Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: dAoP7vo3jQ57xK9TFIGkmuMp2ZW/Hgr4KvnnzZZSy20=
Subject key identifier: 91:91:F9:D6:0C:8B:FC:A2:0D:9C:14:25:B2:E4:8F:62:C3:A9:29:31
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 0198D5838AB8C360F5E67070BB9BC5C30AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 0231
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: Y5DrKnmqXB1sJtL2LG9mwypl/OVNoirZ+IyYP2t2IJ4=)
2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:b8:c3:60:f5:e6:70:70:bb:9b:c5:c3:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=9191f9d60c8bfca20d9c1425b2e48f62c3a92931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:0c:cf:ef:fe:63:8a:81:22:d0:d9:0d:c5:
25:c2:03:51:9b:e8:49:bd:1a:95:2c:c4:25:36:1a:
ee:1c:7c:47:29:8a:c4:9d:4a:36:dc:ee:e9:96:1d:
d1:df:ea:7a:f2:47:9c:91:6d:75:e6:d0:11:17:23:
c3:44:61:cb:0a:3b:df:fb:0f:e8:c6:29:8a:97:4a:
32:c8:3c:fc:51:5f:48:49:75:f4:74:da:03:a5:ab:
f5:8a:af:ca:f1:2f:f1:c9:9d:b1:a4:8f:47:b0:41:
88:38:bd:e6:90:3f:e3:eb:bf:38:c8:18:aa:18:ea:
15:f2:8f:51:cf:20:98:84:a1:ae:0e:8c:17:14:74:
2c:96:6f:23:de:1f:6a:67:94:15:c5:4c:ad:9a:dc:
fd:4f:8c:53:bf:5b:87:06:c5:fa:6d:14:0b:89:e3:
c2:e7:b1:c5:e7:7c:05:87:26:3a:8d:44:58:ac:ce:
0c:14:52:00:ae:89:bd:70:5c:6f:67:fb:e7:eb:14:
38:f9:86:74:5d:2a:f7:f0:ab:b3:45:d5:72:cf:45:
c9:90:fa:69:1d:4b:01:92:53:a2:30:0a:2a:f3:07:
46:d1:a0:e5:72:e1:a3:a5:60:4e:72:9e:90:e7:98:
53:b3:58:5a:29:23:d0:16:6a:c0:10:be:35:13:66:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:F9:D6:0C:8B:FC:A2:0D:9C:14:25:B2:E4:8F:62:C3:A9:29:31
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:f3:c2:00:21:d3:42:8e:cb:42:c5:d2:24:21:3d:6c:6b:
d6:7f:64:12:ac:50:7a:20:fc:b3:44:5f:e8:e3:ce:7f:b9:cc:
24:b3:1e:ce:01:b9:1e:08:b1:d5:3e:57:e1:29:88:36:93:30:
b9:79:82:64:09:fd:e1:cb:54:ab:b7:7a:fb:46:78:f4:c4:cd:
49:ef:e2:f5:fa:42:47:40:b2:78:87:cb:21:5e:5b:e7:a5:25:
74:e3:8c:b3:69:a8:e9:ec:1c:bc:5a:96:ed:29:2d:bb:71:e5:
07:c0:09:6c:50:5c:e2:8e:b9:28:fb:22:cd:3a:07:61:1c:f9:
5c:89:7b:5b:e5:ae:1a:9c:c1:69:7a:38:c4:87:33:e7:52:5a:
b0:45:40:ce:b4:5f:b3:65:15:ed:85:12:ec:b2:aa:f4:7c:19:
2d:72:f4:4d:5b:a9:12:8c:00:03:45:11:f5:77:84:9a:01:98:
42:c7:4c:52:2e:ab:32:30:24:de:e0:31:02:5f:76:99:8e:cf:
eb:69:82:68:48:cc:da:0e:e5:aa:2d:1a:0a:fc:dc:1c:3c:fc:
37:13:cd:0c:07:8f:cd:19:e4:ec:9e:09:e6:ee:c0:b9:31:b5:
60:2a:7c:98:a2:16:b5:a6:2e:7e:2c:37:20:41:39:32:7a:e2:
57:99:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:12 2025 by rpki-client