Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: 10fysIzkk+iBswviL6UMcQofoMRXTF+TCrX/sSIjYBc=
Subject key identifier: 87:8C:40:78:5A:77:A1:1F:76:FC:5A:12:B8:9B:15:C7:19:34:13:10
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 0199239FB1E9404E775F50E41BD98E311B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 068D
Signing time: Sun 07 Sep 2025 10:01:32 +0000
Manifest this update: Sun 07 Sep 2025 10:01:32 +0000
Manifest next update: Mon 08 Sep 2025 10:01:32 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: CVGJmlZ99lFLcu5XHqca2Ph7DsYeZHGvdB3I5gMdIcQ=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b1:e9:40:4e:77:5f:50:e4:1b:d9:8e:31:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Sep 7 10:01:32 2025 GMT
Not After : Sep 8 10:01:32 2025 GMT
Subject: CN=878c40785a77a11f76fc5a12b89b15c719341310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:3d:f8:c4:20:4d:08:7b:c2:82:71:c6:7a:
36:40:69:f6:41:a1:df:65:80:bb:35:ea:ba:e3:26:
ae:32:c4:98:0e:82:d6:1a:a7:63:dc:34:c7:db:7c:
53:16:10:6c:ff:b3:31:ef:a4:a8:c3:86:b4:04:c3:
a3:b2:86:95:55:bb:d3:d0:49:4e:8f:00:64:62:61:
e5:15:6b:ef:c5:3c:a3:6e:72:5c:f9:3d:e8:b1:7a:
7a:56:5d:dd:ab:4a:9c:1a:63:1e:c0:f5:5d:62:2d:
58:37:4e:82:5f:5c:1a:a4:d2:ab:7e:5b:88:df:73:
b3:e2:2f:3e:13:fd:d9:9e:79:47:97:46:d9:02:24:
27:41:b3:2b:35:b2:73:ac:2f:8d:1a:b2:97:9e:6d:
c3:da:98:44:59:5d:5e:33:04:1e:e9:3c:aa:a2:c0:
2f:e9:4d:dd:2f:8d:41:93:3b:f7:50:8e:6a:47:cc:
72:51:81:74:7e:de:4f:ee:29:d3:82:7a:3a:d7:0e:
7c:82:dd:e0:73:26:21:5f:ec:ad:fb:72:f1:13:a3:
21:14:88:85:8b:8e:da:f3:b6:5b:d1:32:46:df:53:
62:9d:8b:a4:e5:f3:a1:43:88:71:da:7b:41:d1:02:
4d:1c:83:f5:de:83:8e:1b:2d:0c:a3:72:5f:94:8f:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:40:78:5A:77:A1:1F:76:FC:5A:12:B8:9B:15:C7:19:34:13:10
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:33:65:05:a7:e8:78:42:70:31:14:00:2a:f5:e5:3b:ce:
08:5a:9e:9a:48:60:06:6d:75:03:9d:06:34:02:64:e4:1b:d8:
46:9e:55:2f:2f:ed:eb:b9:21:68:75:16:b2:9a:8f:dd:36:30:
ce:8d:85:84:84:2d:fd:98:ff:ff:84:b7:22:ec:0c:ff:14:43:
ef:a0:10:d5:5d:10:bc:d5:8a:a4:fa:63:be:4a:6c:ab:fd:7e:
ee:36:dd:55:15:70:c2:2e:e9:1b:9f:23:fe:6e:88:14:55:91:
0d:2a:db:bd:34:c7:fc:d7:dc:fd:fa:77:31:38:6b:81:f1:0e:
01:68:27:25:df:f8:21:3a:bb:29:eb:b8:6d:58:42:21:fb:ec:
36:f7:05:f1:47:d9:1b:2f:5f:93:64:4a:02:59:55:42:0f:f7:
60:34:d2:8c:34:96:3b:88:c1:50:20:40:56:1c:81:19:33:23:
5c:10:48:82:33:03:9a:52:b9:11:05:de:c2:82:1c:f5:d2:ab:
30:74:43:f5:24:0a:df:e3:97:d1:b7:73:1a:a6:94:cc:d1:01:
9f:3b:5e:87:ff:50:67:f1:88:39:bf:a6:2c:3d:9b:ff:39:bb:
3f:38:db:42:54:d6:5d:32:e4:85:3b:7e:6f:fe:9e:47:36:15:
bf:66:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:59 2025 by rpki-client