Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: NQPYRL4/9Y9/06X5CrkIuShy6RPu39mma5xGiy51BfA=
Subject key identifier: 2C:06:FD:B3:45:45:24:20:E1:11:37:7E:41:0D:13:E4:55:65:CD:B5
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 019A50070995246FEC592BCFD09B5CF6B6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 18:00:29 +0000
Manifest this update: Tue 04 Nov 2025 18:00:29 +0000
Manifest next update: Wed 05 Nov 2025 18:00:29 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: pcAjQNzoC/uPqcvcGhqjpEAYfa4gwBqQVeC5+lutz58=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:09:95:24:6f:ec:59:2b:cf:d0:9b:5c:f6:b6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Nov 4 18:00:29 2025 GMT
Not After : Nov 5 18:00:29 2025 GMT
Subject: CN=2c06fdb345452420e111377e410d13e45565cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:67:b5:7b:91:1a:bf:17:7b:0c:c6:37:06:
3b:02:00:67:98:8f:bc:06:c4:63:b9:d5:3e:36:bb:
b6:e4:6f:50:33:56:23:fd:fa:0d:e3:4d:d2:f5:f5:
06:f7:21:a7:e0:e0:2e:6d:41:45:b5:13:a5:6c:96:
56:ef:19:46:44:76:67:6c:64:1e:6d:a7:76:48:ad:
6f:ea:19:ca:40:60:cd:09:06:2c:ba:59:a6:3f:eb:
66:82:4f:5c:3d:b0:b5:b3:f3:5a:26:74:a9:16:6e:
64:1a:7f:12:5d:9c:ba:8d:eb:10:ef:16:ac:8d:ec:
9c:97:80:35:92:fb:dd:4a:25:ee:6e:d0:ef:e9:8a:
29:3f:fe:17:be:ae:bc:a5:f0:44:59:20:ec:61:e3:
bd:0a:38:69:08:74:43:69:96:55:b3:a8:af:e5:14:
fe:cd:04:87:e1:b6:13:84:14:85:d3:c3:96:dc:2d:
92:f5:3a:74:c5:c2:a7:4c:9a:35:db:41:6b:e1:07:
ca:35:d2:6b:02:9e:df:88:dd:74:87:2c:5f:48:71:
3d:57:b3:1b:5d:a7:73:bc:ae:a0:6d:84:c2:ee:0f:
ab:9b:bd:b6:52:ff:3a:9c:8f:95:02:99:f7:4b:ea:
af:85:f4:2e:0f:6c:6b:8c:db:5f:a3:9b:53:68:f5:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:FD:B3:45:45:24:20:E1:11:37:7E:41:0D:13:E4:55:65:CD:B5
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:e9:d4:ce:e4:ab:74:4f:25:f2:d7:a8:f5:dc:b7:5b:15:
c0:9e:c7:40:bf:97:e0:71:e8:7e:56:12:f7:22:ad:e7:85:fd:
0e:d6:db:ed:0d:67:7a:5e:7b:3a:78:20:fa:3c:2a:e8:80:5f:
e2:87:b3:04:df:ab:be:66:9b:94:96:66:74:64:e3:55:ea:4e:
36:83:30:87:4f:0d:73:da:80:bc:5d:ec:6c:e5:6d:c0:0a:0f:
76:df:fc:0b:1a:78:1c:cd:1c:79:40:76:1e:77:c4:8b:b9:25:
d3:3d:da:7c:7e:ec:c7:b7:2c:e0:45:a3:82:53:4c:bf:5e:48:
fd:0d:16:f1:9f:d0:d1:62:39:77:e1:cc:54:f3:0c:96:26:88:
b0:0f:54:56:55:2e:26:98:59:c3:14:59:7e:2f:0c:af:f8:a9:
e6:60:20:b1:ec:90:21:99:1b:80:69:11:08:0e:08:fc:f0:1c:
5b:8f:5e:34:69:af:a0:b0:df:4a:8f:61:06:8f:d1:a8:ed:36:
1d:16:26:e8:a5:a4:ec:6b:01:f3:d5:3c:8e:f3:f8:a8:9b:e2:
a6:89:e8:a3:63:80:d3:b5:34:67:93:fe:46:01:ed:69:35:63:
2d:0d:cf:c8:46:af:7f:8f:90:13:6d:44:81:fa:7a:9d:80:60:
d4:44:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:56 2025 by rpki-client