Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: nDtjbpyjp3ZRtPoKSlJuz1jHGM02YSSSRMvij7igjCg=
Subject key identifier: 18:5E:F9:CB:73:B5:6C:C8:16:E9:DE:E7:A6:F1:56:DC:83:BE:9D:E9
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019A4DAAC42ADFA44EA874A9F744FBE451C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0AA4
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: j4APm3oJWm40mwaTpVsWCfDXNn0+BvmZnv2ROEbhDHw=)
2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c4:2a:df:a4:4e:a8:74:a9:f7:44:fb:e4:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=185ef9cb73b56cc816e9dee7a6f156dc83be9de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:89:f0:2e:dc:e8:1d:f7:09:39:ff:00:52:
51:1e:c1:78:06:7f:d8:24:6b:1b:81:d6:46:d5:c1:
87:54:5d:ed:a8:58:4f:2f:43:b3:88:d2:13:33:82:
c5:1b:0e:e4:ab:8c:3a:d2:7f:ce:39:40:48:b9:d5:
25:09:62:94:6d:f2:b2:19:0c:e4:17:35:7b:01:84:
4f:83:bf:cf:52:81:2d:79:d9:94:1c:0a:31:32:75:
79:02:76:9f:51:9d:fb:5a:c2:00:cb:c9:1c:64:dd:
f4:f2:d1:97:b8:02:b0:a1:9e:84:7f:70:0f:d3:8c:
6c:6b:2a:f8:f5:14:e7:53:eb:d7:3b:4c:9f:4a:e8:
c6:ea:a2:5a:03:f2:11:2c:38:3a:c2:53:0e:8a:8c:
c8:00:5e:2a:47:b3:55:c0:6b:13:19:8e:b5:6b:ff:
6e:d7:8d:89:64:53:2d:f7:df:f3:1d:bc:fa:42:a9:
e6:f6:4a:70:f6:5e:d0:5a:84:53:ec:e0:75:00:f2:
fb:e6:1b:18:a7:e6:d0:a1:5e:88:4e:5a:19:be:04:
d3:3a:a0:76:9a:0c:39:ec:85:8c:21:86:cf:90:cc:
1c:b7:8c:ed:c5:06:c7:03:30:a9:8e:97:6d:02:bd:
18:b4:f9:f8:b0:a8:43:53:e1:e8:ce:58:cf:50:a9:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:F9:CB:73:B5:6C:C8:16:E9:DE:E7:A6:F1:56:DC:83:BE:9D:E9
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:01:bb:13:71:6e:2c:29:7d:c0:02:a2:af:f6:c7:d4:8d:0d:
04:b4:fd:73:b5:62:07:0d:e3:65:c9:75:fc:ab:d7:eb:6f:8d:
c9:8d:29:f1:00:1e:4a:c0:29:3a:40:27:6f:23:39:7f:f9:67:
35:14:3c:7f:55:02:c0:4e:2e:99:d8:1a:00:4a:32:1e:8c:27:
00:bb:13:ef:e3:24:b4:31:15:6e:77:12:d0:62:cf:93:b7:1f:
b2:7b:e3:47:aa:be:d0:4e:11:d0:6a:a9:39:c9:4d:bf:b7:72:
66:f6:89:c2:0e:73:05:ab:ce:5b:24:2b:98:de:da:65:10:ab:
e0:57:52:ef:52:8b:7c:b2:87:b4:40:1a:39:40:e7:b5:22:3f:
1b:6d:e3:10:27:e2:c8:1f:d3:fc:b5:12:23:60:40:77:05:8c:
32:13:1a:4e:34:78:44:22:09:9f:7c:10:5a:2b:5f:4c:8e:7b:
7d:4c:ed:f9:46:de:7b:f8:07:b9:30:b2:c9:3f:3f:3f:76:14:
47:78:6a:08:ec:15:c1:68:c6:2f:0e:7f:d4:e6:f1:cd:61:e3:
9b:ef:58:9f:3e:0a:75:c4:a5:ec:2c:95:fa:54:64:1c:04:ab:
9a:95:0a:8c:7f:07:19:1f:a9:f0:0d:34:7f:85:43:ce:fe:40:
b6:2a:36:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsQq36ROqHSp90T75FHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi
YjEzZWQwHhcNMjUxMTA0MDcwMDI4WhcNMjUxMTA1MDcwMDI4WjAzMTEwLwYDVQQD
EygxODVlZjljYjczYjU2Y2M4MTZlOWRlZTdhNmYxNTZkYzgzYmU5ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtqJ8C7c6B33CTn/AFJRHsF4Bn/Y
JGsbgdZG1cGHVF3tqFhPL0OziNITM4LFGw7kq4w60n/OOUBIudUlCWKUbfKyGQzk
FzV7AYRPg7/PUoEtedmUHAoxMnV5AnafUZ37WsIAy8kcZN308tGXuAKwoZ6Ef3AP
04xsayr49RTnU+vXO0yfSujG6qJaA/IRLDg6wlMOiozIAF4qR7NVwGsTGY61a/9u
142JZFMt99/zHbz6Qqnm9kpw9l7QWoRT7OB1APL75hsYp+bQoV6ITloZvgTTOqB2
mgw57IWMIYbPkMwct4ztxQbHAzCpjpdtAr0YtPn4sKhDU+HozljPUKnF+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhe+ctztWzIFune56bxVtyDvp3pMB8GA1UdIwQY
MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt
OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw
LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAG7E3Fu
LCl9wAKir/bH1I0NBLT9c7ViBw3jZcl1/KvX62+NyY0p8QAeSsApOkAnbyM5f/ln
NRQ8f1UCwE4umdgaAEoyHownALsT7+MktDEVbncS0GLPk7cfsnvjR6q+0E4R0Gqp
OclNv7dyZvaJwg5zBavOWyQrmN7aZRCr4FdS71KLfLKHtEAaOUDntSI/G23jECfi
yB/T/LUSI2BAdwWMMhMaTjR4RCIJn3wQWitfTI57fUzt+Ubee/gHuTCyyT8/P3YU
R3hqCOwVwWjGLw5/1ObxzWHjm+9Ynz4KdcSl7CyV+lRkHASrmpUKjH8HGR+p8A00
f4VDzv5Atio23g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:23 2025 by rpki-client