Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: YjzckWnjFmu19bPwkQifm3+QUnzz/V03NGnU9NaC0PI=
Subject key identifier: D3:5D:39:19:E8:AA:16:5B:DB:E9:7F:F3:73:19:34:28:50:3F:3D:0C
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019A4D3CD23A6E6FDA1FC88E74C22209321B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 1453
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=)
2: 9fBlTpzE1JBsgOrrxy7zfs5HX8k.roa (hash: pZfUWEYp7quP4c2uEiu9XQOEIJS1Fn2BIiWse8+7UWw=)
3: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: DCk49JO8HKnAfb6B58ojlqLKlYC99kHaquuNYMUXLMQ=)
4: m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa (hash: L1ifCZ/lpcCqhfhywoza60yVvKF8HYMbgjCFz4+qb5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d2:3a:6e:6f:da:1f:c8:8e:74:c2:22:09:32:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=d35d3919e8aa165bdbe97ff373193428503f3d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:c3:6a:4a:ed:c7:16:99:9c:ac:e4:ea:f7:
8f:7a:7d:7f:00:a9:49:96:81:56:e8:97:d5:a7:9d:
a5:a9:04:eb:23:e1:98:34:81:b0:4f:8c:04:13:6f:
4f:85:15:77:13:62:d6:f6:61:68:67:28:37:6d:f8:
80:23:88:2b:04:45:b3:89:4e:26:6c:44:e8:23:d4:
c8:dc:06:eb:d8:ff:de:a8:f4:28:96:8a:5b:50:23:
4d:54:84:46:bf:46:b7:6d:e6:1a:99:04:e2:bc:0e:
ce:b1:f7:f8:65:61:2b:9e:64:5d:8f:ee:23:84:3a:
3e:dd:89:e6:49:8b:e1:4e:6f:f8:c1:a3:11:e9:06:
c3:b9:27:bb:ab:61:13:82:4c:93:4a:7e:08:25:12:
9b:84:b5:6e:0d:4d:5b:f4:33:60:8b:56:23:7c:6c:
53:c4:bb:74:b7:2c:48:fa:4f:8d:35:87:91:4c:ab:
37:cf:f6:43:5c:63:1f:0e:29:a4:fe:ac:58:fd:45:
5a:53:fb:7a:41:d7:ca:9a:78:d8:cf:77:09:8e:3d:
a5:5d:09:fb:79:15:d6:c4:9e:44:46:69:8a:c5:6e:
af:77:c9:8c:c3:5b:4e:90:6a:39:b3:8d:f8:63:34:
52:84:11:98:b1:e9:bd:a3:46:56:74:ac:04:ee:de:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:39:19:E8:AA:16:5B:DB:E9:7F:F3:73:19:34:28:50:3F:3D:0C
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:f4:ee:ee:de:c2:8f:b7:18:0f:5a:15:af:73:a3:27:c1:
81:0d:06:c7:e0:26:e3:39:63:0f:c4:9e:e9:22:f2:b4:c1:4f:
f8:2b:4c:c5:48:7f:5c:ad:db:5a:4c:51:52:a6:ee:f0:51:84:
01:7c:7a:13:20:3d:af:52:cd:3c:92:93:46:6d:5d:f5:9b:4b:
95:71:89:d0:14:ec:a2:3d:7d:71:66:8f:b9:ff:7f:b2:75:85:
ed:8c:08:9b:a7:7d:8d:b8:9e:44:a1:0b:63:b4:32:f8:fe:82:
0d:96:fd:be:9c:58:c6:ef:a2:a3:c3:6f:fa:d9:94:f4:0a:29:
ee:1d:74:75:b3:fd:62:98:05:fd:26:41:e4:3d:26:95:9a:04:
b6:54:89:ab:91:eb:60:0e:ea:aa:59:b3:b1:b9:2a:18:64:2d:
31:4a:d2:f8:1a:67:3c:df:4d:d2:13:c6:61:d4:27:5b:62:80:
95:2d:c7:d2:d3:3f:fc:6c:b5:85:c5:e6:03:52:12:f2:4a:01:
e4:89:a2:8a:80:48:1d:6d:00:5a:11:0d:6f:cb:20:ec:cc:99:
3e:1f:55:7a:3e:38:c2:ca:df:ec:ee:d9:c3:c1:6e:48:6f:18:
96:11:e2:51:c4:af:20:14:76:be:35:85:1d:77:00:fd:73:c2:
3e:95:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:59 2025 by rpki-client