Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: JUBHwLjTQewPnHZLT+E4BrFfBb6crvjkFqciVx4j0Ys=
Subject key identifier: 96:45:BE:EB:4A:ED:72:B1:68:77:2D:2E:CA:4E:E3:E2:52:1D:B2:1C
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 019A258AC6BCA6F027A69958A0EC7E7D3413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 12:00:42 +0000
Manifest this update: Mon 27 Oct 2025 12:00:42 +0000
Manifest next update: Tue 28 Oct 2025 12:00:42 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: DusEiVryBHU1otKbII4V1BQ3XSK2GlkDlXQLbNgKozw=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:c6:bc:a6:f0:27:a6:99:58:a0:ec:7e:7d:34:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Oct 27 12:00:42 2025 GMT
Not After : Oct 28 12:00:42 2025 GMT
Subject: CN=9645beeb4aed72b168772d2eca4ee3e2521db21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:08:a7:4a:b4:b6:77:cf:35:2f:5a:47:b5:
2c:e4:6a:aa:89:aa:03:62:ea:b7:8e:d9:2c:ae:16:
06:32:3d:b9:04:d7:f0:f1:7d:20:b7:42:23:5c:58:
c4:4f:0f:e1:82:a3:29:4c:1f:8c:c1:e1:ba:a4:b2:
a2:f8:e4:26:a5:cb:45:5b:67:5b:39:e7:e0:18:3f:
c7:da:0c:69:fc:bf:cb:4b:34:28:bf:48:cb:ae:03:
81:a0:aa:d6:c3:24:45:39:00:c1:8a:27:64:53:7a:
9b:f7:ba:ea:24:85:79:18:c1:3b:21:65:0d:85:35:
9b:fc:70:7d:4c:c9:12:da:8d:e9:2f:90:52:85:5b:
ce:65:0b:cb:c0:6b:a3:3b:39:89:d3:be:81:1e:28:
22:25:76:a9:3c:2e:70:ab:dd:8a:23:57:c0:9b:0e:
87:0e:cf:ec:de:26:56:53:8c:f7:6b:6f:ae:7a:b3:
52:af:84:19:b8:1f:c4:47:cb:d8:2f:95:b2:5e:af:
6d:05:eb:98:0f:0c:9a:ea:bf:f3:ec:3a:a8:bd:05:
b8:76:6c:ff:ba:b0:1e:cd:b8:82:dc:48:41:20:51:
9b:85:bb:89:35:ee:52:49:9d:21:42:63:9f:fa:96:
bf:99:33:54:f9:c5:15:73:e8:ee:49:95:d1:0d:a2:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:BE:EB:4A:ED:72:B1:68:77:2D:2E:CA:4E:E3:E2:52:1D:B2:1C
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:07:8c:42:5c:03:6e:b7:e0:aa:66:d6:a9:cc:6b:b2:36:
16:09:78:ca:9d:ec:9e:99:d1:11:89:19:86:fd:30:25:53:e8:
c3:fa:4c:f5:f1:ba:85:dc:b5:9c:94:bb:15:82:48:11:6e:8e:
c9:8a:e6:e8:62:79:3c:6b:8a:78:e1:b9:19:08:31:2c:a1:4d:
eb:a6:fc:5d:8b:cb:34:31:61:f5:c9:1c:97:02:71:4b:6a:24:
cb:38:ae:71:6c:a7:6d:ab:80:16:52:db:4a:a9:9d:e6:44:da:
8a:02:47:ab:dc:a0:0b:16:6b:ef:a3:37:e4:e2:f2:bc:99:c6:
7f:b0:31:7f:c7:b8:ae:55:fb:a6:90:5d:13:55:a2:72:5e:10:
7a:12:f7:ec:6a:b8:d2:bc:b9:58:50:23:f5:12:93:d1:fa:72:
cb:eb:02:e6:3c:27:70:14:9b:e2:1e:2f:5b:9e:41:72:03:33:
ac:82:74:2b:56:3a:68:a7:ee:4f:84:4b:11:d5:48:30:bc:46:
c5:2a:54:ae:f9:9f:be:5e:55:ef:17:9a:6f:55:72:c2:27:ed:
d2:6e:09:de:c5:57:fb:ee:09:72:60:e9:0f:38:e4:66:55:95:
91:64:81:39:c8:85:b9:6d:8d:53:b0:91:2b:d4:05:e0:a0:2b:
f1:88:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:32:52 2025 by rpki-client