Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: GbopjLx/ujP2grEhWlMRoRkizZwRyp8qulDBNfF0cYI=
Subject key identifier: 13:41:91:E6:6B:E8:A9:32:D4:D6:5E:33:BB:03:CB:F4:B7:F2:B8:84
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019896A4A29B70BDAE8BAA8411D495054320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 08F0
Signing time: Mon 11 Aug 2025 01:00:28 +0000
Manifest this update: Mon 11 Aug 2025 01:00:28 +0000
Manifest next update: Tue 12 Aug 2025 01:00:28 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: k7zg5H32vT1KpCAf9rgxUFtIpd6KL3/x6fy+kBQJeWA=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:a2:9b:70:bd:ae:8b:aa:84:11:d4:95:05:43:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Aug 11 01:00:28 2025 GMT
Not After : Aug 12 01:00:28 2025 GMT
Subject: CN=134191e66be8a932d4d65e33bb03cbf4b7f2b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:79:19:53:94:e4:b1:fc:f0:97:18:0c:f8:
0e:d2:b8:1c:d1:4b:3b:2c:4c:a2:5c:e7:a3:7a:aa:
ff:72:22:51:7a:97:44:77:a1:53:2c:8c:1e:43:fd:
cf:e0:4c:72:8b:10:8c:f2:10:d4:49:71:22:0e:8b:
5c:04:97:0b:28:7d:81:08:39:13:ad:31:95:9d:57:
73:4e:a0:5a:d6:9c:23:23:14:f8:01:65:3d:4f:f7:
20:55:5f:31:66:be:7d:81:39:ac:1a:b6:ea:e5:71:
df:e4:a8:95:10:cf:d8:19:fc:1c:71:dd:70:70:44:
59:64:1c:f3:10:48:18:83:7a:12:8a:7a:eb:bb:de:
c2:e8:e1:17:26:09:3c:cf:58:a6:ee:77:fd:49:51:
9f:e0:6d:33:67:1d:4f:de:c6:2c:46:43:d7:4e:6f:
ce:f8:b0:e0:75:86:f2:d7:2d:4c:c0:f3:e2:42:1e:
29:d5:f7:45:e9:87:e6:88:29:88:43:da:91:6b:1c:
85:bc:76:93:34:cd:5b:26:1b:27:98:4c:77:1e:7b:
8d:87:23:ca:8f:55:c1:42:df:5b:1c:50:a7:81:b3:
c4:de:ad:0e:0d:7b:8d:72:04:2a:40:e9:d8:a8:12:
61:01:e8:ea:8b:5d:f3:08:6c:2d:36:4c:fd:a2:b1:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:91:E6:6B:E8:A9:32:D4:D6:5E:33:BB:03:CB:F4:B7:F2:B8:84
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9e:14:2b:16:fe:88:6b:ce:fa:e6:69:4a:b5:57:90:3e:d3:
92:b7:29:8d:ec:46:52:79:ed:84:25:84:a5:c6:20:cb:d7:e8:
dc:99:f1:5e:ef:14:2c:ad:aa:53:dd:da:44:e7:7f:26:34:9c:
57:d4:6a:af:33:c3:2c:43:d3:da:14:6c:33:00:f5:35:ab:d4:
0c:08:9c:e3:3e:09:bf:91:59:dd:d0:5e:ea:3c:04:45:ee:fc:
e0:2d:10:50:c9:26:44:51:95:a2:3c:4f:25:77:a7:af:9d:b4:
67:ee:07:a2:15:c3:4a:97:1e:3e:3c:53:0b:8a:28:78:51:6b:
22:82:00:6f:d1:03:a0:af:3a:3a:bb:fd:74:20:53:dd:bd:86:
be:eb:b9:e3:f9:e6:d7:c8:56:55:f4:ba:79:b8:23:a5:a7:f3:
c1:23:34:42:21:c4:2d:b6:03:cd:e8:d8:e5:f9:eb:d7:c1:32:
c9:c5:8d:47:4f:e3:30:29:44:ae:e2:e6:a1:11:05:db:9b:6b:
1a:ca:bf:bc:86:1c:d7:14:44:16:a4:b8:cd:d8:dd:53:6f:4a:
99:5e:c0:9f:2f:b4:a0:4f:a8:37:90:50:a2:df:88:68:33:f1:
98:d4:a8:87:05:62:49:15:52:c0:15:41:75:97:10:bd:94:ed:
ba:81:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:53 2025 by rpki-client