Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: Vv9SLQVZXPsMXXrd8OAuK7WhShS4V//TgFa41FH/9YU=
Subject key identifier: 35:73:43:79:EC:AF:26:72:62:9E:6B:FD:2F:7E:72:13:31:1B:8C:15
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 0198481BB0A962CC23DD74F981DB28D25BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 0182
Signing time: Sat 26 Jul 2025 19:00:30 +0000
Manifest this update: Sat 26 Jul 2025 19:00:30 +0000
Manifest next update: Sun 27 Jul 2025 19:00:30 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: XOx1G3rbr/1+IJVUs+9K1MONwJKIAY8vXxR4M9n/5JQ=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b0:a9:62:cc:23:dd:74:f9:81:db:28:d2:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Jul 26 19:00:30 2025 GMT
Not After : Jul 27 19:00:30 2025 GMT
Subject: CN=35734379ecaf2672629e6bfd2f7e7213311b8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:fb:be:aa:53:50:d1:0f:2d:64:de:b1:2c:
17:18:8a:91:e2:3b:5f:64:1c:ad:fd:60:b5:1f:9b:
a7:ee:fc:35:e0:83:fa:d4:a0:88:f4:1d:d8:95:9f:
1e:30:58:65:62:28:91:91:ca:4b:ce:f6:68:a4:06:
01:98:77:ed:75:26:d0:a9:a8:32:bc:69:57:fd:70:
2d:74:a5:61:29:1b:b9:16:1f:f4:5f:03:03:0e:64:
b0:36:3f:27:52:a2:71:1e:b5:05:f0:6d:2f:c7:4b:
de:86:97:f9:26:bd:78:9c:e0:0e:44:b6:6b:8f:60:
d5:82:f6:e4:ca:b6:2f:39:73:87:a1:b3:0b:5d:e0:
86:b2:b2:0a:e9:f7:8f:44:94:f9:a9:e4:61:40:b9:
4e:53:2d:ca:97:f8:4c:f3:c0:d8:d4:db:64:7e:45:
72:06:a4:28:f3:b5:f3:ac:c9:91:a7:a5:da:08:ea:
fe:f2:1a:86:ba:63:57:b3:51:9b:99:cb:00:86:f0:
52:8f:48:d5:48:8a:e0:95:b0:96:89:5e:28:6d:43:
12:8f:4e:02:33:a7:00:71:b3:13:7b:2f:3e:e1:39:
69:b7:94:8d:03:df:91:b4:bd:ff:21:a0:c2:c1:b3:
45:d2:48:95:f7:32:27:25:62:18:d3:ba:31:d8:06:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:73:43:79:EC:AF:26:72:62:9E:6B:FD:2F:7E:72:13:31:1B:8C:15
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7d:21:4f:1c:6f:ca:c4:87:7b:c8:32:5d:01:79:8e:90:fb:
77:25:72:22:10:5f:75:99:21:2c:75:26:4b:81:aa:a2:d4:04:
45:b4:8e:cd:ed:67:d8:89:c1:79:ce:f6:10:41:b4:5e:8e:bd:
85:ab:f2:2f:f8:75:c8:d1:a0:00:ed:e1:db:6b:cf:74:f5:e9:
db:48:37:de:35:0e:7f:9b:89:5b:f7:a9:0c:b9:1e:78:67:05:
85:b3:8a:bb:63:e6:cb:7a:a7:c2:31:f9:7e:02:29:ec:1e:6a:
40:8b:86:6f:db:42:6e:0d:5f:12:ee:75:b6:c0:fd:07:75:49:
a8:f4:2c:aa:56:f4:f0:98:55:3c:e3:6d:a3:1b:d4:41:35:80:
42:c0:ce:dd:dd:5c:3d:b9:a0:8a:70:fa:13:77:d4:a9:ad:63:
96:92:03:ff:23:f2:01:35:8f:b2:25:ef:0e:06:71:80:86:41:
ac:ee:62:73:9d:6d:d3:9a:6d:7c:03:48:26:81:22:6a:49:8e:
16:ef:8d:a1:b0:2b:e8:85:a1:9c:6e:30:4a:73:d3:d1:cb:d1:
38:83:4f:e2:e4:3a:43:17:15:f0:6b:72:f1:d8:8c:73:a8:91:
b3:5a:b2:bc:cf:37:1e:5f:16:f1:59:45:10:89:a1:f4:ef:e3:
80:ea:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:05 2025 by rpki-client