Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: ub6FGPzltRsZKG1C35z1r94cY3RdK46VRf4lNqb7RNo=
Subject key identifier: ED:D9:2E:8B:8B:90:00:48:61:FC:3B:9B:E6:15:C7:2B:2A:1F:7A:71
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0199FF22FEE7515C0717CF9FA94305D26077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1408
Signing time: Mon 20 Oct 2025 01:01:47 +0000
Manifest this update: Mon 20 Oct 2025 01:01:47 +0000
Manifest next update: Tue 21 Oct 2025 01:01:47 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: Jet4DkDaYl+alDYig+wTzsRb+9KW0MOriVet5iPIEq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:fe:e7:51:5c:07:17:cf:9f:a9:43:05:d2:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Oct 20 01:01:47 2025 GMT
Not After : Oct 21 01:01:47 2025 GMT
Subject: CN=edd92e8b8b90004861fc3b9be615c72b2a1f7a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:0c:32:57:a4:b6:cd:ce:dd:17:00:43:b4:
89:22:09:c1:69:73:5e:64:c4:06:30:36:5b:68:85:
5b:30:60:45:bd:40:c5:23:6b:75:7f:dc:a8:82:78:
41:6b:9c:04:eb:fa:47:8a:18:4e:87:41:05:79:9a:
62:6d:4b:2b:46:eb:61:0a:96:26:b7:c9:0e:c4:27:
5a:5e:3f:63:68:a1:17:50:1f:f2:20:c5:6e:e9:b5:
8f:db:e9:cf:c6:56:31:f7:3a:56:8c:29:6c:6a:a8:
92:01:96:70:bd:05:14:28:53:82:14:40:64:7f:3e:
67:05:9f:48:54:de:67:fb:95:6b:e3:71:cb:35:df:
50:b6:31:be:d2:70:e7:8f:91:c3:25:93:e7:d3:26:
a7:fb:7a:c9:76:55:56:93:5b:86:35:dd:4d:35:1c:
42:85:6b:67:4d:e1:16:6d:a0:4c:74:02:fa:cd:49:
d0:78:df:fe:cf:f1:eb:d0:f2:e9:e4:37:17:1d:6f:
a1:f6:de:bb:4e:0f:98:74:bd:ce:da:64:7e:d7:13:
f8:4b:d9:07:b4:24:49:be:b0:54:b4:0d:62:4a:fd:
37:d3:44:03:7c:eb:56:d2:5d:a5:04:07:01:df:41:
43:4b:00:a0:b7:6c:e5:71:9e:18:84:49:1a:3f:35:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:2E:8B:8B:90:00:48:61:FC:3B:9B:E6:15:C7:2B:2A:1F:7A:71
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a7:b0:7f:c3:59:6b:40:34:6a:5b:41:b6:b0:4e:30:8c:3a:
40:1f:c5:34:a9:fb:46:b1:78:7b:82:e9:81:fd:e6:4d:0f:91:
27:d0:76:28:77:35:98:a7:ef:a3:16:f8:30:fb:16:1a:0b:a9:
aa:02:8c:c1:79:f2:cd:ed:95:02:d2:80:e8:7b:85:13:80:7b:
d1:31:ed:81:ae:1d:98:31:dc:38:09:31:b3:46:df:6e:5d:26:
d7:e9:45:df:24:73:8f:a1:d1:15:9c:7f:e5:1d:23:b5:04:af:
bc:5c:7f:7b:76:32:ff:53:02:34:b1:eb:b8:27:c0:54:e4:b1:
40:8f:b7:17:b3:e3:d8:2f:a9:3e:40:64:22:36:60:25:b5:50:
91:6b:d0:75:aa:f6:01:b1:ee:60:d5:c0:fb:80:1d:5d:e5:97:
67:0a:8c:03:ed:ab:be:4e:86:61:de:c5:db:c6:d5:19:bb:17:
12:09:91:25:31:93:27:39:ad:35:ea:30:d6:0e:e8:65:2f:d2:
cd:16:5f:d9:4a:90:1b:36:92:ab:2e:20:6f:3f:aa:1c:bb:5b:
25:24:c8:c4:72:5a:53:e2:c0:f2:30:06:fa:e1:1a:30:62:b9:
d8:18:28:e3:f4:c5:43:b9:e4:53:13:61:38:a6:98:b1:80:f0:
67:06:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:08 2025 by rpki-client