Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: x4ezAPoCmaI/EL070VxZrJedACp5IOZgGSfJWhfxw9I=
Subject key identifier: 23:A2:7D:E2:3D:F2:AD:C9:D2:33:49:F8:32:77:25:1E:49:8A:FD:1E
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019A24E5E374BFED0DF970B4FFE4377D90D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 09:00:36 +0000
Manifest this update: Mon 27 Oct 2025 09:00:36 +0000
Manifest next update: Tue 28 Oct 2025 09:00:36 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: ZrIv1huL2ye1ai614GSa/7wMSC2IvUS/pJxc7iS6d3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:e3:74:bf:ed:0d:f9:70:b4:ff:e4:37:7d:90:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Oct 27 09:00:36 2025 GMT
Not After : Oct 28 09:00:36 2025 GMT
Subject: CN=23a27de23df2adc9d23349f83277251e498afd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:94:c6:40:bd:5e:d2:c3:0b:e5:57:a6:82:
0a:3b:a2:6e:d0:a2:90:e3:56:ba:3b:65:d5:e4:98:
54:c1:91:6b:e5:97:5d:0a:44:a9:11:86:5c:07:52:
8b:ea:7f:eb:51:ad:e8:4c:96:81:61:df:13:57:24:
0b:aa:7e:ac:0e:98:79:c9:ac:8c:b8:15:58:5e:93:
e9:1b:e6:2c:38:73:41:4c:27:a1:5a:90:ad:f6:fd:
4f:a8:bd:74:d6:d3:bd:5b:d9:88:11:27:88:36:ba:
bd:92:ed:b7:92:0e:67:89:64:e2:9a:e7:af:58:a2:
cb:43:1c:9a:a6:55:a0:60:73:19:13:b7:49:3f:ea:
15:5b:3d:c9:6d:8a:74:06:11:09:0f:5c:0a:13:96:
f7:c2:cd:b0:8f:05:cf:2e:f2:d1:bf:7c:c0:7f:f5:
3a:5a:d1:e1:b6:c1:dd:73:17:b1:ae:f8:56:2f:96:
96:cc:29:56:8b:8a:bd:28:6d:ec:02:77:05:47:40:
14:74:36:ea:da:eb:17:9d:88:1d:21:78:8b:c5:28:
1f:92:e6:b4:3f:ea:43:df:29:76:54:60:16:b9:2d:
14:cf:c2:81:57:83:f5:eb:d1:a0:92:9c:9b:f3:23:
9e:1f:91:ce:f5:d9:ec:73:01:4b:cc:fe:9d:ab:2c:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:7D:E2:3D:F2:AD:C9:D2:33:49:F8:32:77:25:1E:49:8A:FD:1E
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4a:6d:f3:5a:64:2e:62:ea:4f:23:be:55:08:01:14:21:75:
d8:fc:57:3f:7a:19:d2:c5:43:9f:a7:7d:a4:61:36:c6:b8:78:
db:6b:5d:bb:e7:4f:bf:c7:e1:25:1f:19:87:e0:fe:0b:aa:61:
73:b3:84:eb:a6:34:f6:a8:11:a2:4f:1f:ae:b5:21:a7:be:73:
3f:83:9f:e2:65:e2:4a:e4:64:92:df:e6:ad:b9:17:ff:26:ee:
68:da:e2:2d:4e:23:5e:62:f6:cd:7a:85:34:97:b1:d2:ee:17:
83:3d:fb:2b:ed:90:56:7b:22:04:dd:50:48:7b:ab:46:20:2e:
b7:53:e0:dd:14:19:aa:bb:79:84:d6:a8:c8:96:ad:56:1a:9c:
e3:22:95:32:7d:e9:a8:3d:0e:dc:b5:33:dd:3d:f8:ac:71:68:
a4:42:e1:a8:c2:c6:73:48:98:a2:4c:ba:8b:dc:2e:4a:f6:bf:
95:46:7a:94:f7:59:6f:b9:37:68:4e:a3:70:db:c5:3d:6f:42:
26:35:83:de:1d:57:91:d5:cb:ae:66:79:a2:f0:ff:03:82:2f:
3c:88:6e:dd:cc:83:13:b4:06:80:8e:20:e4:80:03:b6:c3:b4:
77:66:19:12:b6:0c:83:75:10:4f:6b:f9:48:52:5b:f0:e2:b3:
f7:e9:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:19 2025 by rpki-client