Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: omgSVskOIA2Ns/Nq8I6UckXYhjClQSUrh2NxCbOr5L0=
Subject key identifier: A7:E5:75:F3:2A:0B:AE:A9:0D:06:B2:14:DB:F0:1E:54:F5:80:E0:FD
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019889C4C399907935242A539E8DA9410E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 02F7
Signing time: Fri 08 Aug 2025 13:00:30 +0000
Manifest this update: Fri 08 Aug 2025 13:00:30 +0000
Manifest next update: Sat 09 Aug 2025 13:00:30 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: Y2FlAm1nnIRJMupDS+kU7HFKUyE1jgd26DTaTc36e60=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:c3:99:90:79:35:24:2a:53:9e:8d:a9:41:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Aug 8 13:00:30 2025 GMT
Not After : Aug 9 13:00:30 2025 GMT
Subject: CN=a7e575f32a0baea90d06b214dbf01e54f580e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:f9:46:6a:13:76:29:8b:ab:84:04:79:b5:
ca:b7:f0:c3:50:4e:7a:5a:32:1e:49:79:4e:27:c3:
65:af:06:18:fa:7d:16:86:79:a1:60:35:e3:cd:ec:
71:47:70:1a:7b:9f:0f:a9:65:6b:e4:c4:7b:3d:fe:
c6:80:25:c2:db:e8:d3:0b:80:68:83:79:1b:32:df:
c4:bb:9c:41:0a:a8:1d:21:2e:bd:f2:f3:b0:f5:82:
f3:5c:42:3a:fe:75:d4:2f:ea:33:8c:c6:c1:4b:16:
3c:ca:05:23:d9:61:98:9e:39:61:fa:47:0d:19:41:
e8:1b:36:04:d4:5c:f1:95:1b:76:39:43:df:6c:34:
26:4c:83:cc:f1:82:0a:69:28:c1:cd:dc:a0:39:84:
cb:9e:d0:aa:91:93:91:d8:31:08:e0:d5:80:f5:28:
96:fa:34:9b:21:eb:87:c6:12:1a:25:4c:e6:57:1b:
9c:95:34:e1:55:33:f4:7d:74:9d:88:5b:48:68:28:
87:87:d4:57:23:f6:0a:50:2c:f8:78:2a:3d:d0:b1:
27:74:61:1f:69:1e:56:17:b7:98:15:39:bd:51:a5:
1e:2e:b9:49:dd:8a:1d:b0:dc:54:30:71:48:87:43:
c7:02:15:b1:f6:ad:b9:83:a5:90:75:3e:4c:1d:86:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:75:F3:2A:0B:AE:A9:0D:06:B2:14:DB:F0:1E:54:F5:80:E0:FD
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:84:5c:fb:b2:18:4a:24:cc:ea:c5:22:b9:de:e8:85:bc:2b:
cc:e5:3e:44:b9:ae:d3:15:6c:60:cb:67:a9:14:2b:7f:c4:9c:
19:38:c5:fd:8e:27:be:18:6b:48:3b:fc:08:44:f4:cf:bc:8f:
05:ba:fc:c5:7a:74:6b:70:75:5a:32:fc:5f:83:12:f0:09:0d:
59:4d:97:bd:a9:3b:d3:8f:5a:30:85:08:a7:45:07:a8:60:8a:
87:25:2c:3e:31:b5:44:17:40:1a:99:59:d4:e2:6b:35:fb:ee:
5e:b6:03:d9:86:6b:89:78:4b:f3:95:bb:74:2d:09:96:36:38:
76:49:a9:e7:e1:26:a5:9e:84:08:33:9d:cd:f3:30:68:33:1e:
07:16:5d:5e:02:eb:45:1e:a2:2b:8c:81:32:19:13:7f:52:3a:
b3:a0:a2:6c:8d:24:57:55:86:f1:86:5d:13:06:34:fc:38:94:
b9:e3:d4:17:3d:4d:8e:95:a5:00:23:31:81:12:e9:c5:31:e0:
bb:55:fd:6f:0b:85:14:d1:f3:a8:e6:ff:d4:0f:48:ad:21:af:
82:d4:d2:62:79:67:d6:d5:34:6c:a6:b1:0d:a5:88:23:f7:90:
bb:0d:9d:cb:6c:22:cd:3a:12:6b:22:70:9e:e4:0b:94:08:be:
b8:9f:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:10 2025 by rpki-client