Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: BxKoL3T1qXDhxhk3A4k3R1TwMYAK6jhpgy0hrbH32Lo=
Subject key identifier: B8:0B:EE:7B:6E:72:9A:81:7F:F7:6F:6C:D6:E4:01:C8:91:80:FB:31
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019847E53831A30D89A2E9009C6E41F757AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:01:01 +0000
Manifest this update: Sat 26 Jul 2025 18:01:01 +0000
Manifest next update: Sun 27 Jul 2025 18:01:01 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: hWmsLDxQxLKefGnZuBq8Gmd3UfpP4dTie8yV5jMb5ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:38:31:a3:0d:89:a2:e9:00:9c:6e:41:f7:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jul 26 18:01:01 2025 GMT
Not After : Jul 27 18:01:01 2025 GMT
Subject: CN=b80bee7b6e729a817ff76f6cd6e401c89180fb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:24:f9:09:e8:89:23:3f:21:88:6c:bf:1c:
41:bd:20:7d:33:26:49:8f:90:1b:71:dc:9f:d5:97:
04:3d:3b:f8:8b:1c:22:63:14:a5:25:dd:3a:65:8d:
d6:d4:93:ff:e8:60:a0:5e:c1:a5:96:de:b0:f6:c5:
f4:d7:de:f3:07:f4:d3:fe:3b:12:02:ed:a7:49:a0:
4c:0a:bc:0f:95:28:11:ab:d0:7c:ac:c8:8e:77:f4:
a3:8d:6d:33:17:34:1e:63:29:dd:89:23:a0:f8:3d:
30:0d:42:7a:00:83:7c:f4:f1:53:91:6d:e7:15:5e:
da:d8:e8:ce:e7:8d:c3:af:2a:46:a3:ab:68:63:35:
f6:40:4f:bd:ec:75:d9:fa:2b:57:c5:23:2f:0f:0f:
f6:b2:9f:5e:1e:24:80:a9:e3:61:23:d6:f8:e5:93:
19:fd:61:79:09:ca:cb:7e:23:df:36:f2:fb:77:77:
70:fc:78:3a:4b:0d:1b:b2:e9:cb:35:ee:c0:eb:a5:
88:c8:1c:ca:0d:8e:1e:c0:fc:f1:f8:e9:75:8c:5b:
00:8f:56:35:e9:dc:bb:a7:95:f5:66:b9:93:cf:27:
f5:18:4f:55:b4:dc:74:9a:fd:69:ed:6f:2f:e7:70:
41:e0:7e:ea:f3:b6:53:7b:9b:07:8f:a6:46:44:b5:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:EE:7B:6E:72:9A:81:7F:F7:6F:6C:D6:E4:01:C8:91:80:FB:31
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6c:af:47:60:07:ff:f4:d4:53:2f:27:6d:6f:6f:26:c9:b1:
70:4c:28:42:02:88:34:ac:fe:b7:32:4a:a0:0d:b8:f3:c4:c7:
bb:3a:bf:f3:85:6a:5f:91:a3:de:76:0a:41:07:94:6a:92:3b:
fe:66:45:5a:45:16:ab:4f:ce:23:56:29:ca:01:bb:67:dd:f5:
07:50:ff:80:33:03:bc:67:77:12:e9:98:00:ba:59:5f:45:41:
55:69:6e:67:f4:f1:28:0d:ae:39:87:6c:42:b2:d3:99:d1:65:
8d:c2:54:72:df:a8:ea:87:32:55:f1:e5:ae:bf:d5:b8:2b:46:
9a:04:2e:73:50:ae:b0:5e:84:a4:f4:68:06:ff:30:8d:c9:89:
ab:2e:f1:a2:22:16:1b:e0:77:8c:05:c7:a9:e9:61:31:61:35:
a9:f9:10:d7:7d:88:84:d7:c0:b9:16:04:70:30:32:9a:3e:de:
fd:41:c6:da:b9:40:17:93:0a:2b:2a:02:b2:86:5f:72:c5:1a:
28:12:4e:e1:67:b3:3a:5c:73:62:8c:fc:3d:4b:5d:c0:95:00:
0b:2a:c8:42:34:39:12:cb:b0:2f:f9:39:94:f6:89:e9:06:08:
f2:f6:b9:02:ec:76:2f:d2:77:1f:d9:30:08:bb:c1:72:1b:16:
97:d7:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:24:52 2025 by rpki-client