Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: cPRfM3BkFMGJcBsf9Kb7wUL48onyIEBGd9I6QLFSD0E=
Subject key identifier: 2A:3C:4A:60:DB:E2:8A:D1:FA:F3:55:69:97:11:B4:8A:76:D8:B0:89
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 0199FFC777BB262D26BFE8411ACF10E18829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 11F0
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: +jyhXKCMeCjaOGmrUOUgJzRlE+pKuVtRtuySIVMiozE=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:77:bb:26:2d:26:bf:e8:41:1a:cf:10:e1:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=2a3c4a60dbe28ad1faf355699711b48a76d8b089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:0a:20:65:61:bc:05:68:04:c6:a5:e8:d4:
38:18:cd:de:f4:25:93:e3:60:f2:9b:23:83:1b:a9:
aa:81:33:4b:b9:bb:73:50:c7:3f:e2:04:8e:08:7e:
e7:90:73:56:52:a1:ca:d8:60:0b:26:d8:5b:1d:ba:
1d:e6:fd:be:9b:1c:ea:27:cf:ef:70:78:2d:d7:4d:
95:8b:c3:49:3f:17:ec:32:c2:12:11:4e:bc:e8:c4:
ed:7c:17:cf:bb:fa:4c:b1:16:b2:eb:ff:e6:a1:4d:
05:f2:10:0b:c1:21:71:37:1a:d9:e8:04:c4:da:73:
2a:ec:6e:1e:84:29:47:24:f1:cf:fc:1c:bf:d4:50:
2b:06:a7:f3:76:13:fc:ce:a7:57:09:83:62:5b:95:
b0:83:d5:90:6b:0c:4f:f9:9b:8e:37:b1:6e:65:42:
6b:db:fe:5a:71:ce:cb:0e:e7:ef:c3:7b:4b:c4:4e:
d6:74:7a:a5:a9:7d:a0:60:8d:1a:75:0d:ac:90:41:
87:e7:39:be:01:0c:bc:63:f2:78:59:48:19:1c:22:
cc:73:ad:a3:6c:8f:55:b0:b4:00:dc:dd:89:e0:3f:
57:90:ef:a4:d9:b7:c8:d3:74:96:4b:64:de:e7:2d:
d6:b7:65:32:a8:0f:18:6c:e2:b8:23:37:30:5f:11:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:4A:60:DB:E2:8A:D1:FA:F3:55:69:97:11:B4:8A:76:D8:B0:89
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:29:bb:9e:53:be:99:ea:4c:fd:87:76:28:30:fb:78:a0:
98:82:ae:9a:ff:62:b6:fa:ae:aa:22:bd:4c:0f:dc:15:2a:37:
54:b5:95:5f:fd:d3:00:1f:83:5f:23:39:3b:3a:b3:94:d4:fd:
8d:35:e8:b6:91:68:7d:0c:a4:41:7f:11:0e:6f:1d:ac:1f:e7:
39:1b:e6:bb:99:05:86:25:d9:81:f3:9e:70:42:8e:d0:fe:f4:
4c:53:37:a4:91:5b:3d:ad:a9:6d:af:b2:1b:1a:05:23:6e:d9:
27:41:70:72:dc:62:74:4d:09:ff:e5:2b:14:30:7c:05:71:aa:
52:a4:25:07:fd:8c:1d:45:08:bb:d5:5e:c8:1c:13:8f:c4:01:
4c:35:93:62:d6:22:e4:75:e0:32:d6:80:06:7f:3c:af:06:5e:
57:dc:07:94:f5:33:cf:78:cc:e1:09:c5:04:f5:9e:9d:d1:6d:
c5:d0:c4:83:f0:c8:85:2e:11:0a:96:48:9d:da:10:2f:9f:37:
76:7f:03:d0:c5:4a:19:c4:80:f5:c2:34:6b:20:2e:b4:e6:8d:
b0:00:91:39:1a:62:0d:3a:41:ba:1b:de:09:7a:01:cc:b8:a0:
3b:76:fe:b0:1f:d5:a7:84:55:1b:92:1d:29:b9:ba:9e:62:a1:
6f:d9:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:29 2025 by rpki-client