Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: H6WwxL5y6V5fqGHzJzwEBDjk3wfCSOub25rctDXtSZE=
Subject key identifier: 3B:2E:1E:10:73:3F:6F:E3:5F:E6:B3:32:DD:DC:D7:A8:46:5D:5D:C3
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019A0035C2673DF2B9B99699E434756423B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 148F
Signing time: Mon 20 Oct 2025 06:01:54 +0000
Manifest this update: Mon 20 Oct 2025 06:01:54 +0000
Manifest next update: Tue 21 Oct 2025 06:01:54 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: GK2y7Hz4vbm+2pWeDwznZ8X3362ksIyHYzpfz+b0/z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c2:67:3d:f2:b9:b9:96:99:e4:34:75:64:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Oct 20 06:01:54 2025 GMT
Not After : Oct 21 06:01:54 2025 GMT
Subject: CN=3b2e1e10733f6fe35fe6b332dddcd7a8465d5dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:4b:d4:96:75:28:b4:20:a3:69:32:51:8e:
2f:ca:fb:d4:7a:5b:46:d1:9b:d7:8f:6d:27:19:51:
58:df:6e:22:51:d2:4a:6e:97:f5:17:c2:57:84:e4:
70:7e:b2:bf:6b:74:ae:59:04:06:76:aa:83:e5:db:
7d:7e:0c:bb:c5:29:a6:b3:58:ec:97:82:c8:e7:92:
10:f2:e4:04:b4:97:7c:8a:20:66:9b:71:4a:cb:85:
65:3e:ba:5a:2b:44:74:ab:63:bc:16:de:62:e8:6e:
88:8e:c5:04:d4:7d:41:30:fb:2c:77:21:1a:3c:ab:
10:7c:81:30:0e:af:57:af:6a:65:8d:c4:c6:21:02:
5d:36:7c:e5:a7:7a:3c:c7:85:90:4f:bb:27:bb:44:
b8:d9:b6:ea:35:77:bd:28:eb:4f:a3:8d:21:18:a9:
a5:1b:a9:9f:11:32:8e:30:43:ba:4f:12:6d:65:24:
e0:55:68:c3:81:b1:b4:64:c0:b9:a1:b8:24:66:4f:
43:dd:ab:bd:f8:68:70:1c:e6:91:59:da:d1:53:5d:
f8:e0:cb:ab:9f:f6:b3:a5:20:61:89:d6:5c:a0:b9:
a3:2e:a5:c2:95:9e:ac:21:f3:ab:f4:e9:98:d9:2e:
b0:af:11:0f:3c:46:6a:db:93:08:4a:21:8c:3c:ba:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:1E:10:73:3F:6F:E3:5F:E6:B3:32:DD:DC:D7:A8:46:5D:5D:C3
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:60:51:f1:c1:93:43:bc:3b:81:db:3a:ca:0b:19:9b:97:
80:69:6c:c0:d1:05:ec:64:be:e1:be:0b:3e:b8:3d:4d:65:a3:
be:42:1f:63:66:ca:ac:9e:5a:fb:10:33:3d:40:03:d9:bc:cf:
ff:fd:ef:87:ae:cd:8a:90:1c:22:21:0b:32:cf:3c:22:0f:aa:
84:cf:2c:77:bf:7b:8d:22:40:91:de:88:1d:00:11:a7:38:e7:
fe:a1:5a:68:68:c4:a8:83:3f:35:79:78:66:2a:4c:b4:f0:6f:
56:32:81:9c:ed:ce:dd:38:47:1a:56:ae:24:ab:cd:a4:e2:37:
68:d4:9b:4c:fe:e8:b2:d9:d4:b7:a0:0c:ad:4c:25:d3:7f:2a:
79:10:1c:67:01:c3:a6:dc:6f:32:1a:21:e8:e0:a7:48:98:93:
23:cf:14:20:96:21:cd:89:87:35:54:bc:ca:0c:fb:66:0a:86:
5f:03:af:c4:7a:82:6f:06:15:95:68:90:54:ea:13:6a:38:7a:
ba:2e:59:35:c0:22:64:13:f2:04:f0:34:f1:2e:a0:da:61:56:
19:cc:6d:c1:ef:c8:37:fd:d3:a8:fe:10:ef:08:61:1d:57:6c:
23:75:f3:fd:df:2c:d3:ce:eb:ad:51:64:82:63:cf:49:44:80:
26:48:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:46 2025 by rpki-client