Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: uFrUQlSlWvaQCVmk+eZ27CU83bzr0kT2wCJZ0ysJ2uk=
Subject key identifier: A8:B7:88:B8:C8:97:43:33:B0:EC:5C:85:E7:23:C5:44:DF:50:8D:7E
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 01993312098D818A2BC597B89B329D850CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0393
Signing time: Wed 10 Sep 2025 10:00:43 +0000
Manifest this update: Wed 10 Sep 2025 10:00:43 +0000
Manifest next update: Thu 11 Sep 2025 10:00:43 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: tElzAos5slzwfnt6zGUQFKmLZfoKgj65j3+V4x+E7YQ=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:09:8d:81:8a:2b:c5:97:b8:9b:32:9d:85:0c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Sep 10 10:00:43 2025 GMT
Not After : Sep 11 10:00:43 2025 GMT
Subject: CN=a8b788b8c8974333b0ec5c85e723c544df508d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:f2:ad:9d:d7:03:77:2e:31:6a:2f:24:09:
e5:4b:6e:65:bb:24:c5:08:79:69:46:4a:cf:ab:fa:
79:47:0c:09:1a:28:7e:1f:99:fb:48:94:56:d0:e8:
10:1e:1f:26:d6:05:0b:26:ce:69:40:5c:5d:c1:12:
ef:8b:04:96:5a:68:de:0a:3d:3c:5c:28:0b:54:c4:
10:4a:2e:a4:80:35:7b:60:39:bf:12:73:00:40:98:
cf:93:1b:76:bd:9e:98:b3:28:da:a2:11:e3:04:9f:
ef:8d:b2:57:f2:7f:53:db:dc:d6:21:1c:17:4e:bb:
b4:74:77:94:ed:5d:80:73:e6:46:02:b8:15:e2:76:
43:ee:4d:9a:67:3b:93:1f:5b:23:24:b4:d5:2c:99:
27:66:5c:75:26:85:ab:82:b1:26:89:22:31:17:df:
c8:67:e6:66:97:5a:62:2e:1d:74:57:0e:4e:e9:28:
f4:60:06:0d:d9:31:d8:91:fd:0d:96:29:5d:df:a4:
e9:ad:e4:ea:c9:d0:cc:b9:05:bb:1b:04:7a:d1:b9:
1a:3d:ff:07:b5:1d:19:36:18:f7:fd:e0:e9:8f:b9:
f7:fb:27:39:c5:5f:12:24:29:2e:44:d6:97:3b:a1:
30:0a:cd:c4:50:47:5e:57:8c:1f:38:2a:1c:8c:be:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B7:88:B8:C8:97:43:33:B0:EC:5C:85:E7:23:C5:44:DF:50:8D:7E
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:93:9e:2a:78:f2:23:8d:23:fa:5c:c4:0d:64:f6:d4:37:
13:9b:2e:e8:1e:7d:ea:35:ff:fe:e5:65:23:5e:83:54:17:2b:
a3:06:fb:09:59:86:74:d6:f5:d1:c7:38:9f:68:9c:56:fd:4d:
3f:f8:e7:ad:2c:b5:3b:fc:b0:d6:5f:62:ad:63:cd:9e:36:61:
68:45:93:b3:d1:d6:94:11:f9:be:c3:b0:25:ae:7f:0e:0e:90:
c5:1c:8b:77:16:a2:1e:05:9d:0b:23:60:e2:08:f9:ed:b2:92:
a8:10:03:ed:ad:5e:24:36:14:93:f4:f8:c8:08:e1:8d:b1:6c:
34:93:ff:e4:b2:98:1f:df:9d:4e:1c:df:a6:26:a5:75:6d:8e:
c0:2f:45:3c:10:23:52:be:af:cb:59:c7:a6:66:90:51:f3:66:
12:97:89:e9:c7:dc:ca:5d:bb:11:96:0f:9c:05:9b:f9:44:e0:
fe:81:ee:e2:5b:11:c8:0d:9d:05:ab:bb:5d:5a:6e:5f:5a:af:
8e:6e:6a:95:78:33:0e:dd:b2:2a:29:a6:79:9f:20:ea:b4:ff:
05:bc:dd:49:ae:cc:1b:95:2d:ba:59:52:31:6a:d0:d3:21:40:
6f:59:0f:b4:ae:7f:84:9c:8b:91:05:f3:6c:b9:1f:49:18:a9:
a3:f3:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:57:11 2025 by rpki-client