Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: BzhjtEZfub9mJaoWk0oCb3unb4jiTq8fMhVRfx9sGQc=
Subject key identifier: 95:F1:AB:B9:D5:6D:5E:3C:5C:73:A4:6B:A3:E2:15:7C:AC:E3:9E:2F
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 0199221E54E4ABBB842D49009D52E5CB6103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 141C
Signing time: Sun 07 Sep 2025 03:00:37 +0000
Manifest this update: Sun 07 Sep 2025 03:00:37 +0000
Manifest next update: Mon 08 Sep 2025 03:00:37 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: cL84Q7XToBZxsS4Ohj8L++X75Mnl0e4iICZzsTYR1zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:54:e4:ab:bb:84:2d:49:00:9d:52:e5:cb:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Sep 7 03:00:37 2025 GMT
Not After : Sep 8 03:00:37 2025 GMT
Subject: CN=95f1abb9d56d5e3c5c73a46ba3e2157cace39e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:1c:56:76:eb:24:24:32:13:30:9b:9d:ca:
32:ea:2d:02:8c:e8:00:8f:62:25:39:6d:b4:52:e1:
96:42:02:db:f2:d9:a3:e2:b0:f9:d9:b6:dc:f2:c5:
fd:9b:d8:29:f8:a2:c2:0c:4b:d6:8b:cb:49:65:ac:
5b:12:80:fc:32:c9:e7:10:6d:fe:88:36:39:41:45:
d3:24:7d:c7:95:c8:08:91:42:ce:ce:37:a2:92:05:
58:34:b6:c0:ef:b5:fe:71:aa:9b:f2:30:99:35:87:
53:af:d0:e1:4d:fc:a1:66:52:07:3a:43:98:ff:d6:
75:02:27:d1:00:a0:da:ac:15:d6:80:07:85:dc:ef:
e2:22:27:5e:45:98:0f:fd:85:64:42:f5:81:8f:3e:
19:44:9c:04:d8:db:aa:a3:61:b0:a2:f5:21:b5:f1:
7d:10:3d:85:eb:8d:72:ee:f8:f7:77:a9:66:7d:99:
9e:70:0c:f5:60:76:37:9a:8d:e0:5c:68:5f:63:0a:
71:4d:7e:e9:3c:ea:c5:29:fe:77:e3:14:60:63:c2:
3f:5e:7c:d5:5c:27:eb:64:e7:ae:39:5d:b3:92:d3:
b7:c8:8c:9e:66:ed:41:b2:f7:8e:58:2f:80:dd:7a:
a6:35:1b:6d:06:2d:db:b2:ae:81:e0:aa:eb:e3:fc:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:AB:B9:D5:6D:5E:3C:5C:73:A4:6B:A3:E2:15:7C:AC:E3:9E:2F
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:5e:f8:ae:0b:04:ac:47:c7:90:3a:cd:20:4e:fa:a7:aa:
8c:ef:17:c7:6f:59:2f:2d:7e:4a:a2:74:ea:cd:8b:1a:1e:c2:
7f:01:93:c6:fa:e2:c3:fa:32:e5:a7:0b:00:9d:60:5b:2a:b9:
b1:08:81:7f:ed:e8:6e:fd:c9:5a:60:c8:cb:57:56:2a:81:a3:
21:0d:de:b7:41:6a:21:f7:d5:e4:b9:88:9d:f4:32:9d:c3:aa:
87:42:b2:be:9f:b7:e0:c9:46:0c:2f:4a:0f:e2:b3:42:37:70:
63:41:5c:ad:6e:48:49:6f:5b:92:0e:7e:9f:01:ab:3d:ab:2f:
e4:dd:17:90:7c:ce:d3:d0:e8:ba:ac:4d:32:99:99:f4:ca:14:
53:d4:21:c9:c1:2d:51:d9:26:54:fc:7c:76:28:a4:9c:58:2c:
24:fc:f9:41:68:df:62:43:25:a4:5d:a6:05:a7:bb:55:dc:26:
be:83:b6:b4:81:58:76:2a:2c:78:4e:b5:76:7a:bd:ee:c0:fa:
f9:2d:3e:64:22:c2:71:e9:0d:8c:3a:25:06:59:d0:b6:4d:21:
06:f7:60:a7:5a:b5:85:2e:ac:b5:f3:d3:97:37:19:34:ae:9c:
d9:43:80:e9:69:ff:17:5a:53:68:1c:58:57:7c:c1:21:29:a2:
38:5b:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:44 2025 by rpki-client