Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: ViA9NotkDZW5l8dyhBG9YyEuE2Gem46u/4g6TGcPGck=
Subject key identifier: 3B:4C:EB:D3:E7:63:22:D1:6D:C8:B7:4F:33:44:92:21:7D:6E:32:E8
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 01992FD9D93BAC971F8980F9AEADCE0D764E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0A10
Signing time: Tue 09 Sep 2025 19:00:30 +0000
Manifest this update: Tue 09 Sep 2025 19:00:30 +0000
Manifest next update: Wed 10 Sep 2025 19:00:30 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: ebO6pewCl8ImCfy+PNtlFKjgdfqrPTrz/nor1qTQm60=)
2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:d9:d9:3b:ac:97:1f:89:80:f9:ae:ad:ce:0d:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Sep 9 19:00:30 2025 GMT
Not After : Sep 10 19:00:30 2025 GMT
Subject: CN=3b4cebd3e76322d16dc8b74f334492217d6e32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:74:77:e7:ea:84:42:44:7a:4f:2e:40:47:
53:8c:1a:9d:a0:b5:cb:d3:6c:10:7f:bf:9a:ff:0b:
07:98:a2:fa:c7:e3:da:45:49:d8:a1:82:3f:98:78:
01:ae:97:27:d8:28:a9:fc:2b:31:1f:40:d9:2a:34:
af:c5:8c:38:d6:5f:d0:ea:c6:05:65:76:11:76:79:
7d:0e:fb:13:b4:07:06:62:71:44:9b:f7:43:35:96:
a0:22:92:60:39:a4:e0:57:92:47:57:d8:7d:ed:b6:
f6:8b:7c:bf:04:22:a7:dc:e4:19:f3:0e:b0:16:6a:
14:57:ad:bb:85:9d:1b:95:9e:89:ea:d8:5a:8d:a3:
29:6f:8e:6d:05:1a:c1:5e:32:7f:14:51:43:2e:c6:
56:16:ec:86:ea:10:21:9b:5a:74:84:4b:40:0f:e9:
27:f9:39:bc:49:40:81:79:54:07:10:3e:78:bf:2f:
44:10:8f:83:13:6a:1b:68:56:b5:3a:bb:a4:37:d2:
74:4e:bf:03:f7:b7:ca:d8:b5:b2:6b:4d:bc:7e:7d:
11:cb:87:a8:a1:72:bc:23:2e:c2:dd:ac:40:f5:0d:
9d:e2:f8:a6:22:66:e9:60:95:44:69:6a:c1:1c:76:
2c:64:fb:cc:46:ad:21:de:aa:df:c8:50:4c:0f:81:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:EB:D3:E7:63:22:D1:6D:C8:B7:4F:33:44:92:21:7D:6E:32:E8
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:45:11:e3:bb:24:0f:00:19:33:31:e2:8e:1d:bf:63:c4:
83:36:fa:81:56:b2:9b:27:d4:93:1e:97:23:80:fd:37:c6:1f:
b4:b3:57:64:e9:a5:39:42:95:b6:e9:7a:0b:6b:7c:14:c3:98:
fa:1f:e5:91:1d:62:69:7e:93:bc:6e:01:0d:62:5f:7a:ab:aa:
4e:07:9a:2d:5c:8f:d7:a5:9b:39:18:23:6c:ab:1c:d1:88:25:
16:88:3e:41:6d:e7:e5:e9:2e:70:1f:8c:13:ce:59:e8:75:1b:
f5:61:6d:55:4f:f5:46:30:c7:1e:35:ae:2c:86:4d:da:d6:a9:
0a:d2:0a:eb:ef:7d:6c:74:54:45:e2:da:b0:1f:c3:5b:b4:1d:
53:8f:35:bf:fb:3b:b0:42:67:9e:78:28:32:b4:60:3a:ee:8a:
11:66:58:08:68:03:0e:e6:c4:dd:09:71:2b:f6:69:f1:22:1d:
0d:af:96:0c:1d:16:7b:80:43:c8:9d:4b:24:52:2e:b6:80:34:
69:14:02:e1:50:13:97:5a:51:89:0d:93:1d:0c:4b:c0:71:80:
87:a4:02:af:83:de:e0:01:76:11:68:eb:4f:c5:99:2e:3e:a8:
de:cc:89:11:04:3e:02:92:6c:a8:be:08:5c:cf:ca:29:64:62:
08:26:88:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkv2dk7rJcfiYD5rq3ODXZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi
YjEzZWQwHhcNMjUwOTA5MTkwMDMwWhcNMjUwOTEwMTkwMDMwWjAzMTEwLwYDVQQD
EygzYjRjZWJkM2U3NjMyMmQxNmRjOGI3NGYzMzQ0OTIyMTdkNmUzMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ct0d+fqhEJEek8uQEdTjBqdoLXL
02wQf7+a/wsHmKL6x+PaRUnYoYI/mHgBrpcn2Cip/CsxH0DZKjSvxYw41l/Q6sYF
ZXYRdnl9DvsTtAcGYnFEm/dDNZagIpJgOaTgV5JHV9h97bb2i3y/BCKn3OQZ8w6w
FmoUV627hZ0blZ6J6thajaMpb45tBRrBXjJ/FFFDLsZWFuyG6hAhm1p0hEtAD+kn
+Tm8SUCBeVQHED54vy9EEI+DE2obaFa1OrukN9J0Tr8D97fK2LWya028fn0Ry4eo
oXK8Iy7C3axA9Q2d4vimImbpYJVEaWrBHHYsZPvMRq0h3qrfyFBMD4HcDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtM69PnYyLRbci3TzNEkiF9bjLoMB8GA1UdIwQY
MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt
OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw
LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLFFEeO7
JA8AGTMx4o4dv2PEgzb6gVaymyfUkx6XI4D9N8YftLNXZOmlOUKVtul6C2t8FMOY
+h/lkR1iaX6TvG4BDWJfequqTgeaLVyP16WbORgjbKsc0YglFog+QW3n5ekucB+M
E85Z6HUb9WFtVU/1RjDHHjWuLIZN2tapCtIK6+99bHRUReLasB/DW7QdU481v/s7
sEJnnngoMrRgOu6KEWZYCGgDDubE3QlxK/Zp8SIdDa+WDB0We4BDyJ1LJFIutoA0
aRQC4VATl1pRiQ2THQxLwHGAh6QCr4Pe4AF2EWjrT8WZLj6o3syJEQQ+ApJsqL4I
XM/KKWRiCCaIPg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 01:14:10 2025 by rpki-client