Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: LK7WGR9aI0+43bHTlmTnkEHWUxN0kxEfnWTp4vxcVSY=
Subject key identifier: DA:4D:DD:C1:BB:F8:32:5E:E8:EE:D6:9A:B0:A7:35:B2:12:DD:E2:F9
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0198835641406C1C21EC786189CE58BBF1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 15B2
Signing time: Thu 07 Aug 2025 07:02:04 +0000
Manifest this update: Thu 07 Aug 2025 07:02:04 +0000
Manifest next update: Fri 08 Aug 2025 07:02:04 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: +bB0Qw7er4bv9Vk3gpuC7Q/m0sA9tNRCCz4eL1hGL7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:41:40:6c:1c:21:ec:78:61:89:ce:58:bb:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Aug 7 07:02:04 2025 GMT
Not After : Aug 8 07:02:04 2025 GMT
Subject: CN=da4dddc1bbf8325ee8eed69ab0a735b212dde2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:98:40:f8:c9:fb:b1:f9:e4:db:18:e3:e6:
50:44:0c:9f:ea:02:16:2b:7b:b4:5f:95:da:be:d6:
ae:6a:06:77:41:b7:cb:d8:6b:26:db:a1:6c:9c:b2:
dd:e5:4a:2c:1c:a1:92:db:39:f8:54:7a:8f:0e:67:
3e:70:e8:3c:5d:06:34:14:06:54:33:6d:8a:20:33:
1d:7f:29:27:b5:15:14:6a:aa:31:d1:65:d4:d2:ea:
b0:d9:5b:96:48:58:7b:55:f4:6b:92:da:6a:91:6c:
73:20:90:e6:a7:d4:f5:65:55:52:d7:63:fa:b6:34:
d4:72:c8:15:41:85:58:cc:d2:58:90:8e:09:92:3f:
ca:ee:67:b7:81:02:4c:6a:81:6e:d7:01:0d:dc:96:
f8:be:71:21:48:64:18:73:97:87:29:ed:81:3e:c1:
76:29:9e:02:22:aa:ff:8c:86:95:ac:2f:1e:82:aa:
24:b3:a3:5c:5a:10:41:7a:c3:a2:24:22:46:da:17:
8e:0b:d3:5a:3d:99:b6:8e:28:c6:c0:8f:d7:ae:1e:
6a:b7:00:21:09:4a:5c:8f:6f:48:17:58:1b:c6:9c:
a9:28:fc:0a:3c:79:45:5e:20:7b:7f:27:9a:af:61:
92:98:26:39:40:f6:4a:7b:00:59:4a:5f:bb:d6:b3:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:DD:C1:BB:F8:32:5E:E8:EE:D6:9A:B0:A7:35:B2:12:DD:E2:F9
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bc:57:6f:a2:42:07:0d:d5:55:84:20:60:ab:c3:15:f6:9e:
e1:e6:ae:22:23:b1:6b:a7:57:5e:40:61:aa:77:71:a2:58:56:
41:e8:53:25:4e:b0:7f:a5:51:7a:c3:5c:98:5c:dd:c4:61:3f:
28:2e:44:16:ce:96:fa:ec:8e:18:9f:12:75:22:8d:bb:6e:9e:
95:09:fc:3f:fc:63:a9:f2:af:72:51:29:ae:2f:e2:57:38:84:
48:71:b3:8b:dc:e3:8a:b8:79:d3:01:06:2a:a3:f8:46:d7:ff:
74:ac:b3:be:83:c8:30:52:a6:cf:b7:b4:e8:72:e0:09:7c:5f:
d3:d3:4d:e9:0c:c9:33:d2:c3:42:7c:12:e8:d9:be:1e:25:20:
be:4b:52:82:37:37:03:4d:88:cb:de:66:0e:d3:f9:1f:d8:a0:
67:6a:09:a0:81:33:58:e8:b1:29:d2:3f:35:f3:dc:67:e0:cd:
94:bd:96:72:bb:d2:52:9b:45:3f:a6:3f:b6:e7:12:b7:ad:96:
50:14:87:b9:3f:26:d2:4c:64:ee:b2:cb:27:f8:6b:5d:a0:71:
d7:b7:38:c9:11:4a:d4:a3:72:73:0b:55:f4:45:74:6f:c6:78:
5b:71:05:5d:9e:99:0f:6c:c8:5b:5c:2d:11:4e:29:3a:62:d8:
d8:02:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:42:48 2025 by rpki-client