Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: i7ugctO00hQvKjOryULOtg1VsAgPojBgVZn+m2XdTZo=
Subject key identifier: F4:06:12:16:05:FB:FC:9F:1D:F2:93:65:59:B8:81:55:E8:C7:F3:63
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019A552DCA20AD3FC86017EBB713D75005A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 14BB
Signing time: Wed 05 Nov 2025 18:00:55 +0000
Manifest this update: Wed 05 Nov 2025 18:00:55 +0000
Manifest next update: Thu 06 Nov 2025 18:00:55 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: Eo3bYZ78K5jFS75TEycTnHI1z5atMdaDrQpncecn2B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ca:20:ad:3f:c8:60:17:eb:b7:13:d7:50:05:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Nov 5 18:00:55 2025 GMT
Not After : Nov 6 18:00:55 2025 GMT
Subject: CN=f406121605fbfc9f1df2936559b88155e8c7f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:fd:e4:1c:5f:92:60:83:0f:f2:f8:f3:f3:
ff:92:52:4f:69:6c:bf:8b:d4:45:29:86:44:bb:ca:
b8:25:52:4d:15:0c:23:01:f7:80:20:4b:e3:25:24:
87:b4:94:7b:69:e9:a0:a2:92:68:29:a2:7a:f9:9b:
6a:25:3e:7c:28:d9:64:83:5d:d0:f3:0d:5f:c6:f8:
33:9e:20:51:bd:60:c0:d3:2e:a1:3f:34:34:6f:d3:
27:a9:dc:cf:8b:d7:60:a7:26:f4:8c:b3:80:36:7e:
75:e7:07:7c:85:d4:be:ba:53:a5:c2:00:ae:f4:3e:
8a:d9:b8:6c:bc:8c:cf:41:9f:40:08:f1:1b:85:46:
77:36:26:d0:92:db:6c:30:46:82:62:6d:6a:a5:cd:
83:ca:92:c4:b9:16:43:1c:af:35:e3:76:2f:b0:64:
3a:d9:a0:3f:bd:c4:23:c6:f1:84:e9:b6:81:57:b7:
ff:3b:aa:ee:8c:43:c3:28:c8:1a:4f:30:1e:a5:6a:
f3:f5:fd:22:c1:12:d9:e8:17:ca:20:07:28:11:48:
34:1a:1d:50:71:fb:e1:f8:d5:f0:2e:ef:fe:38:2f:
98:64:c4:dd:18:3d:93:49:a3:ec:f7:7b:a2:bc:92:
e7:ca:f8:65:e1:81:7b:0d:0e:56:44:ae:7e:20:97:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:12:16:05:FB:FC:9F:1D:F2:93:65:59:B8:81:55:E8:C7:F3:63
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:b2:02:8b:eb:28:16:9d:b0:26:92:88:16:9a:52:c0:50:
ce:af:4e:c4:ff:55:4d:a3:b8:c1:f8:80:7a:2a:92:06:db:13:
56:71:b4:64:ec:07:fe:0c:2b:5a:72:3d:c8:74:9e:43:eb:55:
a5:fe:f8:87:d3:be:02:eb:87:49:75:da:9a:98:20:8f:c3:6e:
b2:21:23:47:79:7f:9c:bb:0c:99:cd:de:b6:23:4c:14:e7:73:
40:7f:05:ac:f9:99:ba:f7:9f:38:b1:e3:c2:0a:47:29:29:46:
ff:d5:eb:57:3b:a5:8b:64:f5:98:29:32:81:c6:54:e5:99:b3:
82:f9:08:aa:7a:01:b2:00:0e:4e:08:36:81:04:4e:2f:63:66:
c3:e6:eb:48:5e:0f:65:c2:b5:52:b1:61:55:67:31:9b:9d:76:
e1:b4:e5:d1:ba:44:09:0e:e4:7f:03:9c:22:cc:cb:46:90:c0:
50:08:0d:2d:4f:6f:17:22:38:7f:45:68:b2:23:42:68:07:2a:
24:b3:79:d0:80:8a:ac:23:d5:b6:4c:f4:52:ff:9d:73:98:5d:
9b:83:17:34:75:0a:7c:90:e6:1e:97:81:73:3b:95:96:f5:72:
d9:04:45:0d:d0:90:58:9e:e2:2a:14:b6:35:52:7e:17:a4:9f:
fb:c4:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:07 2025 by rpki-client