Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: ASwArcEpvVjHcpm2W4vdm6RK2hrEigJ4Xh+ylGWPgdk=
Subject key identifier: A6:72:DB:4F:F1:DC:32:EF:FA:D7:B8:1F:2F:99:10:5A:50:9E:E5:41
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 0198D5162D94EA7C489C7AB04E3E602D81CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: NVmIblhmreH86t7MR4rFZng3C5Iu73IxoCjIx2OX/LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2d:94:ea:7c:48:9c:7a:b0:4e:3e:60:2d:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=a672db4ff1dc32effad7b81f2f99105a509ee541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:08:59:51:48:35:96:b7:1c:ed:a9:ed:c8:
0b:0e:4d:41:ef:01:c4:88:ca:9c:61:91:81:09:d4:
74:2e:18:74:48:ba:ee:cc:db:62:c3:eb:02:3b:c0:
2b:0d:9a:ed:06:2b:fa:90:9e:52:75:92:21:36:26:
9f:0c:4b:fe:9f:8c:be:31:a3:08:8f:a9:44:9e:e2:
af:88:6e:92:ea:7b:9b:4d:97:fa:75:17:71:2e:07:
35:63:7a:12:0d:54:a2:bd:94:e2:5b:45:29:11:d3:
8e:d2:71:95:cc:fa:d3:4e:bd:ef:b1:be:15:87:81:
c1:74:2f:a2:31:50:68:14:dc:b3:7d:e1:1e:0a:29:
81:e7:96:8c:29:5f:16:48:b8:7c:63:f3:a1:f0:39:
e4:23:cd:a1:3f:5a:18:79:7f:f4:32:c6:45:c2:58:
7b:7f:24:64:58:63:b8:62:a2:87:10:ba:06:12:94:
8e:c5:8b:91:dc:98:f8:6d:3e:f7:55:59:64:71:73:
01:8d:d9:14:25:78:c9:0d:bf:5e:e4:f7:62:29:53:
0a:b4:d9:90:f8:93:9b:8d:28:0a:23:08:9e:fa:1a:
93:be:b7:1e:a9:8d:36:a2:2d:d3:08:7a:44:bf:20:
ae:86:7e:da:48:98:d8:34:eb:05:c8:b0:0b:f8:e2:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:DB:4F:F1:DC:32:EF:FA:D7:B8:1F:2F:99:10:5A:50:9E:E5:41
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:11:8a:21:50:a5:2c:9f:da:e3:88:e4:2c:82:f2:e5:d7:70:
12:44:d0:54:91:84:5c:67:21:56:56:45:39:ce:10:77:5e:18:
f2:77:c8:75:18:84:cc:76:c1:3a:b2:0e:cc:1e:0d:6b:4d:83:
21:1a:14:46:92:62:36:8d:77:aa:27:0e:df:d8:8f:1c:95:8d:
2c:68:ec:e1:ea:a6:0c:f3:f6:cc:7c:8b:b9:70:e6:a2:aa:2c:
29:26:9a:d6:a5:b2:14:9e:bd:dd:8b:92:21:d9:95:78:67:9f:
c6:65:b3:a1:8a:81:64:96:27:b8:43:d5:9e:56:3c:ac:a9:c2:
02:cf:a6:df:83:28:34:82:f0:f1:2a:9a:eb:13:4b:2e:e5:ec:
85:aa:14:dc:16:cd:6e:dd:e2:c6:c2:6c:70:b8:7b:99:ee:75:
e3:4c:e5:46:39:bc:e1:93:29:62:4d:83:18:91:c9:2c:c2:9d:
a3:60:ee:da:df:7d:ef:28:71:c5:96:40:8f:04:28:26:a7:6a:
fa:4c:86:4e:b1:80:06:fc:f1:d0:a1:71:87:76:ad:fb:5a:bc:
ad:55:83:cb:7b:da:f2:f9:89:b3:5f:8c:21:7d:73:05:f8:00:
db:dc:8b:16:4d:ca:50:56:d4:34:07:98:53:43:3b:81:46:1b:
64:f2:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:58 2025 by rpki-client