Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: mw0MC+HFIk4US0HkclVmRbkZqJwAZTP3+NnIyvejsx4=
Subject key identifier: 57:BC:AA:F8:EC:A8:83:B0:D8:28:24:D6:98:3C:15:08:F4:1A:DB:C1
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 0199239EC17058DB15BA951034469D5C7032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0939
Signing time: Sun 07 Sep 2025 10:00:30 +0000
Manifest this update: Sun 07 Sep 2025 10:00:30 +0000
Manifest next update: Mon 08 Sep 2025 10:00:30 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: bNr4tf39ptGx/V/uP8UixPQ8UmTeJv093I90YHw74/g=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c1:70:58:db:15:ba:95:10:34:46:9d:5c:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Sep 7 10:00:30 2025 GMT
Not After : Sep 8 10:00:30 2025 GMT
Subject: CN=57bcaaf8eca883b0d82824d6983c1508f41adbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:1f:64:83:70:56:d2:9b:1e:cf:6a:14:18:
8d:73:70:c4:be:c6:12:2c:2b:92:cd:2f:7a:f8:a8:
7a:22:b8:07:bf:e5:04:d0:3f:8c:2e:bb:4d:5e:64:
c1:a3:a9:4c:6f:a3:ab:50:55:f2:02:82:b1:2a:cb:
d7:f4:02:c4:c5:c4:e8:bc:28:e5:00:66:cb:df:1c:
a5:3a:f0:42:5d:4a:df:f2:96:35:4e:d2:7c:83:bc:
26:97:c8:48:fe:71:4f:18:74:fa:e3:f5:cd:4a:07:
b2:10:af:bd:d1:30:79:67:50:82:96:43:13:3b:1b:
d3:b3:af:e3:f1:a9:a0:e5:b6:8e:69:a0:5a:e7:a0:
db:2f:95:22:54:a4:97:3e:14:3f:c9:a5:37:9f:97:
65:05:bb:df:dd:8e:54:2a:60:d1:39:82:c0:0c:be:
91:84:3c:1b:51:61:59:35:26:87:ae:ae:dc:74:09:
9c:ec:43:d1:1a:69:46:b3:83:5d:ea:e6:49:19:b2:
a3:8a:52:ea:a0:52:a7:85:69:f7:a7:19:f9:b1:5b:
29:01:3e:cc:6a:78:f4:dd:1f:a4:d9:2f:46:3b:d2:
8e:16:20:fd:23:49:42:2b:35:40:0a:9a:6c:5c:16:
c4:f2:30:2d:29:25:fe:c2:9f:99:2d:69:b2:96:f5:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:AA:F8:EC:A8:83:B0:D8:28:24:D6:98:3C:15:08:F4:1A:DB:C1
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:6a:c3:6a:99:3b:07:0a:9f:50:98:f7:96:12:5a:fd:93:
08:0b:3f:ff:b3:10:d5:6f:c6:d4:6e:28:8c:07:43:46:a8:02:
ef:a9:9d:80:6d:21:a4:4f:24:b2:c7:d7:52:85:00:4a:b8:ed:
42:c2:b2:6b:5c:10:5b:e0:b7:39:f1:f0:a6:93:29:a5:10:51:
a5:28:30:b8:35:8c:aa:d5:63:8b:41:f0:af:c7:b5:32:ee:66:
1b:55:69:94:9b:51:99:d8:d3:d2:a1:17:60:b6:f8:a0:33:82:
d2:97:cc:e8:45:d1:6e:5e:c5:7e:45:4d:4c:a8:82:9f:ac:cd:
63:f1:08:15:44:7c:69:87:bb:6c:a7:28:fb:02:21:dc:7d:e7:
49:aa:06:83:bf:7c:1c:34:5f:ad:af:c1:b5:13:bc:67:b0:86:
dd:ab:97:98:18:92:12:23:64:fb:3b:05:52:42:1a:2b:82:f4:
3b:e2:ee:a5:02:60:22:0a:f2:f0:ae:4b:4d:09:70:e0:d6:26:
33:43:7b:52:86:1a:1e:85:f5:c8:85:b6:4e:d2:97:51:41:5d:
b7:62:9c:dd:82:4c:e3:c7:66:bb:84:b2:93:ff:49:10:f5:74:
78:0d:c6:8f:48:2b:72:9d:07:e2:14:b0:3f:fd:b1:b4:ef:09:
87:f6:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:51 2025 by rpki-client