Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: VcwzWloFKmDJGY8zSIPOniDwGPke2a51UJ1i95jQZV4=
Subject key identifier: FB:F9:F1:54:C6:3E:3D:8B:80:6A:6F:DF:86:8A:B8:D3:F8:26:8E:12
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0197586D8FD88E35144F1484A6650E93B8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 06:01:04 +0000
Manifest this update: Tue 10 Jun 2025 06:01:04 +0000
Manifest next update: Wed 11 Jun 2025 06:01:04 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: Q2jnh+3K0tAx8SvBLhKCgRomxblPV3xoOlnV7sfN8zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:8f:d8:8e:35:14:4f:14:84:a6:65:0e:93:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jun 10 06:01:04 2025 GMT
Not After : Jun 11 06:01:04 2025 GMT
Subject: CN=fbf9f154c63e3d8b806a6fdf868ab8d3f8268e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:7f:27:d6:5e:fa:71:ee:4e:4e:25:f0:9b:
5e:70:9a:4f:3b:c8:01:35:64:4a:0f:60:21:b9:7a:
33:83:37:14:4a:3b:4d:b5:88:31:eb:8b:f5:26:5e:
a5:2e:81:4b:2f:82:c4:42:cc:84:f2:ec:67:e0:3a:
7c:bb:ea:3f:51:a9:94:31:c7:14:15:c7:77:09:0e:
8d:02:cb:a1:a8:70:0d:24:2c:7f:14:56:64:b5:ed:
01:ad:33:1b:5f:ad:f7:43:65:5a:2e:a9:f6:1f:15:
4b:1c:51:93:0a:5e:b1:4c:fd:e1:ec:4c:ae:87:13:
4a:f9:6e:b4:14:fe:d6:c2:c9:e2:f9:ae:a5:bf:e9:
90:36:06:49:7f:85:a4:90:48:53:03:67:1e:77:d6:
da:7e:e6:06:2b:12:ae:b8:39:19:9e:36:64:f0:4d:
c9:d3:4e:99:15:59:5d:97:83:36:92:b9:b6:44:87:
bb:db:21:f7:52:6b:36:0a:f3:06:cc:a3:b2:66:19:
bd:09:78:66:c3:3e:7b:fa:0e:d5:73:75:ee:42:b9:
7e:7b:3b:61:12:a3:b8:a5:fc:03:a0:31:ec:40:70:
88:4d:2c:5d:d3:9c:6f:39:42:e6:5f:ec:21:48:1b:
d6:cc:e3:42:6e:10:a2:4f:07:e6:97:aa:07:f9:56:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:F1:54:C6:3E:3D:8B:80:6A:6F:DF:86:8A:B8:D3:F8:26:8E:12
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d0:04:0e:b6:d9:29:d4:00:34:cc:c8:ab:8b:af:56:f8:79:
36:0b:6f:c6:bb:cc:2e:b1:cb:dc:d0:81:15:05:14:3f:a8:99:
45:01:63:b2:63:7e:83:5e:2d:cb:9a:69:40:cd:66:75:11:54:
38:fc:de:cf:3d:8f:ab:ec:a2:c9:8b:6a:9f:21:c4:54:a3:e3:
3f:65:72:85:a7:6f:82:3c:a6:98:ec:b9:a3:6c:a0:42:db:5a:
71:b4:8e:48:cd:22:9f:73:7e:82:b7:ce:f7:fc:7e:57:33:e5:
2b:5d:ee:14:9b:bc:fb:20:47:27:96:cd:f4:66:a7:1d:62:c6:
81:38:f0:c2:65:5e:a5:29:1e:b6:f3:e1:e7:2e:c9:45:9c:6f:
92:6b:28:70:81:32:ef:09:d7:b2:b3:30:93:7e:7f:77:8a:65:
cb:e9:81:75:6d:0a:74:5b:76:97:ae:b7:ba:9c:19:30:0e:02:
93:22:e9:db:99:99:aa:f8:1c:ed:24:ef:d1:df:f0:83:40:61:
a2:ae:68:70:82:03:b2:9e:3f:5f:a2:4d:87:35:43:d9:52:66:
94:26:be:f6:ed:e0:ab:df:53:0f:99:9e:75:99:42:9e:e7:ea:
e3:21:a4:f7:3e:e7:91:07:08:2d:32:3e:b7:85:1d:94:d6:66:
28:ad:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:26 2025 by rpki-client