Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: zg9xQSScZT7Ezmx9CYemaLI6h/2+7X+posNl9sLwX88=
Subject key identifier: E5:8E:1F:C9:29:2D:9A:E7:86:6B:56:9A:A9:BB:EB:4B:DF:FF:D5:35
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 0198D515F8297DABF1A1AD09FE18F82907B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 01CB
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: +Fa9k3n7PcgWYkIEL00Ixxcl4U/3X2wzw8NtIAy75aE=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f8:29:7d:ab:f1:a1:ad:09:fe:18:f8:29:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=e58e1fc9292d9ae7866b569aa9bbeb4bdfffd535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:0b:35:8e:a5:86:96:b2:e6:33:8c:70:26:
9d:01:fd:be:dd:02:c6:8c:74:c6:b0:db:f5:b2:95:
ac:df:74:f5:6a:21:9b:fd:c6:44:03:f6:14:a5:6e:
e7:9f:9d:35:18:5b:67:fc:10:54:dc:44:85:84:43:
a2:59:65:da:64:be:92:e5:ac:04:ef:f4:fd:77:ed:
02:78:86:cb:22:31:be:d1:05:46:7e:fb:16:e6:6a:
54:1f:ed:70:e8:8d:2f:c8:8e:b3:76:7d:1d:6d:f4:
45:32:27:36:02:b8:8a:11:57:9b:91:2c:6c:76:aa:
b8:4a:5a:3c:da:3d:fe:58:71:41:31:67:f8:6a:87:
b0:89:67:ce:69:6d:7c:e3:f6:58:13:74:bd:3c:f4:
07:0b:4b:b5:3b:90:76:49:7a:37:a9:0c:3f:f0:49:
56:68:3d:3f:43:78:da:01:14:c6:f7:81:0c:4f:20:
16:d9:3a:af:de:2b:32:2a:4b:f6:a7:8b:0e:2e:09:
74:d1:5a:43:2b:16:4f:57:7f:51:d8:f5:b4:4e:0c:
34:af:80:c7:59:23:f5:9d:9e:f7:71:cf:52:fa:81:
fc:6a:e5:eb:ca:66:df:39:b9:e2:bd:27:1d:9d:37:
dc:12:c9:40:46:08:54:1a:79:9c:4c:b6:74:fc:60:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:1F:C9:29:2D:9A:E7:86:6B:56:9A:A9:BB:EB:4B:DF:FF:D5:35
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c4:eb:0f:9f:55:6c:a3:21:bf:2b:dd:12:ba:0a:f9:c5:1b:
ac:43:80:ec:03:c4:d0:b1:80:11:77:d8:e3:68:be:f7:e0:d0:
17:42:94:14:78:06:fd:23:40:0a:29:22:a6:fb:31:81:ea:f6:
84:87:b4:d8:46:00:04:7d:f6:a3:31:20:61:b9:59:47:7f:18:
45:18:3f:25:b5:0b:73:60:ca:3f:2b:8d:0e:35:72:dc:2b:ed:
26:b1:89:ee:b5:38:ab:73:14:df:da:1d:88:98:9e:7a:b6:9c:
f8:54:e9:97:7e:c3:74:08:a5:1a:aa:b2:b9:35:c3:06:ed:52:
bf:75:dd:4a:79:55:fb:c0:6e:e7:1b:25:56:0b:2f:26:f6:75:
f6:05:0f:02:7d:eb:6b:ba:43:67:39:04:ed:67:ba:71:78:6f:
d2:fc:37:d3:5e:41:e9:29:de:27:f3:8d:14:14:72:b5:50:9d:
3a:26:47:35:49:75:3b:d6:95:cd:6a:40:df:8a:61:2a:8d:e7:
27:55:97:73:a4:f4:3d:e6:f1:37:8c:55:0c:7d:5a:e0:d1:c9:
6d:34:a8:d5:c1:dd:57:da:24:ca:86:d5:38:9d:1d:24:f5:a8:
7b:ba:98:31:51:a5:7f:06:18:ee:ff:d5:42:2c:43:e4:8d:cf:
a7:76:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:28 2025 by rpki-client