Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: V+nN8hWrP8V2LTy5xGU9h3IYhSuQzQBDD1+Kg6rl3B4=
Subject key identifier: 32:BE:7F:C0:1D:A3:96:42:96:26:00:B0:A4:21:16:98:A9:28:37:7B
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 0198D4A82C00E6304E7D32B5E47515E880C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 02D0
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: Bc+dglyPZpUAJyzt0V3zerg6jyjOucCMF6RyBkGU4TA=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2c:00:e6:30:4e:7d:32:b5:e4:75:15:e8:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=32be7fc01da39642962600b0a4211698a928377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:0a:69:8c:9d:bd:cc:02:98:7e:0f:88:8b:
80:da:73:dd:c6:dc:a4:97:6d:17:d2:a0:ec:f8:de:
95:c0:bd:2b:b9:f2:2f:27:2f:65:7b:63:23:8b:0e:
c6:56:0e:b8:e3:e1:04:c6:65:59:8c:59:b5:b2:40:
7e:c4:20:b6:8b:41:dc:5b:ee:cc:50:ef:a3:3c:6e:
15:da:c5:92:04:1c:58:26:7f:7e:13:40:b0:4f:28:
04:11:82:68:dc:f5:cc:07:80:2a:bf:25:91:8c:5e:
e6:f1:c5:2f:05:1f:ed:d4:66:2a:9b:6c:f6:8e:40:
b3:87:da:82:4f:22:d6:08:f1:13:86:9a:e0:4e:f9:
cf:2d:05:83:69:20:60:eb:e0:0a:1c:94:68:74:5e:
b4:ca:76:42:a7:fc:1a:38:3b:08:0f:ea:b2:cf:6f:
13:1e:fd:25:50:86:a1:4c:81:40:be:4e:c6:29:15:
36:a0:fe:8d:e9:00:47:4b:e0:b3:07:67:b2:e2:5b:
72:6e:8f:57:53:39:02:6b:33:d4:16:95:f0:28:eb:
2e:fd:45:3a:f2:c8:c5:d5:64:cd:03:35:c1:eb:78:
0d:64:b0:2e:21:64:b9:44:82:84:0c:b9:1d:7c:cf:
d2:ea:5f:05:23:28:cc:0d:1b:bc:80:48:08:13:a5:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:7F:C0:1D:A3:96:42:96:26:00:B0:A4:21:16:98:A9:28:37:7B
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:84:43:f9:56:7c:55:8a:b4:18:58:c1:4d:89:05:01:92:48:
4d:f5:9f:bd:d5:f2:66:f3:b1:30:e6:7a:e6:88:5a:7b:81:e1:
48:3d:be:7f:ae:19:87:91:12:61:37:75:c0:5c:00:61:54:33:
bf:1a:48:4b:6e:32:dd:f1:61:1a:a1:ee:fe:ee:5c:89:28:8f:
ec:12:4b:34:d1:1f:36:91:e7:54:69:68:5d:d2:ac:66:97:6c:
13:2c:8f:89:91:89:7e:4c:f1:11:51:d0:a7:78:7b:e1:d2:f7:
5f:3f:50:24:77:83:5f:e0:56:1d:cf:be:e3:03:0c:90:16:c0:
ab:6e:45:ec:7f:fe:38:99:cf:38:48:17:5e:54:62:f3:ed:19:
b1:e8:07:27:13:df:76:47:40:95:cd:40:bf:42:a2:8c:6e:7d:
8b:45:60:35:12:89:62:d2:13:b4:3e:2e:a9:28:da:8f:de:76:
ca:3f:4c:53:30:f3:11:fc:ce:85:58:8c:c6:93:9f:fc:72:48:
4d:24:38:79:bf:2a:72:35:f4:a2:91:7b:1b:88:7b:8b:61:c2:
fa:08:8c:ea:6a:be:03:b0:28:bf:2c:67:94:bf:68:05:ad:31:
e2:6a:a0:dc:76:5c:70:13:4a:ca:d7:f4:5d:37:c4:e1:a9:c3:
44:ac:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:16 2025 by rpki-client