Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: C9hZk3T9zJHKsdxAbBe2jkuntIe3QqcDCuN/j2rLyuw=
Subject key identifier: 64:B6:46:71:7E:99:34:BA:E2:55:65:8B:AC:4D:2E:72:76:C1:07:85
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 0199FE7D972A6CD018D7E4C73FE8CEE704C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1645
Signing time: Sun 19 Oct 2025 22:01:07 +0000
Manifest this update: Sun 19 Oct 2025 22:01:07 +0000
Manifest next update: Mon 20 Oct 2025 22:01:07 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: Ar3R+Unca5VpUu231+B4A1wl9zPN+t/qGJ8ZyKFa3ww=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:97:2a:6c:d0:18:d7:e4:c7:3f:e8:ce:e7:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Oct 19 22:01:07 2025 GMT
Not After : Oct 20 22:01:07 2025 GMT
Subject: CN=64b646717e9934bae255658bac4d2e7276c10785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:61:c1:29:9c:36:17:be:2a:fb:40:b4:10:
dd:19:b2:5d:27:2a:42:99:22:08:72:a6:39:8a:a3:
f5:4b:8e:75:54:35:ba:19:84:b7:80:be:59:d5:bf:
de:3a:96:52:1e:c1:7c:cc:86:c3:9b:08:28:fb:d1:
cb:f7:13:bf:12:c1:bb:de:0b:1d:dd:9d:0a:07:c4:
0f:b8:ba:b3:6a:83:e5:42:fa:2c:7e:58:db:cf:08:
72:07:21:ad:21:87:20:b8:1c:0f:71:2d:d3:cb:92:
ff:23:75:75:66:48:88:55:be:82:40:43:3c:bf:7c:
36:93:e7:24:56:fa:f9:be:35:5a:8b:28:16:ad:19:
ab:24:66:97:16:86:30:16:98:e4:89:7a:41:ee:e5:
e9:f2:78:ef:c7:d2:9c:dc:18:e1:ca:bc:6e:af:40:
20:04:58:6c:9f:5d:a7:a9:87:76:0f:45:6c:b8:f8:
dc:0c:bd:8d:ce:18:96:1f:94:1d:94:1e:26:45:21:
2a:9a:8f:cf:86:95:24:e0:a0:c6:9d:72:ee:d9:9e:
76:f4:e1:e9:ed:5e:9e:88:16:da:e4:cc:b2:be:89:
ee:39:68:b2:f1:98:32:f3:34:a7:aa:38:a5:0f:75:
d2:7c:0e:07:b5:be:c7:d1:e8:fb:26:e3:20:a2:2e:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:46:71:7E:99:34:BA:E2:55:65:8B:AC:4D:2E:72:76:C1:07:85
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:97:23:e9:68:c5:d6:05:db:c0:40:1f:1f:91:da:55:6a:5e:
59:ea:95:80:1a:c7:37:55:6e:34:fc:86:63:7d:91:be:42:ca:
4e:15:30:30:40:99:72:2e:7c:18:a5:ad:08:03:71:ef:4f:66:
47:fe:44:f8:0f:7e:6c:f6:42:66:8f:32:52:54:39:81:da:30:
19:2a:19:61:27:a0:02:3e:b8:46:6b:2f:bd:28:81:6e:8e:95:
c1:d5:f9:49:38:1d:c1:a1:e6:fc:9c:0d:40:46:11:ab:ac:a0:
98:25:f0:c4:c9:40:8d:3b:65:5f:f7:eb:5c:4d:71:cb:37:8b:
4c:c1:b4:de:67:12:a4:92:55:d6:d9:8b:26:c4:16:e5:2c:50:
dd:fd:8a:db:c1:18:08:65:ee:d9:b4:b8:31:5c:9e:24:01:f3:
32:ba:8a:c8:36:05:86:9c:d6:01:97:eb:39:46:a1:7c:e2:40:
06:61:ef:85:3f:fa:8b:cc:70:e6:25:60:63:0e:a7:53:f4:60:
f5:18:00:84:50:6a:80:e1:f2:82:19:e7:b5:3d:84:3e:6a:73:
cf:87:8b:ac:a8:c0:dd:f3:73:f1:ee:5c:c1:65:45:fb:68:6e:
38:bf:bf:dc:88:79:5a:5b:64:84:9b:ff:7b:1b:58:de:c1:b1:
d6:54:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:56 2025 by rpki-client