Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: T2Ehm03oE+k9mld5H4fzbYYVBkpUsc5PR6MVDAHm0hs=
Subject key identifier: D0:33:52:19:FB:E8:8D:D7:28:34:96:6C:D7:73:A5:F9:48:3E:F0:EA
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 01984777D5DEBA46D1B9E8ABCF195B7630F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 13BE
Signing time: Sat 26 Jul 2025 16:01:32 +0000
Manifest this update: Sat 26 Jul 2025 16:01:32 +0000
Manifest next update: Sun 27 Jul 2025 16:01:32 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: h3cHncVxieXONguuq8FJ0VWS+G/y0f1Hick7c4OiMzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:d5:de:ba:46:d1:b9:e8:ab:cf:19:5b:76:30:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Jul 26 16:01:32 2025 GMT
Not After : Jul 27 16:01:32 2025 GMT
Subject: CN=d0335219fbe88dd72834966cd773a5f9483ef0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:6c:f1:87:cf:fd:06:9d:17:7a:86:06:63:
a6:3c:38:33:1c:97:84:a8:72:24:7f:e2:58:1f:f2:
53:d9:03:0b:2c:9a:67:cd:0a:d1:0f:58:f1:40:a5:
2e:88:76:99:c3:a0:8e:f0:14:9a:f0:81:28:e2:d4:
57:35:81:ea:43:62:7a:f0:f0:62:ce:95:23:e4:10:
94:56:d7:ac:cf:9b:2d:a6:97:0a:12:24:89:e0:a6:
8b:53:6e:3f:a9:41:c5:ed:ef:05:c0:ac:5a:24:d3:
24:6f:81:ca:60:15:44:3a:45:1c:f5:ab:64:6f:15:
54:78:9a:e0:da:3d:e6:98:6f:ed:51:3b:e4:84:db:
87:79:1d:c0:a3:25:01:1b:a4:96:3f:f5:af:cf:3c:
fa:2a:b4:45:65:bc:9e:c5:e6:20:0d:03:eb:4a:a1:
4c:50:cd:52:9b:94:b9:f6:66:b9:40:03:e3:86:d0:
4c:7f:ae:25:2f:41:c9:23:66:da:90:8d:d6:fe:8b:
48:31:6d:89:f1:bf:fb:da:6c:c1:8e:fc:bd:1a:82:
1e:5b:0a:65:ce:c9:ba:05:da:b0:fd:54:07:e5:e4:
2b:60:b2:b5:1c:c3:40:97:1a:15:e1:a1:b3:58:d5:
85:30:f8:8e:3a:4a:3f:f2:fd:f0:b7:66:98:4b:22:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:33:52:19:FB:E8:8D:D7:28:34:96:6C:D7:73:A5:F9:48:3E:F0:EA
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a1:ff:4e:3a:17:8a:39:d1:9b:61:21:fc:e3:26:d1:fc:b0:
a8:1b:f7:e8:9a:4f:6f:04:1c:76:4e:45:7c:55:0a:c3:72:9e:
44:e7:cb:c6:24:79:77:32:04:18:ea:b0:15:46:49:24:c3:9a:
b1:bd:df:8a:7a:3f:17:97:87:57:5a:82:b3:22:10:25:16:c5:
26:d7:1f:69:19:67:aa:9b:5a:71:6a:5c:fd:b6:7d:25:e9:a4:
e9:be:e9:20:1f:cf:66:1e:e6:ba:dc:1f:58:10:26:08:d8:5d:
96:78:ce:8c:da:74:9b:4c:3f:5c:3b:ca:65:72:6c:a1:8f:cc:
59:f2:ec:3f:34:02:de:c9:3d:f6:4b:bd:f4:0a:2c:4e:02:a3:
f4:6b:c9:d5:cc:8a:dc:81:1b:93:5c:84:cf:26:2c:78:bc:b7:
6d:16:87:0f:20:5b:f2:64:be:43:02:9e:9e:b5:61:c3:ac:55:
d6:73:2d:6d:20:f4:f3:ab:7a:d6:45:11:20:56:bb:3e:e9:c5:
3f:e8:88:fa:82:e7:8b:cd:7a:2a:ed:98:16:7d:f5:75:3f:06:
24:d9:23:5b:6a:d2:81:55:f8:63:f5:41:ac:68:23:b8:a4:c7:
52:d4:95:1b:cb:02:e0:5c:03:e1:60:69:86:98:55:fd:94:f8:
c0:09:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:22 2025 by rpki-client