Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: BEiudrV9BIOtEgs13unVO65+M/+PI1dAADro77JayXI=
Subject key identifier: 42:BB:63:B2:A0:22:9B:0E:23:B3:73:1B:F9:CA:FE:4A:84:4C:75:49
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 019A52D1D46433362968002ED869E235E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 07:01:14 +0000
Manifest this update: Wed 05 Nov 2025 07:01:14 +0000
Manifest next update: Thu 06 Nov 2025 07:01:14 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: Sw9kVyTZ5nhZ/aX9HGrW0qH4Z1uqs3HkO1e44oFeO9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d4:64:33:36:29:68:00:2e:d8:69:e2:35:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Nov 5 07:01:14 2025 GMT
Not After : Nov 6 07:01:14 2025 GMT
Subject: CN=42bb63b2a0229b0e23b3731bf9cafe4a844c7549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:7b:a9:03:a5:7d:ea:ea:c2:e3:b5:33:4f:
89:33:23:51:41:95:96:5b:26:54:43:5f:16:93:39:
12:09:29:a2:f5:b3:95:dd:08:0e:f9:5b:9b:68:d8:
ff:f5:12:e3:83:e3:5a:ac:1e:cb:2d:db:bc:7b:e4:
e3:4e:f0:df:9c:a3:52:f4:4a:fa:81:4d:2c:82:be:
36:15:c1:71:e2:26:dd:94:6d:08:ac:9a:ba:2b:1d:
ed:1c:67:df:60:f8:b7:f6:2a:c4:f4:a8:6b:35:ba:
6f:c8:e1:45:fb:55:52:66:ce:a1:c7:18:b9:e6:9c:
da:61:47:bd:06:7c:7e:7a:40:07:bb:20:2d:79:87:
42:3d:4b:3b:b8:15:c3:09:74:a2:47:0a:91:fc:df:
1a:40:5c:79:9d:ab:0b:f1:d6:d6:35:20:58:0e:9f:
34:c6:f1:c7:60:18:96:45:e1:0e:95:f5:1c:ea:a1:
ce:f0:9f:d8:bb:a4:98:92:27:e0:53:67:ef:71:ce:
63:ce:06:5e:18:8d:85:c0:ac:4f:14:68:54:1a:49:
0d:6d:41:23:47:bd:6d:ac:3d:c7:8f:ca:38:be:01:
2f:bc:fa:0b:71:91:60:27:fd:b7:8c:fc:17:96:eb:
c6:f2:22:27:c8:ab:8d:94:74:66:93:eb:2e:8c:f5:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:63:B2:A0:22:9B:0E:23:B3:73:1B:F9:CA:FE:4A:84:4C:75:49
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:db:04:d4:0c:5d:e1:91:43:69:54:05:95:89:4c:67:91:
2c:a3:c4:c8:4a:ad:d9:b0:72:ea:cb:86:54:8e:c0:0e:55:f8:
7c:71:4d:0b:96:c2:f7:65:e6:bf:1d:96:2d:40:bf:16:d2:37:
18:99:2b:5d:b1:d7:76:ab:e1:bb:cc:7d:4c:e1:af:3a:03:89:
28:17:16:a1:0e:14:35:a2:86:cf:8d:85:16:ab:c6:b4:b6:6b:
7a:a6:98:c0:f0:3b:71:f3:83:2f:a3:ab:58:10:b1:5c:5b:29:
18:a6:93:ee:f9:44:38:85:14:3c:27:ab:6a:dd:6f:91:c3:6b:
1f:02:77:bb:27:8a:7f:73:0e:22:13:b8:81:77:23:cc:56:50:
2e:ca:c4:b1:f5:92:0a:55:1c:71:57:10:a5:cd:55:6c:3c:d8:
75:c3:0d:37:52:9d:43:41:ca:64:95:48:9b:51:a0:00:5a:9d:
f8:0d:2c:48:1b:c7:c2:f7:73:5a:30:01:2f:11:f4:f9:25:b9:
89:d1:ce:1a:6a:46:41:4e:32:14:3d:6f:47:a7:bb:3e:15:8d:
80:19:b0:39:6f:a4:4a:bc:9c:14:23:e5:97:e0:98:01:4f:58:
23:dd:43:70:ec:66:6a:2b:0e:be:4a:c5:37:bb:ef:94:90:59:
94:4a:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:41 2025 by rpki-client