Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: Ab+pmxLuPPqWAJGZKjbeuRS6/yVhLbOgFZamoHgCEgA=
Subject key identifier: 3C:95:53:72:BD:18:4E:0B:6F:C8:92:3D:24:87:49:67:FF:03:E8:79
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 0199FB0F52200FBD12EF37DCB898760317C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: 7TPeFZ6tBIlFrmrNp195qrtSRMJZ+lBrRb+qJ6CcUgs=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:52:20:0f:bd:12:ef:37:dc:b8:98:76:03:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=3c955372bd184e0b6fc8923d24874967ff03e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:7c:69:a0:ee:cf:aa:31:ab:c6:a9:64:6c:
bc:6f:27:db:21:cc:d6:f1:92:e4:a4:f7:7c:a7:a6:
b3:56:73:56:a5:0f:58:d1:ee:6c:cc:d4:d5:72:f9:
c3:2f:31:30:ec:02:3c:e7:4c:23:b8:e4:64:4c:7d:
71:22:05:d5:41:9f:cf:7c:20:30:34:1e:24:3b:e6:
62:74:e0:db:d0:38:eb:da:26:06:dc:81:1a:ec:ae:
82:d7:55:20:a7:5d:94:c3:28:9a:4c:30:97:a6:53:
7d:98:5e:55:c5:ee:64:91:d2:6f:3c:8b:82:67:9a:
2b:dc:40:ce:e5:f6:33:a7:c3:6c:0d:54:e3:50:24:
bd:d6:c1:9d:49:b7:3a:12:99:c3:c7:c3:7f:bd:f5:
b6:fe:43:20:0c:bf:98:07:55:79:96:1b:fc:4f:83:
71:55:22:6e:82:fc:98:2d:ea:8a:0b:f9:db:f5:49:
3e:8c:17:5d:20:55:8f:a0:34:f0:73:24:fd:b1:85:
2a:1f:ed:de:9b:af:da:57:6d:9c:19:3f:f4:68:45:
46:b6:a4:80:2f:0e:3a:d5:eb:bc:a6:82:99:48:4c:
e2:78:74:b0:d6:71:ef:30:93:96:b6:be:60:21:76:
88:b5:75:07:63:33:15:4a:ac:08:47:ce:e3:bb:c0:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:95:53:72:BD:18:4E:0B:6F:C8:92:3D:24:87:49:67:FF:03:E8:79
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:b6:51:69:b0:18:8b:94:fb:28:20:c1:42:6a:84:05:60:
54:3e:97:0a:6f:9c:c7:ed:71:83:76:7c:70:f5:a7:d3:f8:a6:
10:56:c4:80:d1:49:4c:2c:05:af:1f:90:61:68:ae:b0:f4:ae:
6b:1e:f6:57:ba:ed:27:3a:b6:e2:86:bc:bc:28:6c:f8:f9:7c:
e1:17:b0:49:c6:e3:98:3a:6b:00:ad:c7:5b:94:99:e6:e7:73:
f4:65:7c:64:07:81:eb:0e:c3:4c:af:eb:5b:c1:c5:7d:41:a3:
95:6d:d6:0d:be:68:a2:6e:29:ab:de:30:f2:09:b8:e1:46:f2:
55:ee:cf:f7:95:fe:fa:fb:46:d9:71:38:b0:f1:61:a2:97:1f:
91:fe:a4:6c:82:c7:69:60:5e:3c:9c:3a:c0:2f:75:96:3d:c7:
65:7f:e5:90:de:4d:a4:dc:d8:de:68:cc:fc:7b:a1:dd:2b:c1:
d1:b1:5b:5d:bc:b5:6d:43:fa:fe:c1:8e:8b:bd:e7:c2:76:ce:
f5:e2:0e:c4:6c:35:5b:80:c8:ad:e8:39:d3:ea:5b:95:87:69:
d4:2c:a0:6e:69:d4:3b:59:22:74:dd:07:8f:05:62:df:f9:d3:
77:08:c4:fc:a4:b3:39:73:dd:4d:61:84:4d:0e:c5:25:34:87:
ef:86:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:47 2025 by rpki-client