Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: fgaCWEyzXhkay+5FxCxBJsQVUwtQMaK8n5ub29x2xx0=
Subject key identifier: 8F:C8:04:47:01:D1:4E:13:AC:3F:6B:14:53:91:FB:78:AF:F5:E3:32
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019A4D3CB668B35C92F746FC7D732DC7FC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0393
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: 7QKIVhliHGMU1Jm/Ewa32LVUiU1B+NUllh4ZEdY4ViQ=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b6:68:b3:5c:92:f7:46:fc:7d:73:2d:c7:fc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=8fc8044701d14e13ac3f6b145391fb78aff5e332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:66:ff:bf:3c:29:ad:48:e6:37:6c:86:dc:
3e:37:ee:ce:9c:a4:36:3e:a8:ca:1f:b4:fd:35:09:
16:b2:22:21:05:ae:25:e4:3b:5e:12:71:af:83:07:
03:88:8b:6f:70:5b:6c:e0:41:9f:ab:df:57:5d:9e:
3d:f5:b8:a9:01:f7:75:6f:e5:06:31:a9:e5:bb:05:
24:f6:2f:f6:b3:c4:13:02:05:2b:d8:6d:4b:24:98:
90:7a:9a:7d:83:6d:dc:5f:32:73:7e:66:bf:57:52:
69:7c:de:f7:a4:c1:84:2e:a2:6d:b2:b7:d5:f5:16:
bc:c3:bc:ef:eb:e6:ce:a3:34:1b:cc:dd:7c:ba:40:
e5:36:25:95:0f:7f:25:8f:f3:ab:33:ca:f8:a9:e3:
0c:36:c5:f5:68:f8:60:04:87:43:5a:96:37:b1:c9:
38:32:08:48:2f:0c:ce:1d:ca:8f:41:cb:24:c6:ec:
71:f3:5f:08:b6:ae:26:3b:4d:e2:cf:c8:3f:ea:c3:
e4:ae:9f:17:ce:60:f6:e7:3a:34:a3:05:83:00:83:
66:66:34:bd:78:f2:51:4f:bc:5d:3a:ff:ed:60:63:
0d:64:14:f5:90:7f:bb:bd:e0:8b:6b:06:23:94:39:
86:71:28:dc:cf:c7:eb:e6:5b:89:93:60:4c:e3:b6:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:04:47:01:D1:4E:13:AC:3F:6B:14:53:91:FB:78:AF:F5:E3:32
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:c8:fc:0b:c5:9b:6f:89:cc:46:41:f3:a1:22:de:2e:78:
c1:b1:0e:1f:5b:97:43:d3:22:e1:35:da:f3:ea:13:95:7a:3b:
e4:7b:1a:5c:3b:a0:9d:5a:d5:5e:0d:98:c5:66:f7:88:8e:d5:
cb:d5:66:52:41:c3:4e:d8:fb:1d:c7:47:80:2e:a1:60:89:e4:
ec:a7:11:fc:5f:f6:47:63:60:78:9f:63:d2:04:49:13:7b:7d:
ff:da:81:1f:45:d1:01:b7:e5:f5:6e:9e:13:95:5e:d9:8a:ff:
75:8f:1d:f8:cd:fb:e2:e7:5d:50:a3:2e:89:f8:e4:43:91:a7:
05:b2:4c:f3:c3:6a:30:77:b5:5d:73:30:af:23:e6:8e:d9:b4:
6b:87:52:4b:24:df:cf:d3:e2:f7:2f:be:ac:0d:cc:8d:b6:56:
3b:6f:60:83:68:53:0e:cb:02:49:d0:7a:ca:f2:e6:6a:21:d1:
40:f8:8f:73:ca:14:eb:74:30:38:3e:7e:5e:d1:d7:4b:90:51:
0f:6b:d8:0b:53:f5:82:b7:f0:6f:1e:6f:91:4a:99:0d:77:40:
c0:f0:fe:37:bc:60:77:e0:13:23:1c:fa:8e:98:c2:c3:97:37:
ef:5a:cf:6d:5f:d4:d3:98:c9:99:57:56:b6:8a:35:de:b7:2c:
ab:53:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:05 2025 by rpki-client