Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: 2JotrASOZROi7lS+0Ut0OMQPSj6IpKBbr5JrgM/vksI=
Subject key identifier: FB:BE:07:15:FD:23:11:43:BE:EE:C1:51:19:C9:EB:A7:B8:1E:B5:54
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019A71B8CAAAF934544420567B03A5FC0526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 14DD
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: 2O7HYSCeobyuLvaYhrHb0PBWCLHsL6ysgOCArQGuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:aa:f9:34:54:44:20:56:7b:03:a5:fc:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=fbbe0715fd231143beeec15119c9eba7b81eb554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:5c:75:f8:e0:f1:80:5a:6e:f0:22:3a:df:
e9:01:3d:10:0b:9c:1b:cf:01:fe:e5:e1:59:20:96:
ac:db:fd:4c:9c:11:db:83:1c:6d:38:8e:27:b8:73:
3e:61:bd:0b:b0:3d:c4:32:ae:da:94:64:74:cd:a1:
54:2c:9a:77:0e:f3:4e:e1:bd:85:91:d5:ff:13:a0:
18:ac:08:5e:48:8e:6e:f8:5e:75:24:6a:97:c7:75:
ea:ee:36:b9:0f:f4:98:8e:ea:cf:8b:c1:5f:67:67:
11:6d:67:33:ee:1a:b3:0a:39:0a:d5:9d:dc:60:b6:
ec:e2:44:f2:d5:1e:b6:0b:e5:90:bd:92:2b:3e:e9:
9c:8a:87:35:c1:2c:3c:4a:dd:7e:3a:76:66:b9:c1:
98:37:27:7d:fe:4e:1f:46:c3:a1:02:79:ed:4c:b3:
6a:7b:ec:8d:75:1c:3e:0f:b1:d4:0e:8a:2a:7b:a8:
2a:be:1b:4a:5a:27:99:c7:d1:40:bf:05:ce:7f:89:
f8:04:b5:25:e9:68:73:6c:b6:43:cc:ed:c3:88:36:
de:ee:ec:f1:f5:71:c6:9b:d9:98:fd:4d:0f:11:a5:
77:b6:2f:a0:1e:0d:cd:ce:0e:6c:5f:85:3c:d1:09:
5a:01:a3:9e:ef:66:91:30:1a:53:20:73:87:bc:58:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:07:15:FD:23:11:43:BE:EE:C1:51:19:C9:EB:A7:B8:1E:B5:54
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:8a:9f:66:1d:92:32:6c:46:5f:c7:55:47:d2:8f:ed:48:
09:95:d9:88:40:37:12:7d:db:45:a6:31:35:51:82:3e:93:6c:
cc:50:b6:30:86:e7:3d:20:62:2d:15:e9:d7:0a:14:d4:db:fa:
6e:71:8c:63:e9:ff:4c:de:42:97:d6:e7:e1:27:66:90:64:5a:
e1:44:c3:b0:63:3d:75:88:08:42:da:b9:57:81:57:3d:49:57:
8a:63:87:53:d8:1c:d5:e9:19:e2:40:f3:a5:3c:35:44:8c:85:
a6:57:a3:d3:b7:17:9e:a5:4b:ac:f2:c9:fc:a5:78:42:4b:b1:
c2:84:e3:ed:5c:f8:1a:49:46:6a:df:d4:21:45:50:d9:b1:19:
80:93:50:0b:45:6a:58:86:9a:7c:4d:9f:b4:92:ec:4b:d0:e0:
ec:06:a2:4c:cc:96:8d:87:aa:5e:67:c5:fb:ae:2c:25:8d:7f:
1f:49:86:e2:90:3b:85:6c:c9:97:6b:6d:04:e0:61:76:ff:5b:
99:35:84:16:c2:a6:2a:4c:97:db:7d:ee:33:a6:cd:23:74:8f:
26:64:45:61:02:a8:a3:84:79:50:7e:19:aa:51:b9:94:b2:23:
49:7c:7a:16:82:b4:9f:23:d9:51:a5:b0:8e:b1:a1:af:e3:bb:
f0:7a:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client