Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: AyCa2xZkOlAj8CDqBsavNd8soqv1McMW6qlynCvBoMY=
Subject key identifier: 45:6D:C4:77:5D:16:E0:5D:04:66:DE:06:4E:B0:F3:4C:48:FA:9F:77
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0199FC8FBBC89415AE62EBCDA686B6F5527B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 03B7
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: OF8pTOnPahSiQwsI6YeizAyxY/4TmiPE0JgaBliuV1Q=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bb:c8:94:15:ae:62:eb:cd:a6:86:b6:f5:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=456dc4775d16e05d0466de064eb0f34c48fa9f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:7a:bf:3a:6f:ba:67:9d:12:71:3c:6f:78:
44:ed:1c:0d:a8:0b:d4:23:23:8d:12:08:05:8c:a7:
67:fa:7b:1c:b8:16:25:c2:e4:90:86:15:b8:bc:67:
c6:de:8b:a3:2b:fa:eb:9f:e4:1e:e9:b5:b4:a1:31:
e5:69:ac:9c:97:e4:2e:15:ee:97:42:27:61:43:d5:
04:2d:62:f4:7e:ab:b7:01:80:45:63:ff:70:46:19:
d8:89:24:ce:9d:2e:b5:d5:be:d7:36:4e:bf:6b:5d:
ae:dc:47:da:fa:16:67:f0:e3:0c:d2:3a:0e:00:a5:
96:86:9f:89:80:0a:78:c6:73:dd:5e:d7:cb:27:d7:
4d:f5:48:cb:30:82:83:4e:27:03:d8:c3:a0:31:64:
0c:3f:86:80:cc:51:be:17:ad:79:f9:46:8f:6a:77:
5f:97:18:bb:e1:48:cb:b8:df:5d:64:a1:49:47:bb:
99:42:9a:1f:ba:d3:72:71:ce:77:3c:b1:8e:b3:71:
3a:7f:18:3f:fe:54:cb:9a:8c:c6:72:3a:88:62:9b:
32:aa:17:7e:0c:b2:ca:3c:bc:ca:f2:ee:4e:e5:f5:
4e:f9:50:be:f1:78:60:f8:3d:d5:e0:66:de:09:49:
11:c4:40:54:06:07:65:5e:67:88:ee:9e:46:91:0d:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:C4:77:5D:16:E0:5D:04:66:DE:06:4E:B0:F3:4C:48:FA:9F:77
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:2a:b3:33:95:9f:af:4c:fa:31:f8:65:18:4a:79:a8:cb:
a9:aa:03:10:29:d9:f1:cf:2b:92:80:6b:27:9c:5f:a2:43:f5:
e9:f7:a4:3f:6f:8e:5a:64:2b:61:80:56:89:08:8c:c7:a1:35:
57:17:03:4b:bd:ca:8c:51:29:8d:da:93:90:67:d9:53:f8:25:
86:72:2d:69:1c:2e:89:99:a7:9b:e4:8e:ee:8c:1c:61:ff:55:
43:35:8b:e0:d2:5d:79:32:c7:aa:ec:1a:23:95:c6:e8:44:52:
44:32:64:09:5f:bb:c4:41:2f:19:47:99:b4:4f:d3:d8:2f:47:
e8:c6:da:4e:c0:46:4a:06:76:48:fd:81:1e:8a:ee:d7:64:95:
d4:8c:41:32:de:0c:ae:c2:e0:ee:08:e3:1a:72:b0:71:11:fc:
c3:db:0c:63:6a:67:15:43:90:59:3a:ef:e9:1b:de:b9:01:50:
fa:74:dc:aa:75:f8:fd:86:8f:c6:76:84:76:a4:3b:47:5e:a5:
0d:b0:58:ca:77:fa:d6:70:18:dd:9b:65:1a:94:85:7b:7e:90:
dc:87:ca:2c:91:bc:05:ac:8d:c7:b6:c0:fd:11:f3:06:e1:5f:
5d:6c:fc:24:8f:8e:f4:5d:e5:3d:b2:9f:d1:8e:ec:42:63:74:
89:0e:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:26 2025 by rpki-client