Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: 5laKJa8BVzuo1hIG47HBTCFAESKeWQG6Fi6tjqZ5JaA=
Subject key identifier: 10:CE:50:76:4C:1A:24:04:8B:DE:6D:F5:CD:45:B6:57:2C:81:D2:97
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 019A025A07DB1236D3B3FF71BB33D88FC651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 0267
Signing time: Mon 20 Oct 2025 16:00:45 +0000
Manifest this update: Mon 20 Oct 2025 16:00:45 +0000
Manifest next update: Tue 21 Oct 2025 16:00:45 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: xZxjOxuT9GKrLGqIVJ/RlDKnXnpof5mfuctPGCZBsGA=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:5a:07:db:12:36:d3:b3:ff:71:bb:33:d8:8f:c6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Oct 20 16:00:45 2025 GMT
Not After : Oct 21 16:00:45 2025 GMT
Subject: CN=10ce50764c1a24048bde6df5cd45b6572c81d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:6c:74:2a:91:5a:ef:a1:1a:24:85:c7:a4:
0c:14:ed:27:2b:f2:8f:2a:10:60:37:52:f5:02:c5:
5a:f6:95:55:9e:2b:4f:13:92:19:66:eb:91:67:9a:
e2:d4:68:bd:cf:5f:93:44:75:d7:0f:50:77:31:15:
ec:ed:7f:ea:65:f3:5e:2f:6f:f7:85:30:f8:3b:8e:
ab:2b:4b:93:18:63:77:c7:b2:8e:74:85:d2:3c:c5:
ef:cc:f8:37:49:75:f2:a2:fe:e4:97:03:6a:85:83:
a3:ac:43:97:ba:60:9c:30:08:52:9b:27:18:f0:d8:
28:7c:74:42:e9:3f:7d:13:06:7f:0b:e3:ca:54:bf:
18:2f:9b:2d:c6:0c:4b:fa:7d:2e:d3:81:85:42:91:
b7:94:55:28:73:8e:f7:84:8f:c2:a8:ae:5c:f0:d0:
6e:fb:b2:d7:f9:bc:59:21:eb:74:29:67:8f:44:da:
47:cc:c7:66:b1:02:2b:bd:3f:92:16:e2:0c:c8:88:
a7:aa:27:f4:9f:fc:bf:ce:87:3f:9e:7c:eb:31:af:
60:74:18:65:97:de:32:90:7b:65:7b:0e:26:65:28:
74:e5:87:7c:6d:c8:bc:2a:39:60:9f:3a:61:c9:22:
53:37:69:a3:3a:c0:48:59:04:6b:5e:75:a4:57:b0:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:50:76:4C:1A:24:04:8B:DE:6D:F5:CD:45:B6:57:2C:81:D2:97
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:35:43:a2:84:c7:36:2d:34:9f:42:e4:aa:f8:ce:28:65:db:
8d:31:82:51:3c:7a:ca:bb:91:20:53:7b:ec:51:a5:ea:72:e4:
49:51:2a:7a:f9:27:35:55:8d:61:5e:46:62:28:11:a2:3a:a5:
2f:6a:7e:5d:bb:25:55:73:bd:24:9f:25:cc:29:cf:b6:93:56:
fd:be:a0:07:52:88:ce:70:db:c7:9a:a4:cd:fb:b7:86:1b:5a:
33:b5:14:b6:70:95:4b:6e:bb:66:7c:a9:e4:f9:0b:41:f2:65:
da:ff:71:fd:7e:09:56:ef:fe:a2:94:2c:86:cf:3a:76:59:81:
c1:b5:72:14:58:67:ea:16:3b:e2:16:29:a8:df:ce:00:c9:f2:
e4:e8:f6:94:50:9d:49:cb:6f:8e:e9:37:4d:0b:27:4a:22:d5:
f4:0e:0c:f0:bd:69:da:bb:69:73:83:94:09:05:14:2b:fc:7d:
59:29:0a:13:84:89:88:df:52:74:f8:e5:c6:2e:67:a4:21:71:
5f:ac:7a:69:f1:0d:36:df:12:52:6e:2d:7f:62:47:3a:e9:96:
5b:fc:74:fc:8e:8b:38:6f:dc:fa:7c:65:86:5a:34:a6:c7:0b:
51:c3:be:b9:40:5f:87:c8:03:d5:4b:e0:88:43:fa:a6:33:37:
cc:35:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:00 2025 by rpki-client