Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: /ZStHMBMPXUgAjpxar9DzCCw5swZuDA4QOKTSUTuiTk=
Subject key identifier: 8F:AF:8F:07:AC:54:6C:64:7C:53:85:6B:B3:D1:FC:77:7D:15:4A:D4
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019923D5E9811818C2D4E8BBF4B89C8F7E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 117E
Signing time: Sun 07 Sep 2025 11:00:45 +0000
Manifest this update: Sun 07 Sep 2025 11:00:45 +0000
Manifest next update: Mon 08 Sep 2025 11:00:45 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: 2/IVQJ+iH4DIA2NF+xowOegXMWZ0OcSpA/r1fyfi8io=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:e9:81:18:18:c2:d4:e8:bb:f4:b8:9c:8f:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Sep 7 11:00:45 2025 GMT
Not After : Sep 8 11:00:45 2025 GMT
Subject: CN=8faf8f07ac546c647c53856bb3d1fc777d154ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:ae:b0:c2:d0:4c:8a:6c:20:76:ac:fa:d6:
6a:e5:43:4d:4f:1b:b1:9f:c2:2b:47:67:0f:26:e8:
d2:ea:29:54:e8:47:ab:4d:06:2c:e7:7a:f2:34:ba:
a9:c6:42:8a:80:9f:bf:c7:a6:41:1d:ba:3f:83:68:
a3:af:f6:f9:b9:6e:a1:ef:31:2f:23:12:b1:d6:2e:
82:3e:0d:9e:6b:4d:7a:9f:a6:c7:a5:ee:28:93:00:
23:cc:24:0f:de:27:ca:6a:c1:21:1a:a8:ea:94:1b:
fe:96:2b:98:2b:54:6d:63:43:ef:b6:c9:3f:f0:cc:
7e:05:a3:92:9a:b4:85:ab:9f:86:43:67:42:64:32:
1c:38:c7:67:82:bc:8d:df:13:45:2a:88:bd:ca:d9:
d0:64:be:36:4f:4e:b5:78:2a:57:ae:83:52:8d:e7:
29:d8:88:c4:34:2e:66:9b:e9:7d:3f:47:be:60:b0:
20:c7:eb:06:09:ea:05:9c:37:3b:21:bc:12:b5:61:
c8:9b:23:8d:52:c5:5d:17:60:ed:57:2f:65:f5:7e:
49:2e:95:91:98:9e:e4:96:22:53:61:5d:0f:3a:4e:
45:76:b4:b2:56:65:9c:14:00:a3:99:11:11:77:49:
01:55:0e:ba:cc:62:45:3f:15:23:d0:52:09:81:6f:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:8F:07:AC:54:6C:64:7C:53:85:6B:B3:D1:FC:77:7D:15:4A:D4
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:1c:da:c0:da:0b:7c:23:33:85:7e:46:08:d8:01:0f:de:
cf:70:10:b4:7d:12:22:53:73:0c:39:b0:e1:a3:72:3f:6a:a9:
3d:f0:18:b4:40:9c:2f:47:7e:59:f0:6f:d8:81:62:4d:60:15:
cb:c7:81:96:a0:d9:9f:e7:5e:cc:e4:c7:e1:ec:83:67:94:a2:
06:5d:ce:f2:92:15:af:e9:68:79:6b:af:82:00:d1:8f:17:01:
4c:ee:f5:c3:cd:c6:29:67:2a:29:a6:24:ce:29:17:ea:f2:51:
bb:f2:36:8d:92:ff:4e:e3:2e:d7:e7:5a:6b:19:51:e6:5c:66:
67:dd:d4:e5:09:71:f4:f7:78:53:61:0b:6c:6f:ea:8f:92:96:
2b:bc:60:7d:3e:0c:21:e6:22:42:71:70:2e:0f:8f:f6:72:30:
f7:8b:47:04:92:8f:a1:99:05:59:cf:8f:85:59:99:ba:0e:bc:
aa:f9:02:3f:92:c4:53:b3:e3:16:af:51:38:ae:1c:3f:43:0f:
5b:37:47:a9:2b:0d:3d:c6:0b:d6:92:1c:1b:9b:c8:a9:f2:5e:
57:bf:88:e7:bd:1e:e7:a1:12:b4:47:f2:5f:97:f4:8a:30:12:
e6:a1:88:4a:a5:2c:d1:e9:4e:08:20:7b:0b:26:cd:68:01:2b:
c4:39:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:39 2025 by rpki-client