Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: fiFR/Xys0h4Z2OR2JROfwRqjxHDK6DunsEO8KmdZ0OM=
Subject key identifier: 18:9C:CD:66:B3:B9:DC:49:87:BA:C4:81:99:50:65:35:DF:F8:CA:B1
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 01984B8A429F5CC6B8B416E94E2CACEEB74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 05FE
Signing time: Sun 27 Jul 2025 11:00:08 +0000
Manifest this update: Sun 27 Jul 2025 11:00:08 +0000
Manifest next update: Mon 28 Jul 2025 11:00:08 +0000
Files and hashes: 1: 8A-P_ORhWgCvGzrDZbvgnuXv8-Q.roa (hash: oBZBRDrJFN8P0rq4HbYuCOhWt6Wuv4vtGNK+w0AylXw=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: et5TscUyGRzz60CRc/SJ27yVAeYq1ztyOLjwBlGqYSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:42:9f:5c:c6:b8:b4:16:e9:4e:2c:ac:ee:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Jul 27 11:00:08 2025 GMT
Not After : Jul 28 11:00:08 2025 GMT
Subject: CN=189ccd66b3b9dc4987bac48199506535dff8cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:a7:f9:cc:7e:45:d7:b8:90:d0:13:b1:d8:
d1:a5:5c:af:ec:46:0f:2f:2b:4a:e3:f6:14:66:bf:
31:d0:2b:4f:65:8e:3b:33:91:7e:45:3b:bc:b6:bd:
84:d0:9c:ae:47:09:9c:e8:3b:f5:d3:ce:5f:83:3b:
7a:a6:f0:ce:7b:86:7e:1e:f8:4a:27:f0:20:10:3e:
5d:6f:2d:3f:8f:23:78:3f:c9:8c:f6:98:39:10:ab:
63:23:fb:09:82:89:e6:3b:0e:cb:88:d3:9f:d6:02:
57:b5:9e:0d:54:e6:69:8f:eb:c4:fb:0b:8f:db:60:
c2:f1:73:14:07:94:d7:84:e7:b3:25:36:e3:b6:cc:
c0:c8:03:cf:05:5a:8d:68:72:dc:33:d3:e8:50:d3:
7d:b4:79:0a:90:d3:f9:02:cc:71:e0:f2:89:ca:d9:
1f:d4:c6:c6:98:c4:9f:3a:f3:00:5b:96:a2:57:6d:
d3:14:90:43:e5:32:c7:30:ba:11:97:34:6a:8e:f8:
75:c9:75:4c:e1:b8:89:06:e7:c6:81:d5:43:07:86:
ff:12:8c:39:6b:b3:aa:cb:2d:32:00:37:b5:fc:8a:
a1:b7:ec:2f:58:2d:8d:2e:b2:72:ac:7f:be:56:e4:
b6:08:96:f6:91:35:a1:18:a0:18:97:ee:5a:2e:8e:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:CD:66:B3:B9:DC:49:87:BA:C4:81:99:50:65:35:DF:F8:CA:B1
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:03:36:0f:d5:39:26:d9:fe:bc:15:b7:f8:3f:0d:4b:79:
5b:88:05:ef:e0:34:15:67:22:be:5e:70:88:31:54:c0:17:30:
5c:f3:53:ef:dd:e3:37:49:08:64:0d:f1:f1:20:15:81:09:72:
c4:cc:8f:fd:7d:82:28:1d:8e:bd:95:06:8b:fb:d9:b2:da:3d:
57:c5:ab:fe:2d:8e:86:98:78:3a:9a:b2:fc:e1:b0:45:f2:38:
4a:b2:5b:6e:cb:77:58:80:32:29:94:b6:02:02:9e:67:ce:46:
81:ce:89:9f:ef:dd:d6:fe:f8:6e:a9:85:d2:b3:bc:64:6e:62:
b5:5f:da:82:78:f3:dc:b1:5f:95:fd:86:7a:2d:3b:41:ec:38:
e1:eb:9d:c2:2a:cd:1b:20:e2:22:77:ad:c7:bc:8d:c1:ab:39:
18:d4:9f:ee:5a:62:b6:f5:72:60:a6:1b:ff:36:92:81:9d:a4:
4e:d8:71:a3:f5:05:d9:b6:f0:69:d8:78:83:fe:ee:9e:c4:b1:
6c:1a:96:7e:4a:ba:e7:b5:b6:0e:24:fb:ad:9e:35:d9:6e:f3:
aa:40:99:24:a0:5c:66:88:9f:11:9e:e9:24:d9:1d:9f:1b:8f:
64:78:94:65:3c:49:db:64:7c:e0:ab:62:8f:a7:8c:1a:b8:c3:
62:5b:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:23 2025 by rpki-client