Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: vMkKGoegcaiJghryVAM7Shn5dmr5VlEMtV7IF/dvQC4=
Subject key identifier: FC:4A:8C:D3:CE:A1:4A:69:FC:16:CE:EB:CA:6A:FE:56:4C:99:1B:64
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019874194474FB4029F6CA27C8F9517E8699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 029E
Signing time: Mon 04 Aug 2025 08:01:09 +0000
Manifest this update: Mon 04 Aug 2025 08:01:09 +0000
Manifest next update: Tue 05 Aug 2025 08:01:09 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: trJtbO9q+iAg+4ZM3ecVWCquhHvIynYQEAToaJppn4E=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:44:74:fb:40:29:f6:ca:27:c8:f9:51:7e:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Aug 4 08:01:09 2025 GMT
Not After : Aug 5 08:01:09 2025 GMT
Subject: CN=fc4a8cd3cea14a69fc16ceebca6afe564c991b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:01:f0:29:43:a6:cc:c5:d4:c8:d3:73:98:
98:c4:3a:e4:38:e0:75:93:7e:4b:33:ab:84:44:98:
f6:84:cc:5c:d0:59:92:7a:9a:c7:d3:5d:a6:b6:29:
aa:dc:d9:d8:7c:03:c8:77:81:cd:4a:16:99:79:9e:
c5:d9:06:09:0a:11:eb:ae:53:18:dc:f6:0d:02:b5:
04:5d:1d:23:f3:bc:4c:e4:f9:0c:e8:67:ec:ce:24:
9d:77:e1:04:d2:8f:7b:8c:da:eb:14:e4:cc:74:6f:
76:04:4a:87:c4:1c:27:02:ea:e0:49:4f:69:b7:f4:
76:07:dd:dd:f4:f1:55:99:2d:19:f9:82:c4:c5:41:
8e:af:27:5a:72:5f:8a:ba:59:72:a1:9b:08:cc:9a:
c0:16:9b:75:84:7f:24:4c:9c:21:28:f9:cb:bd:a8:
40:6c:07:60:04:11:a7:49:d3:ed:64:49:d3:7f:2c:
ce:e7:74:b9:7d:c8:5c:95:5a:ca:15:c7:a9:3e:3f:
21:d9:25:fe:a4:05:6e:2e:f3:bb:84:ac:0b:c4:b3:
32:7e:4a:af:b9:9c:06:fb:33:bd:21:81:60:2b:11:
7a:bb:80:81:45:f6:5e:ab:68:9b:f2:46:a4:0c:e0:
df:4e:13:4c:2e:98:8c:d3:05:c2:d4:64:a9:1d:0f:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:8C:D3:CE:A1:4A:69:FC:16:CE:EB:CA:6A:FE:56:4C:99:1B:64
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:28:ad:13:b1:18:6a:91:66:d2:df:79:b2:dc:4b:81:20:
8e:e9:ac:60:a2:22:3d:67:92:bf:39:c4:19:fd:29:cb:e3:0c:
fd:5f:e7:37:df:8e:37:cb:28:7d:05:35:d7:85:eb:a5:5e:64:
1d:49:16:65:da:b5:61:2a:5e:cd:b9:c8:63:48:0e:18:1f:12:
27:0c:d7:6d:56:5b:b4:10:f9:a3:91:d9:54:e9:3c:d0:93:40:
88:2e:ab:8c:ed:15:29:d1:87:89:ed:c2:10:66:41:85:c1:57:
e7:4e:3d:8c:66:43:9c:10:47:50:2e:22:28:a6:67:dd:01:c2:
75:29:d3:10:b3:7c:b1:07:38:3a:0b:a2:48:01:9a:07:de:27:
44:9c:8d:14:6e:dc:d9:dc:04:ef:20:14:78:eb:c8:9e:e4:a3:
e6:41:35:cd:16:63:65:be:86:0f:80:1d:b6:7d:d2:e8:c2:f9:
08:db:c7:95:51:78:ef:fe:a5:91:b5:4a:4b:47:e3:4c:76:ad:
73:4f:8b:5d:e7:db:b2:50:22:9e:72:02:56:d0:60:c0:08:f7:
e8:a9:25:2e:01:7d:f9:a8:17:48:c5:a0:94:a2:19:35:8a:19:
18:24:89:5a:7d:b5:f1:6c:ba:52:a9:93:13:2b:75:fe:bd:57:
5a:db:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:38 2025 by rpki-client