Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: 1N1CIcNgt0osQ7cg0n75N2lwV0tPZky/qlXgCTKgpD8=
Subject key identifier: 66:92:3A:B6:DD:D5:82:33:7F:6C:11:32:C7:85:59:D0:BF:12:19:E4
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 0198D69840926B37290538538E90565C7A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1156
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: 6fyiP1DCyxJ35feVHnRABRDIQrKrobVkOUzOkdfhIu4=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:40:92:6b:37:29:05:38:53:8e:90:56:5c:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=66923ab6ddd582337f6c1132c78559d0bf1219e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:d7:53:71:9b:81:cb:88:8a:27:76:f2:c4:
49:b7:ce:9c:55:f3:08:3f:6f:b1:ae:68:7b:1d:17:
71:d1:cd:08:41:6e:64:4b:c3:ca:84:e0:8b:a5:4c:
38:b7:73:90:f3:b9:84:0d:de:e5:97:23:e7:60:dc:
75:a4:87:9d:49:39:c6:5f:e6:5a:cf:b9:98:a1:0f:
78:46:4b:7e:1b:55:aa:dd:77:fe:aa:b4:f9:24:56:
11:31:c1:06:b2:f9:8a:dd:5b:58:cf:67:2f:ac:c2:
97:e6:76:60:12:37:51:a5:d2:ba:bc:82:8c:36:dd:
cb:82:1d:25:e0:38:c2:db:0c:5f:2b:a0:00:68:80:
30:29:ce:e4:4d:af:71:e2:4a:3a:95:98:1f:97:b5:
8f:b4:3c:83:60:6c:2e:74:68:5b:0a:c1:b6:2b:f1:
16:d3:3a:1b:1f:5c:3d:0f:a6:f8:97:6c:67:1a:06:
61:f5:c0:32:cf:d0:28:0c:83:23:d3:fe:67:0d:6e:
f0:8e:23:54:38:1c:61:b0:53:65:4f:44:a4:1d:c8:
23:b3:9d:c5:b0:64:5f:28:cf:e5:90:d8:35:7f:5b:
11:00:aa:a5:9d:d9:f0:14:7c:18:a0:02:c6:8c:1f:
e3:3b:30:47:a7:88:c0:d6:16:16:cb:18:5e:45:51:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:3A:B6:DD:D5:82:33:7F:6C:11:32:C7:85:59:D0:BF:12:19:E4
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a3:13:6c:ed:65:28:46:3b:98:54:ee:ab:ec:56:56:e4:8f:
5d:c8:26:05:e1:6e:57:eb:e3:78:9a:93:c3:cb:7a:6e:d8:5b:
a4:e9:10:56:ce:63:60:42:aa:c7:ee:ee:23:77:e1:e3:22:4c:
b1:d4:63:35:0f:13:4c:9a:3b:d6:63:52:8c:ca:82:67:57:ab:
e0:10:f0:2b:67:71:e7:60:73:6b:a3:54:e4:f1:e2:3e:8d:64:
22:8d:76:66:06:5e:45:28:00:a4:6f:5e:9a:6b:19:5c:f3:61:
ba:da:20:38:f2:34:0c:ea:f7:b6:5f:6a:81:c4:b1:c3:86:59:
fa:4b:f9:e9:f5:2f:06:02:3b:cd:3d:3c:c7:0e:ad:e2:0d:e4:
b0:ec:e9:5a:6c:8d:29:2e:15:a7:45:8c:9b:8d:76:fb:75:39:
ee:9b:5a:86:1c:5b:64:74:72:f1:83:97:e2:c6:bc:de:36:c1:
91:c9:f7:e1:dd:77:2d:bd:c6:97:65:62:45:42:4e:71:a6:a0:
26:fe:2f:a9:86:f8:48:08:2a:f8:2d:9d:ee:2c:6d:f9:b5:87:
7b:60:1a:cb:16:5f:d7:09:5f:38:86:3f:a8:d7:ba:32:66:af:
f3:14:8b:23:4b:ac:62:19:52:63:b4:ac:3c:02:fc:19:5d:92:
07:61:6c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmECSazcpBThTjpBWXHoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy
ZTg0MzAwHhcNMjUwODIzMTEwMjM4WhcNMjUwODI0MTEwMjM4WjAzMTEwLwYDVQQD
Eyg2NjkyM2FiNmRkZDU4MjMzN2Y2YzExMzJjNzg1NTlkMGJmMTIxOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRTXU3GbgcuIiid28sRJt86cVfMI
P2+xrmh7HRdx0c0IQW5kS8PKhOCLpUw4t3OQ87mEDd7llyPnYNx1pIedSTnGX+Za
z7mYoQ94Rkt+G1Wq3Xf+qrT5JFYRMcEGsvmK3VtYz2cvrMKX5nZgEjdRpdK6vIKM
Nt3Lgh0l4DjC2wxfK6AAaIAwKc7kTa9x4ko6lZgfl7WPtDyDYGwudGhbCsG2K/EW
0zobH1w9D6b4l2xnGgZh9cAyz9AoDIMj0/5nDW7wjiNUOBxhsFNlT0SkHcgjs53F
sGRfKM/lkNg1f1sRAKqlndnwFHwYoALGjB/jOzBHp4jA1hYWyxheRVG0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaSOrbd1YIzf2wRMseFWdC/EhnkMB8GA1UdIwQY
MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt
ODRlMTFlNTFmMTM0LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0
LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKMTbO1l
KEY7mFTuq+xWVuSPXcgmBeFuV+vjeJqTw8t6bthbpOkQVs5jYEKqx+7uI3fh4yJM
sdRjNQ8TTJo71mNSjMqCZ1er4BDwK2dx52Bza6NU5PHiPo1kIo12ZgZeRSgApG9e
mmsZXPNhutogOPI0DOr3tl9qgcSxw4ZZ+kv56fUvBgI7zT08xw6t4g3ksOzpWmyN
KS4Vp0WMm412+3U57ptahhxbZHRy8YOX4sa83jbBkcn34d13Lb3Gl2ViRUJOcaag
Jv4vqYb4SAgq+C2d7ixt+bWHe2AayxZf1wlfOIY/qNe6Mmav8xSLI0usYhlSY7Ss
PAL8GV2SB2FsRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:37 2025 by rpki-client