Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: 9kX43CVvEi2Qtn9WOzbCvppRCgNLHOseBQ5rR32PsPs=
Subject key identifier: E5:A8:EF:C0:71:3B:6A:1E:E5:3A:5A:6B:C3:2C:F0:5A:3E:58:96:67
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 0198D65F0DBE5E9CDABAC28A0C6F9D209C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0911
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: mod3pr1YM4xW9r9Vcp5K/i/JrslD5DXt8ceAVulkUH4=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0d:be:5e:9c:da:ba:c2:8a:0c:6f:9d:20:9c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=e5a8efc0713b6a1ee53a5a6bc32cf05a3e589667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:64:68:8c:8c:e3:74:8b:9a:be:89:ef:39:
fb:90:1e:48:1f:55:31:2c:ea:19:01:e3:e5:56:e9:
7d:77:b4:52:62:2e:af:dd:4e:05:39:2e:d5:23:06:
98:cb:8e:a5:e0:4d:ec:05:42:e4:dd:74:3a:e9:65:
8b:be:b5:47:12:89:6c:9e:ae:27:bf:ea:c7:e6:74:
ce:8d:49:f8:c5:8c:84:1d:b6:cc:a4:81:d5:9d:de:
e6:99:9d:2b:7e:17:9c:0b:d5:6a:b1:b8:da:e4:90:
04:26:62:d2:a6:ce:63:d2:2d:d0:cd:34:f8:0a:90:
8c:c3:47:79:41:1e:cc:f4:06:b5:dd:09:23:00:d0:
e7:e2:d0:04:73:8b:62:55:29:19:86:89:cb:f7:dd:
48:6f:ee:6b:66:b3:78:60:66:77:93:fc:83:18:b5:
fd:4a:c0:92:e9:c0:5b:3a:c9:2f:50:ac:da:54:ca:
33:03:74:58:41:88:6f:fb:6c:47:a2:e2:a6:7a:ed:
91:ab:68:05:17:40:9e:ee:6e:fe:96:9c:71:a2:0f:
ca:9d:03:19:3e:fb:7e:77:37:7d:c0:32:07:d9:fd:
9c:a8:b9:d5:6f:07:75:39:0a:09:fe:ec:fe:68:f5:
e3:c5:83:f3:cd:bc:56:03:23:a6:8a:bc:a8:d1:6d:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:EF:C0:71:3B:6A:1E:E5:3A:5A:6B:C3:2C:F0:5A:3E:58:96:67
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a1:54:2d:c1:54:76:73:ef:29:15:bd:b8:f8:0c:52:e4:07:
38:c0:1a:e9:5d:86:06:65:74:17:ff:41:0d:89:d2:6e:fe:25:
5d:72:27:02:2e:af:be:9e:48:ee:63:4c:6d:e6:39:fb:12:82:
b3:0d:24:7b:11:9c:2b:bd:c4:53:d3:2f:46:5f:9f:d2:e6:93:
31:c3:b2:6c:19:df:9d:63:05:f4:2d:93:0c:7a:f4:2b:76:69:
d1:98:30:ee:45:14:55:eb:06:02:ba:8f:45:f3:e4:9b:28:5c:
e0:db:a8:72:bf:05:36:13:74:0c:fc:17:40:30:b1:de:7e:f2:
63:5d:c5:1c:b8:45:5c:c9:b0:60:81:25:91:b4:d0:e7:45:ad:
01:58:c1:9c:10:91:b9:1d:fb:03:d6:27:1d:f8:5e:a2:70:08:
eb:52:8d:13:14:d7:16:8a:92:42:ea:7b:10:bc:f4:17:3d:66:
25:cd:51:c5:7d:4e:c3:d7:06:99:41:fe:a2:15:02:09:df:f7:
7d:a9:2d:85:cd:78:73:90:c0:bb:cf:68:26:35:9e:9f:b7:e1:
d1:fa:f0:4c:09:43:35:eb:99:aa:b1:b8:99:77:3b:05:9b:48:
34:4b:90:02:2f:0a:c5:9d:24:b0:62:3b:c4:82:61:d6:52:6c:
15:76:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:37 2025 by rpki-client