Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: BG/WJawBIjx3gr5+/h/dAUYPkiYixb6a+0uH3IHv9fw=
Subject key identifier: 8E:E5:74:5E:2B:AB:96:5C:DF:05:73:FD:6D:34:DA:A5:6A:42:87:4B
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 019A72259E60C3B6F772802EEA894A8508A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 068B
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: n3CKrIWTCtNpeQcmGNB7mwXJkZN+LVujPhdcb6L4wbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9e:60:c3:b6:f7:72:80:2e:ea:89:4a:85:08:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=8ee5745e2bab965cdf0573fd6d34daa56a42874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:53:a3:90:f1:6f:76:a9:67:72:ce:2a:9f:
33:61:82:60:f5:25:c1:5f:dc:ec:56:13:8f:05:ec:
b1:25:41:51:4e:52:d5:06:63:47:19:96:72:39:f1:
a0:9d:b3:7d:e5:41:37:ae:a8:8d:e2:7c:af:36:88:
6e:ac:f9:10:f7:0b:9a:d9:45:7c:20:64:e8:14:ec:
f7:80:2c:08:3b:9e:b8:fa:1e:df:17:f8:52:57:66:
81:22:19:a0:ce:7a:b2:ed:c3:20:b5:cc:95:4b:03:
a7:b1:a7:51:9e:a8:f6:e9:a5:1f:6b:2d:22:ba:c1:
00:a9:52:12:3c:6b:d3:24:59:6a:96:50:11:3a:dc:
57:a9:5a:aa:9f:c5:c2:28:3a:91:19:5d:6c:e3:8b:
5f:c0:a3:9e:b6:50:47:ff:a7:ec:68:b7:da:13:a8:
66:31:17:b8:41:f0:64:5e:ee:14:25:c8:69:0b:d5:
7e:5b:c6:fd:8b:67:28:72:fc:57:82:3e:04:10:f2:
37:c2:3e:ca:e7:e3:d3:0b:24:8d:a1:53:40:bd:f6:
a8:33:bf:7f:70:d6:93:11:f2:f1:cd:6a:49:f4:51:
db:cd:c1:62:dd:12:6d:37:96:bb:0d:b0:83:ec:15:
66:df:f1:e4:c1:6b:43:26:96:43:ea:b2:6e:60:16:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:74:5E:2B:AB:96:5C:DF:05:73:FD:6D:34:DA:A5:6A:42:87:4B
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:2e:b8:45:83:14:94:6c:49:82:65:9d:db:54:4a:2c:86:
77:0b:d4:4c:58:54:2a:67:18:7c:a8:33:1b:b8:99:aa:70:11:
89:2e:21:c6:75:2b:78:26:03:81:a6:e7:02:17:c5:82:b7:84:
e8:86:11:6f:6f:b3:00:ad:56:30:8e:d3:77:e2:ce:64:4e:45:
ee:4c:47:33:d4:79:da:63:50:be:d8:9f:cb:44:20:b9:d7:26:
89:b9:a7:3d:0b:65:3c:cb:77:e1:9b:c5:f5:3c:d7:1c:a5:be:
13:a6:21:75:03:0c:ee:f4:db:aa:c2:4d:3b:0d:90:48:ca:e0:
c3:9d:78:20:7f:c9:71:e3:c2:bd:5e:58:df:1b:b5:52:02:37:
8d:0f:3e:b3:63:eb:98:ef:7b:e6:b8:da:cd:26:25:7b:d6:c5:
39:1b:14:31:87:94:78:2c:73:ac:67:60:8f:03:42:f6:48:aa:
c4:47:34:14:a8:ba:98:25:72:a2:f7:1b:cd:d9:22:b4:85:26:
08:2e:95:19:f7:25:44:d9:27:ba:71:f2:49:7a:d0:66:14:99:
48:c2:2d:57:ed:d3:00:d3:de:ea:9e:21:21:e6:89:59:51:07:
49:07:62:1b:37:64:b4:26:7a:d6:9f:6e:81:3c:6f:24:1f:50:
71:bc:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:10 2025 by rpki-client