Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: tgkb+mjHT/OJpJu0Qv6Zf05PZm3p3fojFAwELeXa55w=
Subject key identifier: F6:5A:A7:BB:44:86:17:E5:F2:DD:42:83:F3:FE:C6:15:A6:8A:25:53
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019A7225AE267805E0145FA1ACD1ACD2B344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 11E0
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: HNf/NJcmVmCQ3KJuhouXt0bYsffpdii971KNzTiAkfA=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ae:26:78:05:e0:14:5f:a1:ac:d1:ac:d2:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=f65aa7bb448617e5f2dd4283f3fec615a68a2553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:50:19:ec:4a:9c:32:1f:18:4a:4f:c6:56:
51:ed:1e:09:09:21:45:10:f5:18:f3:1a:9d:30:b4:
65:4c:5c:31:6c:37:3b:91:9f:d8:58:a5:88:fe:47:
2e:57:22:db:23:aa:e7:0e:09:fa:0c:e8:25:15:a3:
7a:93:3c:51:ac:ac:c6:2b:81:91:e6:0b:9e:d2:c0:
f6:1e:cb:d8:04:bf:44:91:46:5a:fe:45:05:d1:42:
82:da:0d:e5:4b:72:e5:7a:0e:4b:4d:ed:33:b0:82:
cb:15:d4:8a:b8:00:cd:3c:4c:83:b0:e4:25:e2:76:
71:a5:4b:b8:1b:91:86:78:c5:67:56:b0:17:68:e8:
6d:93:49:91:d4:14:d2:fc:2b:aa:89:14:9a:ea:9f:
dc:57:9b:95:33:fe:f1:a2:5c:50:33:2c:6b:2b:78:
f9:7e:27:d4:a6:bd:88:38:51:6a:d4:c8:52:e1:86:
45:ea:62:3e:03:23:d5:d1:07:07:2d:87:76:d2:a1:
2b:28:58:bb:5d:d4:62:a2:e9:bc:6f:4c:39:09:af:
74:fb:33:6a:2f:01:1d:8b:70:51:90:9c:5b:f0:11:
43:d8:e2:91:18:64:be:14:0d:c6:7a:a3:6e:3b:01:
12:a5:82:a4:65:6a:18:f1:ec:d7:dd:5b:65:9c:4f:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:A7:BB:44:86:17:E5:F2:DD:42:83:F3:FE:C6:15:A6:8A:25:53
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:1d:96:77:b5:dd:63:77:eb:4c:8b:1c:40:b3:06:27:4c:
b2:2a:4e:fe:db:72:75:04:e9:c5:17:f0:a7:76:cb:66:62:f9:
75:64:2a:79:25:91:64:02:03:3c:a1:6e:a4:5c:1e:96:73:ab:
53:80:c5:d4:f5:26:e4:8e:03:6d:bf:64:9d:a6:1c:f1:fe:e8:
22:66:f1:95:03:57:43:81:e3:cb:a5:94:8c:1f:1f:fa:e7:f5:
6e:7d:fe:23:18:b7:3c:02:2e:60:42:5b:36:20:1f:a7:89:05:
7a:32:db:97:7e:47:c8:ef:59:e4:d6:6b:c0:75:e3:6a:5b:d0:
ef:e7:4a:39:ba:66:2d:96:c6:04:26:10:2d:5f:73:b1:48:55:
bf:65:0a:58:c1:66:a6:e8:14:d5:6d:c9:74:53:7b:f3:fa:03:
59:ac:42:c8:b8:cd:54:54:dd:74:8f:42:48:d8:84:42:14:74:
3a:b2:04:3e:74:9c:64:86:28:05:63:c0:06:e8:0e:dc:c3:55:
50:4b:a0:03:56:66:38:8a:0f:6e:2a:f9:4e:2c:cc:f4:f9:b4:
d3:a5:86:e2:83:14:43:77:94:b3:93:80:8c:c0:15:c6:da:86:
87:ff:76:a4:13:0e:c1:98:03:09:10:28:6b:d4:36:26:1b:71:
1f:0d:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:07 2025 by rpki-client