Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: egmd/uJpqqiAXFz5N0Vwjd72XgWLr7y8RUwckXxbiY4=
Subject key identifier: BC:6B:A9:BB:5A:C6:B7:5E:2D:38:2D:E6:E4:44:15:AE:C4:6B:63:7B
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 0199FC8F58DE3FB7CDB48E5CB645DD776249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: QKg05lbFiwVdmsqGzTZf638wGKjPQsTZwF0eUlB0Hvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:de:3f:b7:cd:b4:8e:5c:b6:45:dd:77:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=bc6ba9bb5ac6b75e2d382de6e44415aec46b637b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:d8:57:2e:0e:60:83:3b:d0:8a:49:e3:89:
52:dd:6d:68:31:96:81:72:4b:ab:47:ad:09:1d:f3:
d7:6f:60:5d:ea:78:c9:37:78:55:19:55:05:21:ed:
a5:e0:cb:ed:b8:f0:24:d9:81:40:65:c5:11:80:87:
04:28:cf:9d:e3:be:d0:00:16:c8:88:b5:45:60:49:
ba:c9:ba:4f:a1:47:c9:fb:b8:85:fb:61:82:40:1a:
7f:a0:b4:f4:ad:05:6b:ed:bb:ee:7b:73:87:1f:63:
ad:8e:6b:b3:27:c2:e3:b6:63:86:c9:ec:5b:06:2f:
53:84:b6:88:54:df:4d:a3:83:e9:cf:97:ca:e6:f8:
a2:ce:27:19:1e:b5:d7:8b:b4:c8:58:a2:29:bb:6f:
1f:3a:21:80:8d:a2:a1:e8:e8:a5:18:6e:4f:0b:7a:
aa:2c:99:3a:73:2c:11:e2:bc:80:65:65:2f:f7:0d:
62:f8:a8:d7:82:a1:f6:51:16:0f:09:48:3d:04:79:
c5:f8:9f:51:2a:f8:0b:57:5a:58:55:c1:8d:e2:78:
3a:01:0d:5a:fa:91:41:a2:1e:86:be:34:f9:4d:db:
47:97:40:e0:4c:3c:49:75:24:1c:22:13:fe:dd:9b:
93:db:7c:40:60:c9:f7:27:04:0d:40:28:c4:27:7f:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:A9:BB:5A:C6:B7:5E:2D:38:2D:E6:E4:44:15:AE:C4:6B:63:7B
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:93:6f:0b:e3:35:b0:d8:80:5a:06:7f:63:02:a2:9b:a3:
cd:9c:7d:24:b3:a3:ff:c9:0a:e2:1c:bc:3b:c9:a5:b9:ae:da:
79:1a:ba:15:4f:c4:73:94:8f:ff:6d:90:c1:73:02:75:bb:89:
8d:fe:1c:d7:c0:c7:c8:69:ca:8c:1f:84:e8:a7:d8:f4:ff:37:
51:9d:0e:0c:18:aa:0a:30:bd:be:8a:09:d3:3a:cb:7b:72:60:
fb:c1:ee:43:a9:a0:19:ac:32:e0:81:d8:fd:af:27:4e:2e:e2:
3a:a4:ac:6c:03:cf:cc:28:53:e0:91:b8:2f:87:86:39:ce:ef:
e9:9b:0a:41:11:5b:65:08:b1:9d:0d:61:88:87:61:44:1b:7d:
95:59:e6:ca:e9:16:1d:7a:a7:a9:a0:b4:19:c5:e8:40:99:5b:
94:f6:bc:18:ee:e2:59:d9:c1:16:ab:41:d5:22:22:d8:ec:a7:
ff:c9:7f:87:e6:6a:7f:20:de:62:d3:de:fc:fa:03:b2:6b:5d:
f0:73:f1:ff:13:19:7b:d2:10:30:32:17:39:fa:61:d8:48:4a:
cf:ce:82:b2:68:03:84:5f:7c:ab:97:a7:12:64:41:97:64:88:
77:94:00:5b:bd:f2:eb:dd:c8:fd:9a:99:bb:29:45:21:eb:30:
e6:61:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:45 2025 by rpki-client