Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: dVZwWzeYESEUTiBLt9qm7T1b+iQde9X2ipxATOGT3n0=
Subject key identifier: BA:D7:66:B2:A4:F9:83:88:FE:FF:4D:0D:C3:85:04:92:51:49:72:EC
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019A4EF4935C043AE1E289677143E546D8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1219
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: uV+gqXoqklpQKnRjfkq6dn+ckyj7lc9wAQv/WS2pkzY=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:93:5c:04:3a:e1:e2:89:67:71:43:e5:46:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=bad766b2a4f98388feff4d0dc3850492514972ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:6c:77:f4:0a:fa:93:3a:da:05:ba:83:1b:
14:f4:ee:28:8e:aa:09:64:95:96:ce:ce:34:43:7b:
f0:2d:bf:28:7f:36:14:bb:db:85:98:8f:3a:e7:80:
ff:3c:7a:6b:4c:e1:31:b7:f8:00:0f:df:4e:62:62:
92:56:22:e1:0d:5a:90:30:bd:43:33:9d:3b:44:6d:
4e:6f:2f:ab:13:89:2a:3e:02:dc:2d:c5:53:a0:8e:
93:c3:3e:cf:12:3d:36:e4:d4:32:77:7a:d5:23:c9:
ce:f4:8a:dd:55:44:d1:43:8e:22:e8:ac:88:5c:cf:
bc:4f:48:a3:52:74:75:56:e3:67:fd:c1:30:00:40:
0f:f8:a8:cc:3a:33:6b:df:be:7a:33:14:fe:da:97:
f8:77:76:40:34:71:b6:82:f0:1d:77:a2:aa:3f:c5:
a9:de:56:00:60:a8:e5:fd:6c:e0:cd:5b:35:98:53:
c4:55:6d:3e:ec:74:d6:d7:1f:79:af:f3:f8:cf:0c:
9b:c9:f7:39:ff:b6:b9:7f:7a:3c:15:34:6b:bd:69:
4f:ee:56:15:ad:c4:ee:39:1c:f8:cc:7e:40:5f:ca:
13:9f:32:d6:1d:d7:c0:22:a8:03:e9:e5:79:f9:35:
fc:bb:0a:a4:07:64:5b:6a:d7:65:38:4b:a1:b4:e3:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:66:B2:A4:F9:83:88:FE:FF:4D:0D:C3:85:04:92:51:49:72:EC
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:09:32:49:c5:0f:7b:01:88:f5:8a:a9:43:02:fb:d7:5d:
51:2d:7b:94:f6:56:a2:e9:9b:cf:1c:65:a3:c2:1b:8a:c4:93:
fe:ec:25:16:1f:0e:8e:5c:14:36:47:0a:67:a6:5f:24:fe:3a:
6a:7e:14:86:a3:98:20:77:21:91:c3:1d:23:00:b9:7a:f5:e4:
a0:d0:c0:27:36:83:ba:3f:ab:52:a5:a2:96:c7:95:f5:87:2a:
a7:ae:b4:06:30:a2:7f:79:5a:3f:1f:d7:78:11:d4:dc:3a:5c:
05:10:5f:34:f2:85:38:77:eb:b6:9a:1a:72:8a:18:40:35:18:
f8:80:57:1e:ab:54:5b:c6:b5:0e:47:06:9a:30:f3:6d:35:3a:
a2:fb:c0:4c:01:06:5f:5d:e8:70:0f:62:a2:a9:62:ea:0b:38:
bd:d3:e9:45:61:01:5d:f3:7c:82:cc:f1:6b:05:58:fb:39:f0:
3e:a4:2b:1d:b1:06:ad:17:f0:37:0d:f2:b5:93:74:93:19:46:
72:1c:82:d6:d4:bb:2e:6e:39:f0:fc:de:d5:21:30:e6:08:b4:
d2:4b:37:82:67:37:7e:4e:8e:5c:a9:ec:08:8b:4f:fe:a3:e2:
43:c7:8f:e9:c6:7b:6e:1b:90:f5:23:89:1b:20:7f:4c:24:50:
a7:04:e4:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JNcBDrh4olncUPlRti+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy
ZTg0MzAwHhcNMjUxMTA0MTMwMDQyWhcNMjUxMTA1MTMwMDQyWjAzMTEwLwYDVQQD
EyhiYWQ3NjZiMmE0Zjk4Mzg4ZmVmZjRkMGRjMzg1MDQ5MjUxNDk3MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA105sd/QK+pM62gW6gxsU9O4ojqoJ
ZJWWzs40Q3vwLb8ofzYUu9uFmI8654D/PHprTOExt/gAD99OYmKSViLhDVqQML1D
M507RG1Oby+rE4kqPgLcLcVToI6Twz7PEj025NQyd3rVI8nO9IrdVUTRQ44i6KyI
XM+8T0ijUnR1VuNn/cEwAEAP+KjMOjNr3756MxT+2pf4d3ZANHG2gvAdd6KqP8Wp
3lYAYKjl/WzgzVs1mFPEVW0+7HTW1x95r/P4zwybyfc5/7a5f3o8FTRrvWlP7lYV
rcTuORz4zH5AX8oTnzLWHdfAIqgD6eV5+TX8uwqkB2RbatdlOEuhtOPywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrXZrKk+YOI/v9NDcOFBJJRSXLsMB8GA1UdIwQY
MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt
ODRlMTFlNTFmMTM0LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0
LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj8JMknF
D3sBiPWKqUMC+9ddUS17lPZWoumbzxxlo8IbisST/uwlFh8OjlwUNkcKZ6ZfJP46
an4UhqOYIHchkcMdIwC5evXkoNDAJzaDuj+rUqWilseV9Ycqp660BjCif3laPx/X
eBHU3DpcBRBfNPKFOHfrtpoacooYQDUY+IBXHqtUW8a1DkcGmjDzbTU6ovvATAEG
X13ocA9ioqli6gs4vdPpRWEBXfN8gszxawVY+znwPqQrHbEGrRfwNw3ytZN0kxlG
chyC1tS7Lm458Pze1SEw5gi00ks3gmc3fk6OXKnsCItP/qPiQ8eP6cZ7bhuQ9SOJ
GyB/TCRQpwTkQA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:13 2025 by rpki-client