Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: KiChUJztDdxBh2Cep7h/i33/w1VHD2knmYnN2fg6m6E=
Subject key identifier: 31:EB:BA:16:06:72:70:EB:BD:28:0C:10:B1:0D:99:8A:42:D1:1C:15
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019A4EF4EFD22A955D7C35EB93D043F600DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 09D4
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: uByvLbwhdsgbSDxy8i9VbvHCnuBrMKlWB+aO8HVcurM=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ef:d2:2a:95:5d:7c:35:eb:93:d0:43:f6:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=31ebba16067270ebbd280c10b10d998a42d11c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:57:6e:46:33:62:16:e3:d0:cc:46:26:a1:
25:3e:e3:b4:31:52:ef:5f:6d:ad:83:b2:31:77:4a:
71:cb:3a:3b:14:e4:ae:4d:87:1d:0d:70:a6:4d:66:
4e:bc:df:c5:f4:25:fe:bd:b9:00:ec:f8:40:05:c2:
c8:2b:74:8f:a9:fd:e6:e5:88:af:39:ec:ad:c9:1b:
aa:da:bb:3b:d1:99:c0:fb:cb:d2:68:45:ee:fe:8f:
2e:a5:e4:b5:1b:1a:63:6b:49:4c:8d:61:98:f8:9d:
1a:99:b2:d7:7b:4b:38:96:1f:e0:3e:f0:38:55:55:
1b:8c:fa:32:7d:ed:91:6c:e1:a3:98:5f:8d:87:49:
7e:23:33:33:7e:54:e6:39:1b:a5:b9:65:b3:a8:ae:
01:ca:70:0d:ce:f3:29:d8:f3:b9:3a:66:92:6f:b8:
a3:4e:78:ae:64:16:32:4a:1e:b8:e2:9f:1e:a6:4b:
a4:cc:4b:a3:b1:ef:cb:e1:3d:ba:29:d5:68:72:6d:
d7:1d:a1:d5:9d:82:36:05:28:76:10:5a:7d:2a:4d:
67:e3:b7:43:9b:4a:7d:fb:ed:0b:81:bc:7c:ec:90:
b3:0e:34:52:32:43:7a:6e:a1:d3:ec:97:4c:b1:99:
50:6d:2a:31:33:bf:7a:78:cd:47:e5:c9:16:24:4f:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:BA:16:06:72:70:EB:BD:28:0C:10:B1:0D:99:8A:42:D1:1C:15
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9e:60:96:a8:c6:f0:16:c0:28:c9:c8:f1:e3:87:a2:09:d2:
32:60:72:1a:a3:a4:4f:f7:ef:eb:b1:e0:b5:97:f4:1b:b5:6d:
f1:8f:fe:78:29:f1:2f:24:a1:70:c2:58:37:9d:28:94:77:68:
52:59:ba:eb:e8:49:22:f3:52:90:b2:fe:96:5e:dd:a2:78:ef:
67:92:2c:c8:33:e2:62:57:b2:88:fc:1e:49:7b:47:8c:e0:63:
cb:a4:af:2a:eb:05:87:a6:71:09:04:92:d8:e2:9f:62:ec:b8:
80:3e:84:82:99:19:9d:36:c5:22:93:03:59:55:c6:b7:9b:26:
9d:3a:e9:12:9a:da:51:59:d9:07:44:10:ad:2f:0c:76:ca:f3:
b4:44:25:ab:54:17:c2:1b:ae:21:a4:5a:fc:f0:37:89:76:d1:
94:f1:96:68:f3:69:7e:c7:15:46:6f:2b:ad:30:f4:94:4c:cf:
66:4d:33:59:5f:48:d0:da:c0:9f:a5:19:54:5d:88:4e:9a:e7:
40:bf:12:fe:c1:f4:04:be:b9:f6:a9:0a:4e:70:1b:70:ba:f1:
8a:15:f8:60:f4:a9:e5:9c:78:ea:f9:8c:5d:78:97:d9:ea:b9:
b9:55:1d:86:14:ba:47:51:0d:c3:17:3a:80:34:c1:99:74:c1:
81:8b:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client