Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 13KmDIHAIWm43/8WGBZ6lAf8LqebdW8jsD+iHVonLdg=
Subject key identifier: 84:79:CA:B7:C6:F8:A7:FF:6F:A1:3F:42:24:A8:BA:7D:BB:B1:12:1D
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0198578F0B8CFAFB41B3A07DCD60EB553877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 02DD
Signing time: Tue 29 Jul 2025 19:00:48 +0000
Manifest this update: Tue 29 Jul 2025 19:00:48 +0000
Manifest next update: Wed 30 Jul 2025 19:00:48 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: 741HshUgWdh9Rmiw6ObOs/OP6xaMGQd0IR0U94gcWCA=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:0b:8c:fa:fb:41:b3:a0:7d:cd:60:eb:55:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jul 29 19:00:48 2025 GMT
Not After : Jul 30 19:00:48 2025 GMT
Subject: CN=8479cab7c6f8a7ff6fa13f4224a8ba7dbbb1121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:8d:ca:9b:62:f6:42:db:e1:a5:9c:c3:a2:
8d:19:c7:3c:ba:e0:1c:f8:66:50:95:a9:ef:10:eb:
a0:75:67:1e:c4:18:d8:01:0f:e6:1b:9e:c2:af:0d:
33:d4:05:0e:3a:66:73:eb:d9:26:ba:74:e4:ff:8d:
22:57:ff:d7:95:07:c9:ea:0e:fd:5b:90:0a:c0:ef:
4f:ae:c0:35:79:29:02:55:bf:16:33:d4:3d:ce:ae:
27:f4:32:f2:7b:c8:0a:bf:f5:28:d9:9f:09:e1:ec:
08:56:df:76:f6:7c:05:ec:d3:57:45:09:df:a1:bd:
14:e5:15:07:00:00:73:9a:5c:a0:8c:db:55:e3:ad:
c3:8d:06:89:c4:6a:4b:5b:75:62:4e:46:f5:79:ff:
5b:a5:0f:50:bf:11:13:d0:76:e8:2d:4f:55:66:ac:
a2:3d:c1:31:f3:8b:23:6f:ff:53:34:be:b9:0c:7d:
96:b6:46:d2:64:09:68:a1:59:a1:74:ab:8e:09:91:
36:0a:9e:01:7d:08:96:62:db:44:8f:5a:d9:e5:f5:
7e:02:e6:e8:fc:6c:cb:73:12:2b:f6:c8:41:52:c3:
7f:12:1d:13:14:6b:8e:28:a0:f1:00:7a:86:b2:cf:
64:26:50:9c:6d:17:46:98:f4:eb:ac:19:a5:57:0d:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:CA:B7:C6:F8:A7:FF:6F:A1:3F:42:24:A8:BA:7D:BB:B1:12:1D
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3f:45:25:a0:9c:a9:46:a4:75:3f:cb:ef:6f:f4:14:63:44:
31:38:1c:66:fe:53:95:6b:c7:1e:e3:1b:c5:67:fb:30:55:06:
04:f1:66:9a:b1:71:51:3e:18:3f:0e:b3:84:be:e7:f8:1e:9e:
03:3d:d2:18:96:bb:02:26:24:1b:c2:d9:a3:67:e2:59:65:ee:
18:6d:74:4a:3c:47:59:e8:80:c6:83:a8:3a:d9:32:2e:6c:74:
51:93:9e:1f:73:6c:90:39:f4:7a:d4:67:5c:07:dc:f7:74:61:
f6:75:5d:c2:88:22:d9:80:68:db:05:56:cf:f4:e1:3c:27:d8:
9a:88:17:51:42:8d:f7:7b:ad:7e:fb:12:c5:c0:b8:6e:80:2f:
60:ba:ba:a4:76:c2:5f:a8:82:a2:08:64:d2:fb:f9:02:08:fe:
b3:95:36:12:ae:ad:dc:72:1a:06:62:bc:67:c0:e9:4a:13:01:
73:06:8a:fb:f0:1f:1f:a3:6b:99:15:32:c7:32:15:56:b7:4f:
46:18:45:1e:e4:c3:7a:14:1f:97:eb:26:f2:3f:13:b5:94:f1:
6e:75:43:ec:30:2d:d9:7c:a4:e2:71:5e:19:9c:5f:df:5e:2f:
11:f3:a4:24:f8:5a:24:8c:41:9d:70:b1:bf:d6:71:db:01:d2:
48:d5:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:19:19 2025 by rpki-client