Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: ZIXKw+SD2FC1JFekhv4bF19ayr+z22G2KiOeoJTbes0=
Subject key identifier: 0E:30:C9:55:B7:DA:80:D3:4F:5B:45:2C:D8:F8:D2:70:54:53:34:6D
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019A266763B63F827B50B9E88464B81E536B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0411
Signing time: Mon 27 Oct 2025 16:01:41 +0000
Manifest this update: Mon 27 Oct 2025 16:01:41 +0000
Manifest next update: Tue 28 Oct 2025 16:01:41 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: +9jx7kw+76nkQ34Dg+9yPZWtc3aif499HfVKob8Z4mc=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:63:b6:3f:82:7b:50:b9:e8:84:64:b8:1e:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Oct 27 16:01:41 2025 GMT
Not After : Oct 28 16:01:41 2025 GMT
Subject: CN=0e30c955b7da80d34f5b452cd8f8d2705453346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:93:7e:62:42:e7:11:dd:5a:ce:7c:b0:8a:
ad:42:53:d2:c6:b9:8b:1c:ce:93:6e:8e:fa:c6:15:
22:23:7b:4e:0b:08:ce:8a:03:22:df:ae:d9:8f:39:
67:e3:60:88:e4:ec:17:74:2b:02:e4:e8:f6:cc:db:
04:84:f4:4e:60:5d:ab:af:5b:2c:79:7f:35:2b:f3:
30:a6:47:41:2f:27:f4:3a:e5:8c:55:95:df:7f:06:
b6:98:36:31:f5:ee:04:b5:bc:8e:30:38:d0:49:e0:
c9:53:c1:e6:01:2c:7f:65:77:85:b1:6d:c3:c2:8f:
ed:19:2d:1e:ec:4a:94:bf:6c:6c:b5:71:56:03:84:
05:a9:07:48:17:54:4c:4d:22:6a:e6:c3:8a:a0:f4:
0f:53:b8:da:56:db:f8:d8:ad:75:12:27:13:5b:25:
78:5c:30:58:7d:45:c0:26:43:69:53:41:24:a5:b2:
ef:cf:39:f4:c4:bd:10:b1:87:98:92:89:96:35:7a:
3b:f6:dd:26:e1:cd:84:1a:97:b1:1d:aa:13:fb:6b:
0d:22:52:48:72:ce:b5:44:7d:b7:3d:20:5c:ac:d0:
68:9f:1f:64:84:3f:43:51:94:67:5d:63:56:6a:33:
98:fc:5b:19:4f:34:23:ca:c6:04:8b:0b:a6:f7:84:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:C9:55:B7:DA:80:D3:4F:5B:45:2C:D8:F8:D2:70:54:53:34:6D
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1c:f2:dd:d4:4b:32:54:fb:79:96:b9:28:5a:a4:ab:5e:b8:
8b:dd:76:33:56:31:a6:2c:0c:95:80:a9:25:31:2a:e1:34:dd:
74:c7:83:28:db:50:a4:ea:60:45:4a:eb:7a:43:2f:d2:a9:cc:
e4:eb:7a:2b:27:7c:f6:64:d4:ea:7d:2b:7b:d8:a3:5d:15:c6:
d3:df:c0:a3:c5:5f:54:1d:e5:25:3a:dd:6c:6b:0f:96:be:13:
fb:89:2f:66:cc:a0:6a:f7:ba:2f:68:da:ad:74:48:4d:61:f6:
94:0b:1c:1d:dc:f6:c7:73:e6:07:dd:48:2d:7a:3a:8e:df:60:
46:03:32:85:68:df:3a:a7:26:1c:f6:28:9f:cf:6c:8c:34:dd:
a8:e7:69:91:88:5f:b0:f8:5e:6f:dc:ce:85:6d:d0:ca:2b:90:
fb:13:bb:d0:ac:37:c6:20:87:c9:ae:75:9b:85:85:ce:89:05:
44:23:3c:0e:2f:63:13:90:81:0a:e9:2c:ec:53:e2:50:d8:b0:
50:a6:06:e0:f0:39:9b:a1:ce:0a:e4:5a:f0:89:fb:49:a5:e9:
a9:8a:8a:42:b3:da:44:f0:a9:94:80:28:a3:8e:49:29:cf:28:
6f:86:aa:6c:5c:43:38:2f:e2:51:24:29:96:d0:c9:31:9f:d5:
f7:47:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:32 2025 by rpki-client