Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: uBuTTZnOOmMk4RHAjNCcG1cVuoX78RVLrr5wsXt3OUk=
Subject key identifier: 63:C1:F7:A3:FE:27:9C:BD:C3:A5:8F:1D:A2:7E:6A:85:8C:DC:71:85
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019A71EEEEB80D5AA067A6E101F06BBEEC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 03A6
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: G0p81Ez/T/wyUn/iAX0a+t/36OK3vjMmmaFim5kgF34=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ee:b8:0d:5a:a0:67:a6:e1:01:f0:6b:be:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=63c1f7a3fe279cbdc3a58f1da27e6a858cdc7185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:4e:74:18:b9:7b:64:cd:89:bb:25:7e:17:
31:23:91:db:52:8f:4a:dc:ca:25:80:28:72:ba:25:
85:0c:a2:6f:28:f4:01:15:f2:86:ec:b8:35:38:06:
ca:43:86:80:ea:f0:a8:58:ec:04:b0:4b:88:69:55:
ba:6f:e7:fd:c8:ad:5a:57:b3:0a:6f:ed:a9:b3:a2:
e3:41:e8:a8:19:07:e2:f2:f3:fa:eb:75:8f:fc:4d:
7b:d4:c5:1e:38:80:25:c8:f8:f8:23:da:60:f2:7a:
aa:9c:02:f3:ee:36:17:9f:49:4c:70:af:2b:14:a7:
48:8a:4d:5d:17:db:8a:ff:a1:ef:96:f1:9d:41:58:
ea:a0:97:5e:bd:ad:97:75:f9:bd:b1:94:cf:3a:b0:
e4:e1:6b:be:59:66:9c:fc:94:f2:01:23:4d:25:9b:
8d:b2:22:01:aa:e3:1c:41:0c:90:76:37:cd:8a:21:
cc:ae:6a:4c:d3:78:4f:f8:c1:6d:1a:19:93:50:49:
3d:b2:df:7e:26:c7:1c:5c:d8:ac:a5:42:f8:1b:1b:
8f:f8:11:b5:1c:24:c2:63:b7:f2:04:e2:6d:67:ad:
5d:cb:bc:2e:1a:20:9a:5e:31:8f:be:34:87:ad:15:
9b:0c:72:8f:54:5a:2c:a1:df:ae:ad:67:f1:4b:44:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:F7:A3:FE:27:9C:BD:C3:A5:8F:1D:A2:7E:6A:85:8C:DC:71:85
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:17:21:9e:6b:ee:bb:1e:42:74:2a:9a:47:4f:90:d7:00:
62:b3:97:cb:ed:a2:df:87:81:0e:c2:7b:b1:51:22:fe:1c:f0:
c4:0f:14:aa:89:8e:f6:4a:61:2e:4e:00:45:37:ba:9b:34:ea:
3c:d6:88:ad:b3:1e:60:3c:bf:be:95:da:e5:7a:9b:07:4e:83:
02:da:51:89:d0:43:dc:51:11:26:63:27:f1:ee:19:5d:a8:74:
17:b0:46:2c:99:b9:e1:05:77:39:45:ae:dc:8c:90:07:31:fc:
6d:d2:6c:bd:3f:48:4c:60:b5:85:a9:0a:19:22:ee:e3:99:5a:
08:ad:93:50:df:88:2a:73:7d:6c:c6:c8:78:7f:f9:12:1a:13:
1a:0d:a9:07:c2:38:84:44:08:27:e9:e5:5c:d9:ac:47:c5:b6:
1c:ac:1c:29:a0:67:28:42:69:64:5d:db:55:5f:6e:2f:c1:28:
e4:23:d3:d1:42:dd:f5:e1:14:f8:81:ec:6c:f6:2d:56:18:f5:
a2:e3:f4:20:de:9f:f3:12:7f:c4:66:ae:d0:cd:5c:bc:4f:e2:
99:c3:bd:97:7d:2f:d5:85:7b:3b:c0:71:2d:56:08:54:6b:86:
c7:56:eb:c6:61:7b:2c:de:92:d8:d6:aa:08:0d:f6:3c:62:6a:
0e:8c:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client