Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: +LjZ3XhPBcO1+0KjXXPyH4JS5RnXFFBcTc64ntL4wco=
Subject key identifier: 6C:C6:68:3E:1B:E0:34:38:F8:F9:84:C3:5F:C7:04:58:38:98:08:F0
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019A71B8A3EFCE73F7D90D782F8CED72CCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 09E6
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: 9pe/kpFQV7su712pqwT+lIEczgHbKW8mWJ6zufaRz2I=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:ef:ce:73:f7:d9:0d:78:2f:8c:ed:72:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=6cc6683e1be03438f8f984c35fc70458389808f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:e1:8d:b4:9b:08:78:3a:36:21:ec:35:22:
63:89:65:7f:75:ae:75:08:a7:0b:46:d5:24:d9:b1:
b5:c7:49:10:e5:19:6c:11:3e:8b:01:85:9b:48:4b:
b5:e4:ec:68:33:3a:51:00:64:fe:9e:2b:77:61:8b:
e2:74:ce:d3:b6:e9:85:8f:66:b3:3e:75:35:28:1e:
7f:07:54:56:c8:14:1b:40:87:e9:59:ac:e9:c7:15:
07:8b:16:19:e0:bc:66:a2:a2:0e:64:4a:c1:64:16:
98:dc:f1:46:58:50:2e:5a:eb:70:b7:9e:a6:48:0e:
83:f8:a8:36:1e:cc:05:91:6c:d2:e2:79:ad:ec:da:
49:bc:ea:0f:81:ca:d9:7b:26:e5:b9:e4:b4:09:16:
c4:1d:ed:59:ed:f8:86:24:e2:21:8c:5a:fb:68:b5:
7f:76:bc:57:f7:cc:7f:f9:73:d9:c2:31:81:bc:ec:
3a:04:c4:99:32:6b:2c:ba:e3:c0:ce:1c:8b:3b:26:
f1:93:55:c5:5d:fd:49:bd:9f:3b:9e:4e:db:bd:8f:
58:53:10:fe:21:0f:be:4f:11:8d:64:b2:7b:0b:47:
4b:4b:08:20:c7:86:44:be:63:69:44:85:e9:87:5f:
c2:6e:59:a2:5d:07:45:2c:78:5f:4e:6f:a1:98:01:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C6:68:3E:1B:E0:34:38:F8:F9:84:C3:5F:C7:04:58:38:98:08:F0
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:4a:c5:52:86:14:8c:22:cc:fa:c0:8e:e2:94:79:71:14:
00:86:4c:c6:7d:2d:98:32:73:7a:f2:78:9c:4b:25:5d:33:65:
30:6d:6c:12:94:ff:c5:79:8e:8b:7c:48:c6:63:13:6d:ec:48:
3a:47:3c:8e:47:81:30:4f:c3:a1:8d:c5:b9:36:3e:a3:3a:f3:
d1:fc:cb:c7:af:fb:0d:eb:0c:b4:9c:8d:b6:28:80:ea:3f:01:
0c:3f:b6:4a:fa:06:4e:ee:05:67:93:6e:2e:6c:04:e2:b2:f0:
57:b4:13:72:fe:f5:c8:fe:14:b9:46:48:45:a0:b1:fb:15:8b:
c5:f9:0b:d7:b8:cc:7a:f5:c0:89:52:71:6e:04:71:5f:b2:4c:
b7:2e:70:1e:0b:92:6b:7f:75:d9:8d:4c:62:e0:b2:e2:ee:31:
ad:76:a3:0b:ad:6e:59:da:41:6e:c1:94:b4:88:e7:a2:36:f3:
bc:31:44:cc:cd:47:57:46:a7:30:13:c9:a8:6b:81:d5:71:9c:
62:42:c0:b1:78:52:86:72:6c:e2:59:6c:a9:b0:b8:83:cf:58:
4a:d5:3d:4d:5a:98:3a:d9:ea:2a:30:31:98:1a:7c:e8:a9:c5:
61:a6:88:6f:43:3d:aa:43:d2:bf:34:eb:2c:37:a9:a0:fe:8a:
d4:c5:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:25 2025 by rpki-client