Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: eHNcH85OWZq40c5wmhG9+qc0ZXSSErXZrNhKnZG4C60=
Subject key identifier: D8:36:6D:4D:80:DD:C7:F1:93:9D:B9:2F:7E:47:C1:33:23:3E:B0:23
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 0199FDD9A34C2B8EA1EAA3F6F8FB6608A4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 03FC
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: 6PBQeqWO9BpaiXcQC/3pcrCZLojp0+ILSlhUMJIQRek=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a3:4c:2b:8e:a1:ea:a3:f6:f8:fb:66:08:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=d8366d4d80ddc7f1939db92f7e47c133233eb023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:51:78:80:1c:26:dc:3c:1a:fc:f3:26:0a:
17:f1:f0:15:83:22:0d:17:9c:9e:ec:48:89:e5:44:
4f:a2:05:47:42:11:55:ba:ed:af:28:41:e6:01:8e:
1c:32:2b:a4:a7:e1:27:5a:1a:26:e0:fa:99:76:4e:
66:f2:99:4f:73:49:a6:a2:9e:ef:f3:4f:32:db:ab:
5c:e5:de:67:d1:81:66:49:9f:fc:c8:aa:45:1c:a4:
a8:43:21:a5:bd:da:f9:55:e3:7c:4a:ef:c3:47:9c:
2a:86:36:7d:93:01:ac:2b:5d:db:51:ba:dc:70:5f:
b4:8d:57:89:ae:90:b5:78:fb:6d:6d:34:80:11:ab:
12:d0:bc:c3:17:bf:5d:aa:cd:6b:81:ea:86:55:a9:
b2:09:e9:95:57:40:36:f8:da:57:c9:0b:5c:66:75:
9e:0a:c7:1c:5c:27:e0:a1:13:a8:20:df:06:92:b9:
c1:13:43:c8:fb:cb:29:86:45:f6:51:c9:7f:fa:40:
84:e8:4b:64:16:9d:42:2c:e4:f5:f2:9b:ae:9b:6b:
ea:5c:46:79:cd:cb:53:3a:23:9a:7f:83:4a:84:28:
d5:53:83:ec:31:ed:ed:7e:5b:ed:8b:a1:08:36:7e:
df:ce:8f:05:d3:af:32:d8:32:79:d2:30:ab:1b:bf:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:6D:4D:80:DD:C7:F1:93:9D:B9:2F:7E:47:C1:33:23:3E:B0:23
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:cd:7a:f9:f0:8a:18:fb:51:71:8f:0d:40:72:35:08:73:
c2:1d:eb:21:51:47:3c:a0:18:a2:d2:13:bd:0e:aa:94:56:4b:
60:93:79:af:36:b2:1a:43:a1:34:05:b8:4f:68:cf:ce:4d:53:
ea:71:10:06:db:5e:b8:df:99:3c:1b:68:10:7f:74:df:80:2b:
e1:d4:e6:89:7d:39:e3:15:9c:a8:bf:8d:e7:9f:78:58:ca:a3:
e4:e0:2b:68:73:3e:fa:b2:b3:87:91:19:75:2e:c1:f5:c0:81:
b0:42:34:ac:13:9d:2a:c4:07:90:50:8d:cd:28:39:00:36:42:
fa:36:db:4c:e0:38:dd:cb:eb:31:81:3b:a8:13:0d:38:b9:3f:
2c:b7:58:02:7e:f2:1c:a0:19:53:32:6b:73:ed:9f:5a:7b:b9:
cd:07:e7:92:47:9f:2b:36:cf:59:88:36:a9:cf:c5:47:3d:0d:
59:64:14:b0:49:e5:03:23:97:3c:be:b6:2d:e7:21:af:e2:96:
f3:a6:3e:6b:77:61:19:c6:a4:62:f9:8d:96:ed:04:a5:83:66:
64:0a:44:b9:67:aa:c0:a4:c8:28:e0:84:06:11:98:36:27:71:
29:32:d9:05:2d:da:29:01:d9:a1:af:b9:72:80:79:65:c1:e5:
e2:e6:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:03 2025 by rpki-client