Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: 6qkIhZKHUrqrNd3rwGzeEDwIg1TTMH/B2946gs2pmOo=
Subject key identifier: 23:66:E3:16:81:5E:A8:0A:C2:6A:98:B5:9B:55:F7:5A:4A:DE:FD:6D
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019849D2EE192ACC336D2C8A884D31B40C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 10C2
Signing time: Sun 27 Jul 2025 03:00:16 +0000
Manifest this update: Sun 27 Jul 2025 03:00:16 +0000
Manifest next update: Mon 28 Jul 2025 03:00:16 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: 4GMwLggP/CrAbyKjdtE6mdD7da6sEr/ZxHgc5/u44g8=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ee:19:2a:cc:33:6d:2c:8a:88:4d:31:b4:0c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Jul 27 03:00:16 2025 GMT
Not After : Jul 28 03:00:16 2025 GMT
Subject: CN=2366e316815ea80ac26a98b59b55f75a4adefd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:4c:44:20:98:a2:27:a3:04:33:f9:9c:b0:
1b:ad:ad:e7:ad:6c:ff:da:3d:37:1c:30:d0:df:ee:
0a:2e:42:9b:ea:fe:a2:43:b3:5c:75:bf:da:88:4a:
15:88:3c:e5:4f:75:60:85:09:df:8c:1a:04:a9:00:
8f:e6:9f:00:4b:9e:56:d3:b7:10:13:6f:e3:e7:5c:
b2:39:71:68:49:e1:f2:a2:08:e4:66:d8:fb:d0:47:
2f:1c:fe:81:81:92:03:05:bc:83:74:77:f9:15:e9:
62:83:9c:97:7f:56:49:9c:3e:3f:d3:0c:5c:6a:16:
b9:7c:80:88:8a:6d:3f:93:7e:57:40:e1:b4:8f:7a:
17:7e:24:28:05:b7:fa:64:93:18:31:80:69:25:19:
4b:2b:f6:16:6b:43:c0:4b:71:ae:9c:a4:52:df:40:
cc:ff:7f:e4:c6:ba:81:31:7d:9b:f4:66:aa:ae:d7:
93:40:1c:9e:26:d7:7a:0e:e9:60:09:cc:dd:6c:27:
1a:e1:d6:c8:5f:d3:42:c6:b2:90:7c:52:ab:81:5d:
3e:c3:ba:d1:78:af:a0:8e:8b:1f:8c:44:aa:9e:6a:
34:80:76:f2:45:b1:cf:97:81:e2:bb:7b:4a:02:87:
2a:10:c3:05:a2:25:d9:b8:7b:ad:40:d6:ff:45:f1:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:E3:16:81:5E:A8:0A:C2:6A:98:B5:9B:55:F7:5A:4A:DE:FD:6D
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:77:85:97:aa:0c:89:93:ae:2a:2b:c2:2b:c0:58:e2:a6:
1d:5d:0d:e4:23:11:64:3b:79:97:8a:0e:27:d8:00:cd:1c:22:
9c:59:3a:24:69:2f:82:31:f4:e8:54:03:d7:a2:66:74:d5:f5:
dc:a5:75:24:c4:b0:02:3e:85:b7:f9:43:8b:a8:bd:2e:c3:08:
a2:cf:70:64:ec:b2:a1:41:b8:a1:50:0f:38:2b:ce:5a:51:54:
09:37:84:8f:95:3f:60:b3:27:3f:c6:53:d2:2a:22:24:c7:c1:
39:c7:ed:49:45:c4:cb:18:f4:e7:7f:89:4b:99:5e:7b:cb:5d:
5b:10:79:c1:ce:a4:0d:44:ca:4c:51:92:d2:1c:d9:19:2e:e5:
ae:45:61:34:5f:fe:4f:a4:56:a0:d9:53:cc:0d:7b:c1:4d:8a:
ff:55:bc:29:56:8a:d8:f4:4e:4a:84:ed:5d:68:d6:24:9e:b8:
85:90:d8:9e:8d:9e:f1:61:a7:1b:7d:c7:13:f8:0d:46:34:f0:
8d:8e:3e:e3:49:fa:e1:5e:b3:63:91:07:4e:33:84:64:c5:90:
98:a1:6e:8c:4f:01:de:41:63:ff:0e:22:6d:60:a3:d6:eb:7d:
ba:31:99:63:d5:86:8f:d6:66:67:3a:91:f0:15:b4:49:24:cd:
2c:90:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:32 2025 by rpki-client