d:21:29:27:
e2:b1:89:a0:ec:06:13:61:73:75:bd:b1:ee:21:a1:a5:2f:f0:
85:5c:97:b8:b1:7f:e3:3f:3a:f7:2d:76:14:4b:a2:4a:37:4e:
63:26:db:23:33:ca:8f:3b:6c:2f:c4:71:0e:02:ab:69:37:76:
1d:0b:c8:45:d1:8d:12:60:41:9f:b0:70:d5:dd:af:d4:ba:39:
c1:e6:4e:a0:a5:b7:b1:1b:96:3b:bc:8f:c5:86:2e:60:f9:0a:
d7:81:e9:07:5e:7d:73:d9:d8:ff:79:a6:1c:86:31:cc:23:6e:
8e:1e:5b:ea:19:8a:21:84:2e:26:d3:68:24:1a:8e:a7:4d:57:
ac:df:6a:82:d9:bb:f7:2c:60:50:d4:46:9e:ea:1d:e6:d6:e2:
c4:65:d8:56:9a:2f:d1:00:2a:bd:94:3f:ad:de:28:6b:36:44:
9f:f6:eb:bd:ca:e6:3b:6d:b3:8c:9d:25:53:3b:7c:d1:d4:c2:
0e:3e:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:06:35 2025 by rpki-client