Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: oKTGis9y5yBcb93rokfNOksRYfvIEgJYpR2KuOEsFDA=
Subject key identifier: D1:5E:5B:57:FE:94:F9:D2:89:26:A4:8B:3A:C8:09:F6:76:23:3C:7B
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01993380821865D996C57AEF31A41A5CA4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 12:01:23 +0000
Manifest this update: Wed 10 Sep 2025 12:01:23 +0000
Manifest next update: Thu 11 Sep 2025 12:01:23 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: n2uU1bURMqbBopT0hrKMnE4BsyXh9Lj7SaVHhLHFUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:82:18:65:d9:96:c5:7a:ef:31:a4:1a:5c:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Sep 10 12:01:23 2025 GMT
Not After : Sep 11 12:01:23 2025 GMT
Subject: CN=d15e5b57fe94f9d28926a48b3ac809f676233c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:bf:2e:f8:98:3a:0b:b8:e4:72:79:d7:4e:
d3:f0:de:02:ba:12:56:a8:d3:a8:f1:9d:96:2e:80:
b3:75:47:cf:3c:d7:f5:56:25:f9:43:58:07:dd:b2:
0b:15:97:c1:9a:66:bd:1f:be:28:77:97:dc:9a:56:
7d:e4:f6:7d:a6:3d:19:fc:b2:3b:63:d1:a1:33:44:
6f:23:68:de:c0:2d:00:df:9e:68:1c:84:73:6a:c3:
71:30:71:5e:5f:02:1d:b9:66:19:fd:00:ef:fe:cf:
f5:34:03:bc:2c:49:9d:90:c9:ad:bd:6e:85:c2:1d:
b2:c5:77:03:db:b8:2a:af:ab:4d:78:39:e2:15:8f:
31:11:06:de:54:89:5b:89:82:c0:45:29:f6:21:e6:
d6:4d:d9:02:0e:e0:19:8f:be:b9:89:19:0a:76:8a:
09:c7:89:14:06:48:8b:57:30:33:a7:c3:7a:41:ce:
31:64:88:75:d0:64:10:d0:0f:09:1b:aa:ec:ed:a7:
fe:10:45:89:cd:1e:d5:c1:ce:f4:8c:f8:57:1f:1b:
1c:1f:01:20:e6:69:16:78:c7:b0:54:db:65:8c:14:
88:bb:84:c9:dd:a5:26:02:57:0c:0c:64:82:18:26:
bb:1e:17:09:ae:2b:13:18:f4:96:64:48:c1:6f:60:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:5B:57:FE:94:F9:D2:89:26:A4:8B:3A:C8:09:F6:76:23:3C:7B
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:85:85:c8:93:50:37:35:9c:0c:77:3c:3b:3d:b3:94:02:
2b:50:10:70:63:44:3f:10:73:9b:43:3c:e5:53:f1:da:dc:b8:
76:e8:f0:6b:36:b1:aa:30:6f:fb:3a:d4:cb:5f:48:c1:5c:dd:
59:f8:ac:3d:0e:69:d4:0a:21:f2:89:00:77:48:1e:fb:d0:24:
bd:e0:06:15:5d:cc:54:b6:d6:5e:61:6d:3c:c3:d2:20:fc:d6:
15:bd:46:20:ae:8d:60:38:07:d7:7b:9e:d7:74:79:a3:e0:08:
12:8a:9e:f2:9e:12:4a:ac:e0:88:5f:02:c4:0c:bc:ac:b5:ce:
9d:b1:d5:04:8b:64:6d:2f:d0:0f:60:77:aa:0f:0c:9c:d9:7b:
d2:5e:f9:21:05:88:19:fd:83:64:ec:eb:3c:aa:16:c0:84:aa:
6c:79:1f:4d:26:c9:35:fd:b7:85:fb:62:fb:71:08:04:18:85:
59:59:8c:cb:5f:a7:b8:82:5f:f9:9b:32:60:90:50:c6:af:e8:
20:09:99:1d:1b:23:20:e5:d8:b9:dd:36:81:ed:c5:3f:cf:60:
18:43:9c:57:03:e2:21:d3:11:6a:32:94:d6:5d:47:cb:3c:2d:
15:3c:7f:19:72:6a:ce:fc:49:25:20:a5:45:3e:3b:d0:25:a4:
cb:6a:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:00:44 2025 by rpki-client