Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: 8JzIAIkHQvf50aj67O5Q7m8lLVM8fzl4+8r+r7ycnz4=
Subject key identifier: 37:B0:F0:08:4F:C5:8B:90:4B:6D:BA:1D:8D:23:9A:16:07:7D:84:7B
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019894B69202BD405E0EE486FCD5DA8DAAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0341
Signing time: Sun 10 Aug 2025 16:00:49 +0000
Manifest this update: Sun 10 Aug 2025 16:00:49 +0000
Manifest next update: Mon 11 Aug 2025 16:00:49 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: hpbH1hkRMKlsfz82Wd860seOdBPKurVxCI5MyZg4FY0=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:92:02:bd:40:5e:0e:e4:86:fc:d5:da:8d:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Aug 10 16:00:49 2025 GMT
Not After : Aug 11 16:00:49 2025 GMT
Subject: CN=37b0f0084fc58b904b6dba1d8d239a16077d847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:65:73:cd:f7:c8:22:33:54:1b:3d:01:3b:
aa:a2:9c:59:fd:66:c5:eb:3f:4c:a8:1b:c8:70:cf:
43:63:3f:e9:1a:23:6a:75:e0:86:cb:d9:2b:05:0f:
96:f9:85:58:75:52:88:d3:e2:a5:d4:98:e4:5b:24:
2f:3c:77:22:bd:a2:3b:e3:dd:4e:07:c8:0c:d2:75:
39:b3:dd:b0:27:0f:09:4e:31:3c:3a:a7:32:10:41:
8d:67:da:2c:34:63:b3:6f:56:bb:8b:06:72:88:ed:
67:5e:2d:ca:f5:55:ee:46:21:f7:a1:01:e1:58:00:
c0:c9:eb:f6:ad:48:a2:14:5c:cf:74:6e:32:03:97:
71:2f:14:68:17:42:b6:3c:53:31:4f:de:aa:5f:a4:
b9:66:86:18:40:b2:fb:4b:25:c0:55:72:f2:19:0c:
cb:31:3d:da:49:0b:95:b4:b5:d8:a8:cd:97:46:d1:
36:d8:81:fe:d7:01:bd:35:d5:55:5b:7b:b1:35:ca:
a0:70:2e:d0:07:f8:ad:6a:af:de:1a:b0:5e:1c:2e:
6c:e3:39:85:ca:db:9f:71:9a:4c:bc:57:cd:1f:6d:
ec:0d:b0:f8:20:11:a8:0f:fd:ac:35:ed:6f:ec:ca:
8f:8b:2a:87:ce:4b:8c:70:b7:5b:9c:f9:2e:e5:64:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:F0:08:4F:C5:8B:90:4B:6D:BA:1D:8D:23:9A:16:07:7D:84:7B
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:03:7b:0f:31:a7:29:88:c1:9c:dc:c5:71:1e:0a:75:e5:0f:
6e:01:62:01:b6:9d:09:c3:69:f1:d4:78:d8:70:0f:f3:55:de:
41:f7:14:34:75:1d:f2:b0:ab:07:67:d0:ce:2b:1f:7c:c5:9e:
c4:0c:bd:28:a0:50:83:77:51:10:75:cb:9a:5f:f2:0e:4a:fb:
c1:cd:a2:5e:52:f8:d7:ba:66:ee:77:f4:4e:d2:75:fa:83:7f:
07:94:fb:06:e2:68:4c:50:96:2f:a5:b2:57:c1:47:60:57:f6:
39:79:32:c2:28:c5:dd:70:49:e2:82:1d:78:f9:74:4d:4b:50:
99:c8:1f:76:94:b3:a0:cc:a0:76:ec:c4:ef:f3:aa:d6:fa:43:
b6:bd:0e:cf:4d:22:45:e3:a6:7c:8e:56:ba:e1:de:20:b9:d7:
8f:08:6f:88:a6:f1:0e:48:62:7a:97:90:9a:b2:e5:cc:a2:6b:
b6:26:0d:ed:b3:ed:54:f2:44:37:43:6e:f1:bb:dd:95:04:13:
10:af:8a:33:79:55:94:7c:b9:b2:50:0b:9f:32:31:5f:dd:37:
dc:0b:ea:b8:fb:73:a5:f3:f3:29:60:1c:06:83:fa:33:cb:17:
6f:85:e3:da:2d:e3:65:12:b0:f1:06:16:be:37:3f:80:9a:17:
13:7b:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:36 2025 by rpki-client