Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: Z5qq3nIxItPT13ZSDdP4x7rmMtAp4u4XLnL6WQxdei4=
Subject key identifier: 67:8E:DD:24:87:16:BE:A4:26:AF:4E:B7:FC:DC:9D:FD:79:39:60:AE
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0198933688DA13F7BBC74F3859495915041D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 0583
Signing time: Sun 10 Aug 2025 09:01:21 +0000
Manifest this update: Sun 10 Aug 2025 09:01:21 +0000
Manifest next update: Mon 11 Aug 2025 09:01:21 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: xzr1jgX+eTDDIl/g9NTlDUB77QAss336XuySjNCoR88=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:88:da:13:f7:bb:c7:4f:38:59:49:59:15:04:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Aug 10 09:01:21 2025 GMT
Not After : Aug 11 09:01:21 2025 GMT
Subject: CN=678edd248716bea426af4eb7fcdc9dfd793960ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:cf:bb:02:df:d0:88:76:0c:c0:7a:82:26:
29:08:17:55:ce:3e:4c:1a:e9:a1:ad:5c:ae:2d:4a:
14:45:82:28:5d:0f:47:92:b7:f9:26:ff:37:40:91:
7b:74:ef:38:79:ed:e1:8b:e7:2e:bd:fa:19:14:45:
5b:88:29:88:28:70:2b:80:0b:9b:99:2b:1f:51:ee:
81:67:d6:89:c0:56:07:c0:0f:33:94:e7:38:7b:da:
50:d5:53:00:8d:69:3d:f4:05:b8:20:ff:1f:4e:ee:
74:8d:f4:bc:aa:c4:e8:b1:af:97:c8:6f:3b:de:d0:
11:d4:cc:0f:f4:9c:a2:f0:9f:8f:17:59:3a:35:ca:
e6:5f:09:ba:4e:37:20:49:2c:54:81:65:af:af:5e:
69:4c:d4:23:15:97:1d:5c:2d:05:44:84:33:99:28:
e0:81:14:aa:23:19:43:4c:f0:42:38:77:40:5f:8d:
e0:be:07:27:8d:71:6f:7c:59:ed:ed:88:38:3c:ea:
54:77:92:d1:e4:03:d2:cf:a9:71:fe:5c:5e:85:08:
30:10:64:74:fd:60:3c:b1:6d:cc:59:f9:f5:50:f6:
be:e7:69:29:1f:68:4e:88:43:90:57:d7:bc:21:b2:
54:f1:89:b6:e0:d8:3f:96:07:78:27:20:98:1a:f4:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:DD:24:87:16:BE:A4:26:AF:4E:B7:FC:DC:9D:FD:79:39:60:AE
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:9a:03:fd:8d:f8:33:ff:42:6c:e8:02:92:e4:34:44:6f:
4b:18:59:ba:69:43:05:96:9f:7c:2b:a3:92:c4:f0:ba:68:9b:
61:f8:a1:6a:1f:cd:d1:6d:7c:8a:48:46:8a:c3:73:cc:fe:f3:
37:b1:2a:af:27:f4:de:3e:61:0d:e4:7f:bf:8e:ff:8b:68:7c:
3a:49:85:a2:3c:23:ae:87:36:1c:2e:7b:45:36:6c:1c:f0:e6:
9e:68:dd:34:8c:0d:64:72:7d:20:58:cc:18:0f:3a:96:f8:ee:
ee:d5:ce:e8:fb:d1:13:f3:79:33:41:77:47:47:e4:3f:97:9d:
16:57:fa:bf:cd:97:47:d8:83:ff:b4:2b:86:40:df:9a:71:94:
98:c2:f6:2f:c1:a3:02:1c:ee:96:05:3d:18:74:dd:26:02:28:
32:cd:40:50:1c:a3:a6:28:4a:54:65:f8:0c:4d:8d:5d:88:71:
97:df:75:35:e3:9c:d1:2f:03:0d:4c:21:de:bf:c2:b6:03:b2:
d7:7d:d3:fb:6d:f8:9b:45:ca:e4:9e:44:ad:c2:ae:93:11:ac:
ce:b2:93:01:a6:9d:d5:cb:24:a7:c1:b4:46:92:52:4c:a5:00:
50:fd:ee:02:c8:41:be:75:5f:4a:62:21:16:db:83:5e:2b:00:
47:a0:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:11 2025 by rpki-client