Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: UPvsco9w1Xhr4vektj8Sn5LIARTTMftx4BnLQRe1vGo=
Subject key identifier: FC:80:1E:2D:06:A3:5D:EC:E3:EE:1D:7B:4C:ED:0B:AC:FC:24:5A:66
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 0198D65F89EC179B877CFAF73E940790CC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 06F1
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: mfokHz4pRT6A7L5ZTqpNoR4m73KiNzmiWDOpxmUOOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:89:ec:17:9b:87:7c:fa:f7:3e:94:07:90:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=fc801e2d06a35dece3ee1d7b4ced0bacfc245a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:97:72:5a:1d:c9:59:35:ec:21:c6:ae:c4:
0e:6e:fc:55:d2:65:47:bd:63:99:39:32:ed:1d:c3:
da:ff:7c:b8:8a:29:a1:0b:1b:0b:87:80:5c:ef:e8:
87:be:a0:2c:2f:53:e7:bb:dc:55:5f:92:cb:e5:9e:
72:ec:cc:7b:ab:f1:fa:49:f3:3f:a8:12:cd:a8:0d:
3f:e5:f3:10:1a:7f:78:b8:36:6b:33:01:ca:6b:d8:
bd:96:03:91:6c:75:db:cb:70:de:50:99:d6:8d:5d:
15:e0:bc:97:f7:bc:01:11:e1:0a:d0:10:93:5a:56:
e2:4c:1b:f3:ca:ed:11:d0:2e:23:5c:33:1a:e0:9e:
6f:77:a1:02:7d:3e:d4:b7:47:9a:45:23:c3:9b:77:
d6:dc:d4:d2:da:11:44:00:be:6f:73:77:88:1c:26:
ad:f0:c8:09:1e:12:18:fc:09:5f:09:0b:8e:2a:fd:
e1:01:4d:e8:69:43:18:39:04:eb:47:2e:74:1f:f6:
5a:35:c0:36:ad:7b:fd:3f:1a:52:8f:d7:5e:47:66:
73:4a:85:f2:3c:33:7e:c1:0b:a0:3b:a6:da:cf:84:
ab:61:b6:16:b3:12:2b:c5:61:bf:d9:a7:06:65:ba:
66:dd:f7:a3:8f:ac:bf:86:e7:54:3c:77:d4:f6:58:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:80:1E:2D:06:A3:5D:EC:E3:EE:1D:7B:4C:ED:0B:AC:FC:24:5A:66
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:58:d0:05:c6:2d:70:03:0b:38:5c:c2:01:19:c7:23:58:
71:d5:b2:0f:0f:c2:f6:1c:55:8d:a7:aa:72:0d:ae:50:5a:fe:
11:48:09:88:63:18:b9:28:ed:45:96:8f:b8:34:b6:e3:38:94:
1a:7f:b4:07:58:5b:b5:cb:4d:7d:af:32:98:d9:3a:56:9b:d5:
9b:0e:1b:b0:58:99:fc:00:b4:35:2b:cd:11:53:32:0f:6a:ef:
a2:8e:a8:ca:96:26:af:1e:d8:5c:d3:2f:e4:fd:dc:70:16:d6:
14:51:9d:f4:d2:0c:a7:78:9b:2d:90:93:1f:34:dd:05:23:6b:
41:a9:c4:b3:85:4a:c7:f9:6a:e9:30:e4:e8:9a:8e:b2:08:4e:
01:83:bd:5d:71:ca:c7:d4:c7:98:88:ee:c7:c6:ef:b7:fa:0a:
c7:61:81:45:45:a3:76:f1:a4:c1:8b:f1:d1:e7:7f:68:77:6b:
01:43:04:43:aa:37:5e:fd:c8:d2:6a:ae:c1:3b:4d:22:0a:93:
53:b4:91:84:44:1b:4b:74:f4:7b:38:7e:61:16:ed:b8:12:d4:
ec:ce:0e:3d:71:3a:6b:8a:5a:ab:e7:85:5c:aa:e2:97:90:07:
c2:52:db:32:ee:32:cc:36:c1:3e:6f:56:6a:8d:62:1b:32:ad:
60:63:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:20 2025 by rpki-client