Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: y/02G2fxokxlMaGhQhpuTqYlgFnZ6KNO7S7cjO7MOpo=
Subject key identifier: 48:0C:29:80:56:80:3E:83:98:36:56:32:D6:E8:A5:EB:C0:72:FD:16
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019A71B83D19F7B6C0CAA3662AAE12DC8BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 122B
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: 8qQfWmqnFxj/ROHVpLIo+O35zLz8veEaGL2aVikKOsI=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3d:19:f7:b6:c0:ca:a3:66:2a:ae:12:dc:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=480c298056803e8398365632d6e8a5ebc072fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:60:85:b4:df:75:4b:43:1c:24:d1:52:0c:
56:49:50:75:cb:70:f8:87:c6:d0:55:d4:35:49:d0:
8c:f3:77:d1:13:fb:e0:36:fc:de:ec:64:7a:ec:0f:
02:4d:0c:c0:63:82:c5:4f:66:54:24:6e:04:11:bb:
04:c4:e0:db:bb:65:70:bb:79:e3:7e:71:80:34:4d:
07:e1:f0:29:11:b5:d4:ce:12:f5:be:ff:66:e7:b7:
e8:31:54:30:cd:d2:64:6c:2e:4d:a8:19:4d:00:f7:
99:c8:20:27:58:43:62:05:76:79:b6:65:22:f3:28:
c7:dd:60:3d:c1:0d:f3:8f:3a:83:24:ae:34:0f:7a:
d1:d0:48:af:62:70:61:d8:df:83:a3:4e:ba:15:3a:
d3:99:41:07:4d:5e:6d:f2:1e:78:e0:70:d5:4c:49:
48:5c:20:b2:e4:9e:01:63:11:03:46:75:00:9f:cd:
b7:5b:a2:67:a8:07:dd:6a:dc:f7:88:39:3c:73:0e:
a6:e1:7e:4e:40:89:00:19:b7:c3:d0:20:20:58:b7:
d8:fa:81:c5:f5:24:cc:96:4b:71:b4:78:89:c2:7b:
1b:59:14:f1:2f:a2:d1:1d:a6:df:1c:5c:7f:e5:4d:
65:ff:0c:0e:d5:53:f0:ca:c3:bc:d5:10:55:70:77:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:29:80:56:80:3E:83:98:36:56:32:D6:E8:A5:EB:C0:72:FD:16
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b6:a9:d1:ef:4a:5b:06:c7:cd:fe:d7:4a:94:d6:e3:30:5f:
da:22:d9:5a:6d:09:8d:9d:aa:d1:f0:40:65:fa:e3:ea:6b:5f:
ec:d5:cb:87:28:dc:71:49:bc:24:6a:be:e3:30:2c:bb:00:2a:
a8:a5:30:65:01:c2:18:ac:ff:da:f5:c8:2e:f5:81:6b:ff:7c:
f5:b4:b8:ab:df:83:74:95:03:5e:a9:64:c5:18:b6:b6:06:34:
c1:7e:d3:2d:53:ef:04:b9:f4:94:0f:71:b5:d9:53:54:ea:7a:
33:4a:73:cf:6a:0c:2b:e8:2d:22:01:d4:4b:73:d5:fe:cc:91:
46:e9:7d:e8:30:5f:6d:99:16:4b:bf:66:db:91:6e:7e:ac:ae:
a3:6b:64:14:d3:df:68:cc:50:c6:15:80:42:61:8f:ed:6d:3e:
ab:2f:48:71:b0:59:c0:d0:18:05:31:9b:e6:50:90:f1:af:2b:
d9:e4:be:d0:cf:64:08:80:88:9f:7a:49:0f:40:c3:ab:ec:72:
92:45:0b:01:4a:52:0f:b5:6c:05:e2:a7:1e:ef:07:2d:bf:36:
7a:1c:88:5b:e5:b0:ee:f0:81:e9:f5:5b:26:09:4c:4d:93:8c:
15:43:8f:a3:c0:d2:75:4a:ba:a3:51:2f:ef:bd:8e:57:0f:ff:
eb:52:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client