Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: 4MBIKX40KRkT2GYWDJmnXQMIMv9TdyCQ9hmV1+dyB8Q=
Subject key identifier: 72:F2:6D:21:5A:A4:DD:5F:EE:C8:A8:59:4C:69:EC:63:F0:41:3E:B5
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0199C7C5CDF6D9BCBF40BB5A5FC500CFF3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 165A
Signing time: Thu 09 Oct 2025 07:00:53 +0000
Manifest this update: Thu 09 Oct 2025 07:00:53 +0000
Manifest next update: Fri 10 Oct 2025 07:00:53 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: 0Dyri4tTzIRo1apg+/L+WyfQ0wyHEcXduFKklLosRv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c5:cd:f6:d9:bc:bf:40:bb:5a:5f:c5:00:cf:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Oct 9 07:00:53 2025 GMT
Not After : Oct 10 07:00:53 2025 GMT
Subject: CN=72f26d215aa4dd5feec8a8594c69ec63f0413eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:51:3c:db:63:a6:f2:93:10:eb:2b:3e:d4:
e5:0b:3b:b8:38:f9:c8:a7:ae:fc:bf:7f:42:a2:ec:
a2:0f:4f:c9:59:49:a3:8a:8d:0d:39:f5:6b:46:14:
8c:f0:cb:62:46:a0:7a:a6:5d:2f:86:ef:82:60:0f:
72:e5:c7:56:d2:46:d6:10:e4:b5:38:70:2b:25:8a:
9f:85:68:a2:61:3d:60:a7:ac:3a:97:7b:91:41:f9:
ec:34:c3:ed:da:02:63:32:ac:f8:57:0c:55:ae:28:
57:23:63:3e:74:d4:52:86:5c:d9:59:19:9d:87:5f:
3a:a5:f9:d2:d6:2d:8a:78:36:9d:5c:5b:19:73:cb:
6e:4f:31:67:f7:c5:74:44:a9:5d:fb:ec:c3:5c:d4:
53:52:db:d8:12:8a:43:de:f5:ca:ea:81:f0:37:5c:
6a:33:0c:48:99:eb:a9:9d:6f:9f:c8:8e:9b:e5:1f:
db:27:20:ae:21:10:93:df:a9:69:fa:15:95:66:2a:
ca:84:3f:2c:80:3e:e8:17:1d:03:cc:f7:fd:32:92:
d5:cf:89:ab:50:75:75:9b:6c:00:f1:21:2b:d1:7e:
9d:17:8d:21:b2:83:44:f3:bb:7e:7c:a8:ad:8d:a1:
70:91:a5:a1:50:f9:97:ec:ff:5a:99:28:9c:dc:ce:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:6D:21:5A:A4:DD:5F:EE:C8:A8:59:4C:69:EC:63:F0:41:3E:B5
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:48:4e:ce:38:ce:ff:cb:19:58:2f:19:00:21:e2:4b:25:a4:
a1:1e:67:6c:ae:6b:eb:ef:a8:66:9a:5f:48:6d:3f:3e:60:fa:
76:24:14:a5:1c:12:25:25:a0:66:dc:3a:c1:e4:8d:46:89:39:
81:ab:80:87:25:93:27:a6:c8:36:8e:05:8c:89:a8:a2:2f:a1:
b1:b8:4d:59:fc:dd:13:17:30:d3:1b:9c:48:98:d9:3a:b3:5b:
33:1c:77:a8:13:21:91:95:8b:79:58:f1:8c:19:75:28:27:5f:
a8:a1:2f:30:c8:a2:e1:39:71:f8:6b:3a:9e:bb:ec:22:51:8c:
a2:b8:03:2d:0f:fb:ad:88:b7:7b:cb:89:97:c2:22:38:da:9a:
6a:38:c3:e6:66:ed:cf:0d:94:13:51:7c:56:74:9f:58:1e:b7:
62:36:db:53:7d:b3:a7:35:7d:17:95:52:cd:aa:3f:18:9c:40:
6d:0a:e4:9a:e5:d7:ff:9d:d5:44:64:62:51:e5:63:81:c9:96:
f0:46:89:d8:d7:74:47:05:b7:1b:65:14:f6:6e:20:5c:2b:96:
f7:43:40:9c:c2:3f:48:7d:90:b7:d6:d0:dc:66:70:e4:77:46:
8f:98:61:8a:13:b8:00:59:1a:5f:73:93:3f:e4:24:55:0a:f7:
19:d1:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:16:58 2025 by rpki-client