Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: EP6tQDSZgLJcLtGWV6+nl1GWmFpIy+uj5O9AvFFjZb4=
Subject key identifier: 0F:66:64:14:1E:2A:DB:53:DF:A3:EF:77:B3:B9:78:B7:E4:9C:B4:F6
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019847ADC58D625DBA0636DEA643D5691050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0287
Signing time: Sat 26 Jul 2025 17:00:27 +0000
Manifest this update: Sat 26 Jul 2025 17:00:27 +0000
Manifest next update: Sun 27 Jul 2025 17:00:27 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: 1+0DQl70AwoYBxctUae9O4YBjCiSzIh8zpF2bIYccSo=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:c5:8d:62:5d:ba:06:36:de:a6:43:d5:69:10:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Jul 26 17:00:27 2025 GMT
Not After : Jul 27 17:00:27 2025 GMT
Subject: CN=0f6664141e2adb53dfa3ef77b3b978b7e49cb4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:46:fe:bb:46:29:b5:76:08:b5:ee:fb:a7:
1e:e8:b1:26:3e:d1:2a:6f:b3:1b:e1:4f:a9:6f:0f:
f9:0d:21:ec:35:6e:22:1e:f0:ca:52:1b:36:6a:53:
e1:26:c2:cc:49:44:04:cd:3b:38:ad:8d:0d:65:c2:
3b:64:59:e4:31:58:9d:98:97:f7:61:b2:6b:3e:43:
04:b2:92:bd:2b:48:ea:7c:76:39:76:20:a5:0b:11:
73:c9:97:d1:09:f7:3c:1b:c7:a2:4f:4f:31:60:91:
b7:7d:90:0f:51:3d:d3:0d:2a:4b:f6:77:31:b3:4e:
e7:11:4d:df:c3:07:46:7e:32:cd:fa:89:e1:d8:31:
3b:fc:27:2f:bc:56:bc:19:3f:ad:6f:3a:8b:14:2b:
79:94:a4:00:2b:67:6e:34:0c:f3:52:de:66:41:32:
43:2b:69:7f:2d:d9:2b:95:35:3a:82:81:75:34:13:
7b:18:f8:e0:21:ee:ba:1f:4f:c9:e7:bb:b7:25:3e:
f3:58:34:f0:54:db:93:07:10:23:05:e2:f3:d6:d8:
33:bb:1c:67:ce:04:6c:3f:ce:24:30:46:c1:23:dd:
41:c3:77:e6:42:39:77:c1:35:6d:dc:88:b8:40:60:
ad:c8:38:c5:ec:80:69:1e:8f:76:9b:6f:11:29:f5:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:64:14:1E:2A:DB:53:DF:A3:EF:77:B3:B9:78:B7:E4:9C:B4:F6
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:63:03:a5:b6:d2:d7:ca:9c:8b:9e:c1:54:ea:69:78:8b:d2:
93:14:ef:e3:31:25:d2:25:d7:fd:f2:68:b8:69:08:ce:46:39:
f6:81:f0:17:bb:10:8a:66:d4:bf:6a:e9:1c:2c:c4:99:03:c6:
77:a5:47:a3:fd:57:16:44:cd:d1:17:aa:b2:51:14:4c:82:47:
fb:0a:17:0b:5f:de:34:3f:27:1d:2f:fa:e6:c2:5b:4f:36:dd:
6e:66:14:c6:a5:52:35:e1:1b:cf:e5:36:86:ed:00:0c:da:2b:
33:18:20:ea:61:4e:2c:ad:9c:08:c8:d3:2d:5a:3f:2d:ed:f5:
0f:ae:26:d3:a4:80:eb:0f:c4:32:ca:e9:58:34:3f:12:91:70:
1e:7e:88:51:a3:e3:ba:dc:cb:96:33:bd:b1:b9:d2:f5:c7:21:
60:bb:a3:a6:b3:1b:05:44:69:80:f9:c9:67:62:68:54:f2:38:
18:7d:e3:5d:c0:1b:90:68:26:62:d7:a9:73:00:12:d7:38:b0:
7a:34:e3:86:0b:21:19:74:73:8f:cd:04:b1:35:fb:4b:b8:85:
41:0f:65:98:7f:82:2e:52:52:1c:5c:94:ee:64:ae:66:6a:bc:
59:96:11:32:bf:ee:f5:29:0c:47:d4:6d:56:34:91:51:d3:76:
3e:c0:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:27:04 2025 by rpki-client