Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: fYuL58JuiHsmT79+qFHuXZPftSPrBM6TWTY9sBS4oGQ=
Subject key identifier: 87:EE:8B:9F:0C:23:21:36:90:64:39:C3:BE:A8:8F:4E:E6:23:AE:77
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0198D65FEA381BD6EDF5F3191BF45DE1D549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: i91Drw7jJz3AKDmByxjWB+AjVTUvKfZtknZP5Ufslzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ea:38:1b:d6:ed:f5:f3:19:1b:f4:5d:e1:d5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=87ee8b9f0c232136906439c3bea88f4ee623ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:9a:bf:62:c4:15:94:c2:92:bc:8a:c5:66:
87:fa:20:f2:38:ca:02:04:8b:f4:82:0f:a6:fd:68:
73:af:9b:a6:1d:d1:3f:92:13:dc:fa:a0:8b:e4:6f:
cf:3f:22:29:26:98:a7:a5:20:65:c7:63:86:79:42:
f8:04:58:7c:fb:d1:d9:25:b4:ee:65:e1:8e:93:34:
aa:26:2a:c5:bf:02:2e:94:e7:a2:b1:f5:6f:1d:2b:
e8:76:57:c1:39:87:3a:6c:2b:b9:9c:32:a1:ac:26:
d0:db:ba:1f:8d:63:0b:a0:97:80:e7:ff:3a:87:28:
3f:69:dc:e8:14:e1:2c:ae:a3:96:37:0f:e0:f5:e0:
c8:6d:fd:d5:e5:bb:26:11:10:80:d4:24:33:da:65:
c2:f3:6a:fd:47:99:24:80:29:ef:25:59:de:74:a6:
c4:b7:ed:2c:c8:e7:5c:2f:47:b6:7e:e2:d1:e2:db:
b6:a8:e5:02:ee:9a:fc:e1:78:0d:fc:57:04:32:3b:
b5:33:b7:e6:a0:12:49:e2:42:ef:e4:f6:b1:e7:eb:
74:a9:27:87:90:c4:e4:5a:26:e5:e2:83:ac:a5:cf:
3a:e2:32:1e:84:c2:05:19:fe:64:14:62:31:1c:cd:
4d:68:14:ea:89:1f:dc:6b:64:09:4a:fe:1a:dc:89:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:8B:9F:0C:23:21:36:90:64:39:C3:BE:A8:8F:4E:E6:23:AE:77
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:75:08:4c:ec:6c:96:ea:fa:75:56:05:86:fd:66:2c:e6:0c:
3e:96:45:a7:59:6a:37:d5:c9:0d:8e:13:67:d1:ae:3f:79:ab:
7c:d5:88:82:2d:25:cc:1a:a9:ab:d1:12:5d:d8:36:a7:9d:3a:
92:1f:ba:d2:0d:97:77:89:2f:04:17:c3:d9:9b:3e:2e:9a:45:
97:ea:b0:25:5a:ef:e2:0f:18:0d:3d:3c:12:21:33:a8:ab:b7:
f2:c2:8c:a2:b8:ff:0a:af:30:ab:c0:bb:e8:b3:b6:d6:48:eb:
4a:64:59:10:fd:8d:22:3b:ab:dd:c8:29:93:5b:52:6e:9f:9a:
fb:7c:eb:65:9d:d2:35:0a:0b:26:53:9f:c0:a4:c8:ba:0e:56:
5f:5e:02:2d:30:02:be:4a:99:e2:0b:60:8b:07:c5:43:bc:aa:
11:5e:16:10:58:10:69:9d:cd:ac:58:d5:c4:ed:40:46:f1:f0:
0d:b3:1c:e6:19:dd:66:c1:ef:67:5f:a1:0e:a2:53:c2:70:d3:
48:a2:e9:d1:85:cc:52:80:00:11:9d:80:41:1a:f5:15:dd:e3:
80:2d:e3:9f:9c:7d:ae:0c:c7:98:83:10:ad:98:2e:c2:f2:42:
fe:ef:21:9f:93:3f:9f:9c:57:fa:84:25:33:84:3a:cc:14:f7:
fc:8e:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:55 2025 by rpki-client