Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: LkOwrNe1TiyyVI1HCcspvnj1MshBpjFoHbm5n9ak/eU=
Subject key identifier: BA:17:B4:16:27:F1:DE:EB:FB:5B:93:45:0C:8F:DA:2A:A5:FB:25:6E
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 019935A56DD061E748FBB0995514525A43D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 22:00:57 +0000
Manifest this update: Wed 10 Sep 2025 22:00:57 +0000
Manifest next update: Thu 11 Sep 2025 22:00:57 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: O7dBjNxmQXZvsFP4ckfHw8vmhOqqeArRQHy5An1oXD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:6d:d0:61:e7:48:fb:b0:99:55:14:52:5a:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Sep 10 22:00:57 2025 GMT
Not After : Sep 11 22:00:57 2025 GMT
Subject: CN=ba17b41627f1deebfb5b93450c8fda2aa5fb256e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:05:b2:05:f7:a9:c8:52:04:63:52:05:39:
f8:80:21:7c:b0:76:de:50:51:4c:ce:71:db:71:46:
61:96:98:84:a3:d3:12:d0:c6:1a:5b:d3:ab:4d:96:
d4:3d:d1:8e:36:d4:e2:fc:cf:17:03:9b:31:8c:47:
5a:a2:41:8e:6e:5c:21:13:54:e8:e0:cd:f9:3c:17:
d0:0c:f9:47:5d:23:45:49:93:d7:4f:c9:3e:b0:d2:
9f:19:1b:57:3a:53:57:8b:2e:07:b3:e9:53:d8:cf:
cc:67:7f:8a:29:f0:84:77:f0:27:8d:bf:6d:b1:fd:
e1:7a:2e:c6:4e:b3:92:59:bd:8c:10:8a:de:c0:ce:
b4:08:cb:9d:8b:8b:e9:61:44:23:74:92:a5:08:d8:
5a:99:5b:a9:4c:f6:5f:90:48:f9:40:ae:24:23:08:
21:2a:91:4b:d2:e1:31:ac:11:86:8d:9e:45:df:88:
d4:c6:04:45:54:09:47:52:a1:f2:71:00:b9:5d:e0:
c8:81:b4:99:90:38:bc:c7:3d:16:f9:c9:70:a2:d0:
9b:fc:13:8c:e7:00:01:31:e7:c7:8e:8b:b8:ce:60:
e6:2d:09:cc:38:09:87:1b:d9:cd:3a:34:ef:c2:fa:
0e:6b:39:ca:71:fa:74:84:c4:7a:04:82:9e:7a:95:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:B4:16:27:F1:DE:EB:FB:5B:93:45:0C:8F:DA:2A:A5:FB:25:6E
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3b:12:49:f6:3a:17:90:bd:97:b5:68:9c:bd:60:4a:82:46:
93:8f:82:16:3c:f9:8a:7f:76:25:99:b1:ed:bb:31:ca:bc:6c:
32:5b:a1:d4:96:b9:c1:d5:b2:1f:dc:f9:0c:5d:bf:1c:10:15:
5c:a5:0f:66:54:80:01:b7:66:3c:79:49:da:a5:1b:a9:c3:e8:
69:2c:75:f0:e1:e2:ae:0f:bd:39:f6:e1:3c:c8:a7:ad:30:83:
4e:e2:e4:b5:8f:9d:77:3a:1b:fc:de:7d:0a:d3:5a:6f:fe:7c:
c4:8c:8f:8a:bb:4e:cd:0f:ae:83:67:27:02:c8:02:dc:96:73:
df:89:8c:9d:31:c8:21:f0:0d:a2:c4:f5:3d:cf:b6:04:5e:ea:
f7:bd:72:c2:ea:f7:58:96:b3:37:7d:44:98:50:bc:a6:36:20:
0a:a7:25:91:a1:36:6d:50:a3:05:bc:2f:e6:bf:06:81:c5:44:
da:2c:50:4c:0d:7b:ae:fb:4e:7d:ed:29:03:cb:8f:3e:54:23:
be:9f:a9:9b:87:fd:f1:f0:42:a6:1e:62:53:f3:e0:85:7c:4c:
db:61:d7:3e:71:d7:2b:30:86:b8:3e:95:3f:14:0b:66:d0:6b:
89:e8:02:2b:dc:bf:f8:42:83:75:82:07:33:e0:e8:00:3b:5a:
fc:a2:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:48:33 2025 by rpki-client