Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: S+bBRMLxnbl3TMKGkPQ2BGFH36WCXV2yyD3gE50Drx4=
Subject key identifier: 0C:3A:DB:ED:AB:26:53:E9:D0:38:47:63:29:4F:44:D4:B6:DC:C9:4B
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 0199FD346CF3F77C6CBE3EAF7BEA3F182BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 1427
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=)
2: GGu6DgY0ERNuYK9xmqsnpvCICDM.roa (hash: 7eXW7jU/aeWN+U1gVzyr4Mm0AUW1g40MWgUcsATmXhE=)
3: UIGvYkduNGqg09SYQ7P_OdhL5co.roa (hash: cF4oKBk4rbOWfJja0DECjSfTGt9MZe0fwhQ8uP9/BBQ=)
4: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: BPy6hGCVSPeet0ylv0tuTWDy06/RlmfLzTthTSBTlTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6c:f3:f7:7c:6c:be:3e:af:7b:ea:3f:18:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=0c3adbedab2653e9d0384763294f44d4b6dcc94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:71:98:63:c5:93:22:1d:06:4c:ab:c0:ce:
fa:d8:19:bc:b8:d7:d9:b3:fc:6f:9a:c1:ba:05:4e:
77:7a:87:01:97:48:58:bf:5d:a7:43:40:66:4e:3f:
16:7e:8c:fb:ad:70:94:89:88:1e:67:17:95:fa:66:
f0:2d:70:8f:cb:81:dd:ff:24:65:2e:bb:f4:62:bf:
22:47:38:66:3c:23:7c:32:3c:bd:1a:6a:32:5a:cc:
88:a3:3d:f6:13:f7:e7:18:1e:9b:83:46:c2:35:8c:
dd:8a:a3:d0:63:be:72:95:ed:64:64:33:92:70:d2:
8a:60:a7:b2:b7:82:e2:17:69:50:8b:4b:cf:d0:3e:
e9:7a:dc:ca:37:9b:26:3a:fd:e0:07:e7:54:ea:6c:
32:ae:75:b5:21:a1:b6:b6:3d:fd:88:90:75:49:1a:
03:84:ad:58:5a:31:93:01:fd:53:61:50:39:50:cf:
2f:6e:11:54:eb:82:0b:d5:78:b5:fa:2a:32:5d:10:
a7:e4:8b:13:38:fa:41:6a:44:43:4d:bd:fd:4a:d9:
04:87:2f:a9:4b:66:19:1b:19:ee:f0:9f:fd:7d:8a:
fd:91:f1:ff:fe:58:99:34:e9:7b:29:a5:b4:74:d9:
75:70:c0:1b:af:42:59:47:7d:b8:5b:fb:96:5b:7a:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:DB:ED:AB:26:53:E9:D0:38:47:63:29:4F:44:D4:B6:DC:C9:4B
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f2:c7:c9:3b:bc:bf:c1:06:e7:06:c6:de:8b:eb:6c:18:36:
80:b1:2e:ad:8d:81:ea:95:a4:04:88:99:e2:4f:17:ae:1c:29:
81:45:e5:d7:27:36:92:b7:d4:6c:49:a8:26:bd:83:ec:f3:f0:
49:7c:05:9e:ce:91:e0:b2:ed:32:74:ce:e2:68:8b:7a:08:32:
5e:10:36:18:15:54:5d:34:9e:3d:0f:a8:34:2f:c7:85:75:c3:
d5:ee:64:55:69:46:1a:14:84:24:62:b0:fa:cb:b3:45:3f:11:
60:75:7b:b6:a5:78:8b:48:b1:85:21:fc:87:b5:9d:96:5c:a1:
ec:31:04:d0:02:8b:0c:ec:fe:6a:54:86:0f:cb:17:45:a2:cb:
84:a9:55:a5:6a:eb:7a:55:ab:55:0e:a6:9d:0f:aa:c2:8d:2f:
e1:c4:97:fb:fe:2f:9e:37:19:fd:5f:bf:44:11:b9:dc:b5:d2:
cd:41:43:36:47:03:fa:57:2a:fc:5e:29:be:d1:38:39:57:6d:
33:15:ec:53:b4:ba:3a:da:5d:07:4a:9a:ee:bb:78:69:bd:98:
16:10:42:49:03:42:ce:3e:c7:d5:97:bf:43:4f:05:bb:29:24:
de:0b:b0:ae:18:6f:71:83:78:fb:c0:35:68:18:8c:31:ea:44:
f6:f5:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:43 2025 by rpki-client