Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: 6OcYBm4gwKQwU1EiIo8wzd9PNtjfoXuCU5LFAxAcduo=
Subject key identifier: 32:B5:35:16:5F:84:27:C7:1E:45:79:50:D8:EF:03:6D:EF:4E:4E:D2
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019A02C7520ADEE5CDB0FA65A3C63E1F0DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0606
Signing time: Mon 20 Oct 2025 18:00:08 +0000
Manifest this update: Mon 20 Oct 2025 18:00:08 +0000
Manifest next update: Tue 21 Oct 2025 18:00:08 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: /fpr1l2s9CNu2a6dlLprLYKwgNASk0p2a8lzCaz9S7A=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:52:0a:de:e5:cd:b0:fa:65:a3:c6:3e:1f:0d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Oct 20 18:00:08 2025 GMT
Not After : Oct 21 18:00:08 2025 GMT
Subject: CN=32b535165f8427c71e457950d8ef036def4e4ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:cd:bf:12:0a:df:62:47:a0:a7:cc:e4:1d:
8e:50:9a:97:48:9c:e4:86:6f:be:bf:ea:29:f6:f8:
42:0f:59:9a:0b:ae:9b:75:ae:3f:5e:9b:5b:cf:2f:
28:29:df:ab:26:f8:4c:d3:d2:23:3b:69:e2:c3:d9:
80:eb:d5:c1:b5:0e:61:ae:77:70:37:69:a1:1e:fd:
21:9d:3e:04:8c:e7:3e:37:74:8d:db:f5:e3:9e:80:
f3:7b:1c:f4:16:16:b5:73:21:9b:92:81:b6:9d:2e:
e8:77:f3:92:0d:cf:4f:08:25:eb:d7:fd:d2:4b:21:
9c:93:8b:03:43:9c:e8:38:f0:88:bb:85:1b:47:17:
9f:4f:b2:de:a4:03:08:67:63:aa:c2:3f:d9:d1:2b:
b9:7b:86:44:4f:be:1b:69:43:45:97:98:e4:53:cd:
8c:92:47:59:a9:54:9c:d6:f0:33:b7:f3:e3:5e:80:
f3:16:0b:9a:e3:37:63:21:d6:ea:70:e3:9a:57:5b:
2f:0b:4d:f0:80:47:cb:e7:5c:b9:96:2e:b2:68:f4:
e6:ea:03:81:59:20:8f:76:3c:af:51:a3:53:4c:05:
5a:36:4e:43:7d:05:94:45:9a:94:da:f0:74:c6:81:
a8:37:de:90:bd:c9:c0:1f:95:72:21:6e:c5:d7:c2:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:35:16:5F:84:27:C7:1E:45:79:50:D8:EF:03:6D:EF:4E:4E:D2
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a0:f4:33:a5:2c:ff:8b:3e:30:34:15:8b:cb:80:50:c2:58:
95:ae:ee:4e:04:6d:c8:83:0d:5e:cb:30:64:e3:38:ce:fa:2a:
e3:45:c8:08:d5:4f:f6:cc:a9:93:93:6c:f5:7b:bd:26:db:b0:
71:17:56:90:2c:f1:20:57:ff:4e:3b:8f:0f:e6:38:0f:1c:44:
fc:63:ba:8f:ef:ec:45:c1:db:b6:9d:b5:d7:65:c4:50:2f:5b:
e8:f5:7a:e5:5d:c4:bf:39:9b:6e:f8:d5:0c:e9:77:6a:97:f8:
5c:bd:a4:59:b6:20:81:45:b1:03:ac:8e:19:e3:17:24:46:b5:
07:7a:e4:69:38:a1:aa:6c:01:68:81:79:8b:0e:6c:c0:b7:d3:
8d:b1:ef:b4:92:6f:bd:9e:5b:fb:52:78:86:fd:33:93:db:f7:
b7:13:5e:f2:4c:7a:a2:2b:b9:0e:70:f7:cc:43:42:38:c3:dd:
61:95:98:45:f0:fe:8a:80:6e:a5:47:89:16:14:a4:7e:89:8e:
a6:c0:76:5c:cd:ef:46:02:a6:7d:55:87:f7:62:76:33:b7:d8:
20:d4:6d:f0:68:fb:03:e8:46:59:13:4d:aa:22:9e:bd:0d:68:
b4:90:37:c9:92:37:c2:77:d2:6e:76:a0:bf:04:dd:cd:c8:10:
36:5f:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:05 2025 by rpki-client