Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: lr4/tFSLibtgC6iTsQIXgmVWP/O13xJ6+HhfovneILI=
Subject key identifier: FA:F7:2C:9F:FF:18:01:A8:66:00:34:A1:7E:8D:F7:83:2D:B0:A4:CE
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 019A725C3BBFC273D5239D5151BCAB2DE10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 02A1
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: TVqH2fzU52vJXNM4coT4VVXH6MX/hWjfUtRDv/XaGF0=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:bf:c2:73:d5:23:9d:51:51:bc:ab:2d:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=faf72c9fff1801a8660034a17e8df7832db0a4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:90:5a:de:32:3c:5c:93:e5:fe:ef:3d:26:
97:57:74:79:de:e3:14:8f:91:48:f0:08:0a:a1:36:
f6:00:42:85:f8:66:e4:45:8c:e9:54:d6:07:87:51:
65:5f:45:f8:46:b1:66:31:94:54:27:ae:6f:18:11:
64:fb:ad:85:a0:c5:41:05:b9:d1:7a:e1:db:b8:83:
7a:ff:7d:65:2f:10:e4:35:0c:fe:ab:40:96:13:15:
b6:76:f7:bc:f1:9e:3a:db:e6:44:06:ff:1a:23:2b:
d9:d7:7f:da:1f:09:c4:be:6e:bc:00:02:5b:65:e2:
5b:57:b3:fe:0a:87:82:3a:fd:5d:cd:ac:23:bc:77:
bb:c2:d0:51:68:da:1b:48:03:f8:28:5c:a5:2b:02:
57:90:2c:b3:4b:d4:2e:0b:bf:39:24:ac:b3:84:a7:
0c:eb:76:fd:bc:45:5d:f8:ce:9f:11:01:c5:c5:0f:
6b:1a:96:0b:3b:6f:dd:a9:88:d1:d6:8d:6b:95:c6:
85:3d:83:99:b4:15:bf:80:20:3c:2e:ef:88:ca:d0:
97:d4:1d:6f:af:41:ec:38:4d:d5:56:4a:4c:ba:ee:
dd:a6:83:ae:5b:1c:a7:c8:ab:80:df:2a:60:9b:72:
90:a1:d4:87:2b:b3:08:7f:05:c2:47:c1:3c:40:7b:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:2C:9F:FF:18:01:A8:66:00:34:A1:7E:8D:F7:83:2D:B0:A4:CE
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:41:09:c1:8c:ce:9a:39:b8:46:0d:0b:c3:77:13:ad:e8:
62:71:fa:cc:b4:87:81:5a:66:2f:1b:7a:47:a6:5f:5c:93:e3:
8f:e4:ca:29:60:c9:59:3a:af:f2:55:b3:46:c2:e5:c2:14:08:
e4:2d:56:a5:d8:e7:bf:bb:b2:13:89:46:02:c6:e4:00:6c:c8:
df:eb:12:1e:d1:ff:ae:35:ea:b2:85:0e:a9:f1:a8:9d:8a:44:
47:e2:b6:63:d7:0c:a2:7b:de:e8:86:eb:f5:ec:be:23:41:6a:
43:89:7e:cf:16:2a:d8:97:1c:c5:46:ec:48:26:de:29:d5:9d:
60:a0:ab:31:6e:6a:4f:b4:8c:05:f6:28:8f:59:e5:45:25:fc:
83:5f:01:e4:bc:64:eb:12:5b:29:df:0d:5a:c2:b7:b6:60:cb:
71:fc:84:8a:27:f5:d0:28:10:04:dd:bd:00:ed:34:96:3d:93:
a2:2b:5e:68:20:3b:4e:9d:18:1e:59:19:43:a2:51:3b:0f:68:
3d:ed:0a:ea:c3:80:a5:31:d8:d5:7a:aa:f1:96:ce:ef:5c:73:
3d:e1:02:ef:fa:3c:0b:41:de:ca:ce:ec:2f:83:8f:17:73:df:
be:14:8b:fb:87:e7:ad:dd:17:11:e6:cf:f8:0d:d4:9d:ef:5f:
03:d6:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:50 2025 by rpki-client