Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File: IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier: HtMbY2imSBSxQybe6RahoFiOvN6ibXY2gfWjErFOeqA=
Subject key identifier: C4:07:6F:EF:AF:BB:19:CA:DA:CB:6C:A5:50:77:16:7A:D9:0C:F1:69
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 019775D2960956D07717995E52FC63B21F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number: 12D9
Signing time: Sun 15 Jun 2025 23:00:24 +0000
Manifest this update: Sun 15 Jun 2025 23:00:24 +0000
Manifest next update: Mon 16 Jun 2025 23:00:24 +0000
Files and hashes: 1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: nuYfllGFQ0tV9bkHf7QGS3D2Dwc6Pi6fHoRqmC9Bfpo=)
2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:96:09:56:d0:77:17:99:5e:52:fc:63:b2:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Jun 15 23:00:24 2025 GMT
Not After : Jun 16 23:00:24 2025 GMT
Subject: CN=c4076fefafbb19cadacb6ca55077167ad90cf169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:44:6a:4a:75:2e:b0:76:52:a4:78:66:1f:
d8:6a:89:35:90:95:7d:20:5a:44:e0:ec:66:d1:cf:
78:d3:e3:8e:71:54:b0:47:5f:da:98:7c:6a:30:c8:
2b:d7:ee:61:b7:3b:3e:77:db:fe:e7:50:f2:a0:78:
c1:8e:8a:50:cd:60:dd:10:bc:de:bc:6c:a0:5b:e8:
b0:68:a9:91:cc:e6:80:3e:7c:92:00:9b:71:38:d4:
fb:44:65:54:89:05:b0:24:25:f1:74:4c:54:7b:f1:
40:45:94:51:c7:a5:df:3d:d7:d8:99:be:66:3b:2f:
22:d1:21:a5:59:16:e5:36:94:79:0b:b0:a1:e1:ae:
01:2c:cc:db:11:21:9c:18:93:85:15:a8:e4:70:02:
07:21:59:ac:93:5b:5a:d8:82:d8:b3:0b:eb:94:2a:
c1:33:5a:c5:4e:7b:c7:3f:72:4f:bc:38:90:fa:4f:
48:8c:5b:10:1c:15:ba:f0:b5:8f:90:2a:85:fd:18:
8a:ff:5a:8d:be:67:c8:6a:40:32:6a:90:a2:f1:5d:
20:c5:5b:4c:da:ba:34:47:14:ea:6e:e6:86:1f:c9:
9b:cc:5d:2f:fa:60:ed:a2:50:8c:a1:3d:dd:fb:99:
2a:56:77:58:bb:bf:0f:a7:be:be:a9:10:aa:57:fd:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:6F:EF:AF:BB:19:CA:DA:CB:6C:A5:50:77:16:7A:D9:0C:F1:69
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:bd:20:82:64:e6:f0:24:af:57:b8:a5:48:28:25:63:b1:
1b:1a:6e:cc:0e:2a:6f:ec:34:44:57:c8:cc:6a:29:d8:bd:60:
9f:9f:91:91:f1:8f:dc:44:78:a1:26:e4:3b:b6:47:68:1a:8b:
e0:46:7a:d7:b8:a6:b5:53:01:db:9c:38:58:f4:80:cc:4d:e2:
9d:53:94:af:7a:fa:0c:db:ce:74:cc:fe:a8:08:ea:2b:ee:f6:
b4:c9:f5:d4:f3:19:87:82:0f:4d:c3:da:f0:cf:42:da:f5:4f:
43:62:7b:33:8a:66:8a:bb:4a:eb:12:c2:ee:4c:62:3c:f3:3c:
d1:96:02:e9:a4:44:ba:3e:a3:93:89:e0:b3:8d:0f:ec:42:22:
76:ac:6c:2d:b1:2d:e9:fc:36:1d:76:f9:e5:59:6f:be:29:b2:
52:38:26:78:ea:ee:fd:8d:aa:cf:92:c1:4c:d2:00:b7:12:b8:
bb:ee:44:24:c6:3e:1f:0d:f4:57:44:6f:b1:04:dd:0d:ec:84:
d3:e5:cb:45:16:9c:20:48:24:45:48:fb:ba:a0:9f:a4:f5:d3:
61:04:ff:55:ec:23:40:04:c3:11:d6:f7:3c:3e:c6:33:7f:65:
cd:4a:a6:b4:13:da:b7:2e:a9:0c:a8:b6:ba:a8:70:b8:72:e0:
36:4f:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:40:31 2025 by rpki-client