Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: lEh6Ik3OrPba1Ke5DsWwXCFxhK7id3r7SlPwSSobK1E=
Subject key identifier: 23:D3:47:43:E8:D8:42:2D:0B:82:3D:3E:65:61:1B:8D:91:AC:BB:1F
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 0199FCFDA1FE08903434376E48DD267875BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 02CA
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: eXityqXA2ENrq3fZg0Yqb+mG62vZm4NKaKrWQRVBcgU=)
2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a1:fe:08:90:34:34:37:6e:48:dd:26:78:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=23d34743e8d8422d0b823d3e65611b8d91acbb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:79:50:af:6f:b8:fa:4e:a5:5a:0f:12:23:
cc:9b:ca:1d:07:47:20:55:03:f5:d1:ac:5f:68:5d:
8f:2e:69:b4:21:82:10:d9:8d:62:22:fe:b0:88:c0:
80:b9:67:29:24:12:26:85:e5:c0:23:d0:7f:ab:f3:
61:86:38:2e:98:50:56:07:d5:c5:1e:07:0c:ad:8b:
81:37:d9:ce:21:6f:29:1a:d9:3e:81:cf:a8:9b:21:
d2:7a:52:86:7c:2c:19:11:f0:e2:97:e6:f0:76:07:
d0:f5:fa:b8:f8:e7:89:99:dd:7c:be:f6:fd:96:7f:
e2:b4:37:af:52:7d:3a:32:c7:83:b8:c5:87:16:85:
33:de:77:b3:b1:1b:e6:9a:a1:42:4b:7f:d6:63:ed:
ee:8d:99:54:bd:f0:02:09:94:7c:20:78:8d:a9:17:
c0:23:4e:be:af:aa:7a:a0:94:ec:42:c6:53:3d:14:
7c:95:02:4f:04:56:f0:68:ba:20:e3:68:1a:c5:d1:
a9:62:fa:a0:de:b5:39:b3:20:66:21:91:58:05:1b:
e6:ac:2c:eb:a3:79:b6:72:3d:1d:a8:17:41:8c:9c:
9e:9c:c8:93:8f:7c:19:da:4f:d3:e5:38:0b:a5:5d:
ec:ba:cd:60:52:6b:81:37:74:01:85:f3:ce:65:06:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:47:43:E8:D8:42:2D:0B:82:3D:3E:65:61:1B:8D:91:AC:BB:1F
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:af:5f:98:82:e0:f7:02:ab:cc:91:e1:e1:42:eb:e4:ef:6f:
2f:78:aa:9c:fe:91:26:bf:b8:fa:b9:d4:09:30:07:35:ae:26:
9b:84:b6:56:c2:89:ca:de:37:a9:e9:8b:45:59:5b:ec:a9:25:
15:75:b4:ab:85:b7:cd:6a:ef:2d:1d:a4:45:ca:d8:aa:67:33:
34:33:54:8b:c0:90:32:23:7f:2d:c5:aa:fc:f3:b7:02:03:d7:
3c:53:f5:11:c6:26:50:81:51:66:a6:50:97:75:7d:b9:4f:ab:
f3:1b:e7:21:99:2b:05:ed:2d:84:23:08:4d:de:e2:af:ae:bc:
b3:b4:82:02:cc:ef:fa:67:cf:54:a7:a5:a4:63:e7:42:bc:a9:
67:65:04:44:b9:89:83:c8:46:43:df:55:4a:c9:5d:10:8a:79:
f8:ad:76:6a:95:75:93:83:4b:ea:17:30:d6:22:8e:6d:1a:e6:
d7:c7:7b:f4:17:50:99:2a:0b:89:05:d3:01:28:3b:4e:78:e5:
57:e7:ea:8b:df:46:5b:e3:85:0d:07:ad:94:9e:96:1e:8a:70:
57:42:11:78:05:86:d9:f6:fb:91:fa:ed:3b:4a:d1:be:b3:78:
7d:a2:19:35:e5:c1:3f:14:4d:4a:4c:83:f0:4b:9b:e0:20:df:
72:ca:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:57 2025 by rpki-client