Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: jPO2cgrst+bQ8etpTe4sGrrD8dUSmT4HnjvNHVXehfQ=
Subject key identifier: 7B:35:A7:19:CE:7C:54:43:E7:9E:24:AF:BA:B2:8A:DB:16:C1:73:BC
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 0198819E598638F8AB5E1902CFE57FF23384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 112A
Signing time: Wed 06 Aug 2025 23:01:35 +0000
Manifest this update: Wed 06 Aug 2025 23:01:35 +0000
Manifest next update: Thu 07 Aug 2025 23:01:35 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: NEPm6zSyzk9+NInZ89EdWdBzmhvLRczjUSjHlF7Fs48=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:59:86:38:f8:ab:5e:19:02:cf:e5:7f:f2:33:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Aug 6 23:01:35 2025 GMT
Not After : Aug 7 23:01:35 2025 GMT
Subject: CN=7b35a719ce7c5443e79e24afbab28adb16c173bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:a1:56:da:24:c8:a4:8b:38:35:81:a2:59:
74:b7:06:2d:38:8c:3b:b5:b2:80:26:8b:fa:33:7f:
cf:72:a0:59:99:94:1f:cb:a1:2d:11:86:d7:f5:66:
29:81:12:fc:71:ab:35:2e:30:76:f6:1f:99:b9:5e:
1b:2f:18:6d:41:d8:08:ff:b4:c5:cc:5d:2e:d3:d5:
f1:78:73:2a:1c:45:af:ee:ca:8a:81:19:93:c6:71:
72:41:79:a7:94:0c:e4:2c:98:ba:c8:f1:18:f8:2c:
9e:03:67:40:cc:6e:5c:0c:47:e1:45:9d:2e:32:c4:
fc:ec:06:87:82:c3:b3:23:bd:65:e1:48:1b:6f:dd:
23:b4:cb:17:0a:f0:59:f3:00:24:9c:c6:59:59:7a:
ba:4b:29:2c:55:9a:88:81:57:60:27:b6:fc:62:5d:
e7:c4:6c:77:30:2a:01:61:8b:e7:86:ae:73:39:b4:
08:5e:e0:64:0d:71:7f:f3:32:eb:ef:d2:1a:ba:71:
33:5c:af:48:71:27:5c:01:12:44:56:c4:3b:8d:2b:
a7:5b:f7:31:65:b7:41:48:04:2a:f6:61:36:03:c1:
36:a2:da:5d:8c:bb:90:13:96:02:7c:f2:02:2f:50:
10:39:7e:6b:f6:ce:5e:cd:3a:fd:f4:f8:07:8e:0a:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:A7:19:CE:7C:54:43:E7:9E:24:AF:BA:B2:8A:DB:16:C1:73:BC
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:b8:f1:d9:8b:3b:b9:de:07:ef:cf:86:43:82:fd:4f:b1:
5e:30:95:de:48:d1:60:9f:c1:c4:22:6f:e5:ec:6c:1c:96:d6:
86:d5:2c:44:f3:88:bb:d7:9a:d2:cf:92:6c:8d:e7:1a:75:94:
f9:12:99:a7:63:44:37:99:60:56:02:ff:06:49:60:c5:02:27:
8a:de:8f:15:53:90:d6:5d:7e:bc:35:c3:90:c7:16:15:2e:0b:
db:c7:a1:5b:01:7a:e2:79:89:36:29:53:42:06:df:6c:20:b6:
6c:1e:cb:0f:7d:f6:48:2f:5c:eb:7e:ec:96:31:12:00:97:55:
74:28:83:e9:ec:5a:f5:b5:18:89:cc:e1:ff:ed:8c:df:09:c4:
12:d0:c5:6a:8f:c2:9b:e5:12:84:63:6b:19:54:8c:1a:19:52:
6c:38:f2:14:24:e1:43:44:28:3d:d8:6f:ea:28:f3:01:f3:21:
c1:08:7a:64:7c:94:fd:2c:ac:c9:fd:42:47:00:bb:6f:7e:c5:
76:68:91:e9:69:01:44:e0:60:a5:fb:02:7b:f0:6c:52:a6:0c:
0d:28:9f:0c:31:77:f2:73:11:ed:62:8c:42:ca:48:cc:4a:9f:
56:67:2b:eb:03:cf:06:ac:bd:11:5d:1f:7b:2b:7c:73:95:04:
78:48:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:06 2025 by rpki-client