Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: zyrDXo3lDZdYN2bWzOLjy6uIcGRKJ4zc9akzppk2tyU=
Subject key identifier: C6:BB:3C:B1:D1:6F:3B:5C:3E:8C:17:FF:96:4D:D1:BC:26:71:B8:B3
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 0198D439AAF8E5A3BA24A4E421289CE6AF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 138D
Signing time: Sat 23 Aug 2025 00:00:05 +0000
Manifest this update: Sat 23 Aug 2025 00:00:05 +0000
Manifest next update: Sun 24 Aug 2025 00:00:05 +0000
Files and hashes: 1: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=)
2: GGu6DgY0ERNuYK9xmqsnpvCICDM.roa (hash: 7eXW7jU/aeWN+U1gVzyr4Mm0AUW1g40MWgUcsATmXhE=)
3: UIGvYkduNGqg09SYQ7P_OdhL5co.roa (hash: cF4oKBk4rbOWfJja0DECjSfTGt9MZe0fwhQ8uP9/BBQ=)
4: g9MAIleMyYdSsNd8vqrwDUwOQl4.roa (hash: vMX3Pa2f/He7F/fZkN04odgU+HmGv4FaiPNtPWvHa5o=)
5: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: hS4liUPnla+yuKhOLg3vVsK8KPl3AMeuElyL9QGH9pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:aa:f8:e5:a3:ba:24:a4:e4:21:28:9c:e6:af:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Aug 23 00:00:05 2025 GMT
Not After : Aug 24 00:00:05 2025 GMT
Subject: CN=c6bb3cb1d16f3b5c3e8c17ff964dd1bc2671b8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:64:c4:6f:75:94:03:f6:8a:e1:67:91:76:
1c:af:38:44:68:a7:82:03:87:c6:82:4b:8d:fb:05:
5e:1c:56:72:69:93:5d:a3:90:f1:1a:e5:ee:38:69:
b8:4c:2d:e5:54:84:f7:37:59:fe:c3:ce:b5:3c:de:
ec:17:dd:3a:4d:65:be:58:52:92:a1:64:8d:1c:5b:
e9:e4:7f:ad:48:c5:cf:2d:b4:f3:8a:67:28:ff:7b:
d6:30:01:46:cb:c5:7e:32:1f:37:ac:23:06:ac:70:
a6:0b:34:b5:11:0f:3a:ca:c2:f4:f4:44:03:cb:68:
ae:07:54:c2:c4:db:63:ef:a0:2c:99:9a:e6:64:fd:
cd:50:47:48:e1:64:34:9c:1a:76:6a:40:f8:bb:ff:
09:ef:e3:ad:88:90:31:69:39:5f:88:6e:a3:8e:1d:
d3:93:db:f0:75:e0:8d:39:12:ce:73:11:cb:e4:f9:
a3:36:f9:fc:6e:01:b7:9d:de:19:e2:1c:ad:1d:9d:
d3:40:90:f6:79:c8:37:45:03:65:93:b6:7a:fc:66:
64:f6:af:22:0d:07:82:2a:19:9c:6c:ca:69:4a:7e:
4a:d7:8e:ad:fb:34:31:24:00:74:f5:67:8c:0e:03:
fc:77:3b:5e:e5:6f:7d:78:6d:05:15:e6:33:8a:c7:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:3C:B1:D1:6F:3B:5C:3E:8C:17:FF:96:4D:D1:BC:26:71:B8:B3
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8d:9b:39:bf:09:b4:e2:8c:78:b4:ac:77:0f:1c:d0:4a:33:
10:c7:26:4b:18:f9:ca:1a:0d:91:3e:15:32:f3:54:b7:7d:77:
33:d9:39:78:aa:92:d9:71:33:e2:2b:27:f0:68:9d:9f:af:1c:
11:77:cf:82:98:fe:5a:07:d0:43:51:8b:10:42:02:6f:f1:0f:
89:96:ed:73:c5:e5:ea:41:15:c1:ec:25:4d:52:0c:67:80:f7:
97:bb:1e:33:0c:80:90:e8:1e:2b:3c:3a:f3:dd:9e:02:e3:7d:
49:4e:42:7f:5c:b3:d5:a2:93:10:01:7a:e5:f3:90:57:f2:69:
e7:98:1a:20:a4:0d:45:23:6f:ff:95:28:16:f7:a8:c7:6e:c7:
ca:b2:94:ba:c1:5f:66:cb:f9:98:26:39:9c:5b:d0:4f:a6:97:
d2:8b:84:15:39:82:37:3b:a2:90:6f:4f:e3:c5:b9:04:d7:4d:
b9:2c:2b:a9:47:09:6d:3b:54:70:79:9e:25:a7:4e:03:54:53:
ba:b1:d3:0d:f3:6c:77:68:6c:b2:8d:76:07:00:e4:22:a9:88:
62:ca:49:8f:84:f4:15:d2:06:71:67:1a:c0:bc:1b:ba:69:4c:
f6:b7:4e:a8:51:7b:5b:ff:3e:90:e6:38:ca:b3:63:0e:da:a0:
a6:25:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:25 2025 by rpki-client