Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: WBxB0TCgOq76nPvswBryI5RJzDgh6RFIuSnLGhJk8K0=
Subject key identifier: 4B:D9:C7:7F:43:52:D0:DD:4F:39:59:A2:72:DC:B8:2E:4D:62:68:83
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 0199221E6C59669EBEAAFADE47A9814EE152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 05DD
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: MvAgqX6P44O+BJiuCMq9NoYRSy+/MkDZ8lG5J8q/m+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6c:59:66:9e:be:aa:fa:de:47:a9:81:4e:e1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=4bd9c77f4352d0dd4f3959a272dcb82e4d626883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:36:46:42:65:7e:53:3a:ee:b7:f7:76:f4:
41:34:2c:71:fc:87:d8:94:97:1f:f1:17:30:8e:90:
41:f8:68:8a:5a:a2:88:00:38:7a:c2:f3:c9:b9:f3:
50:3a:8c:da:86:9a:15:e0:5c:04:29:bb:b3:b8:1a:
0c:07:fe:af:8b:e7:27:3e:75:0f:e3:2c:e6:30:b2:
e0:f7:0a:d9:bf:80:37:23:e4:76:8d:85:fb:3e:c0:
ae:69:cf:70:cd:e1:98:f8:9f:e2:78:c3:4c:ed:51:
10:24:10:87:24:6e:df:7a:fe:0a:cd:a5:24:d6:63:
d3:da:a5:9e:a8:04:d1:3f:41:6f:7a:3f:2d:57:8f:
c4:18:ec:e4:dd:91:21:fa:41:fb:4c:79:88:ba:52:
95:89:21:d1:74:65:83:c6:d2:f8:78:d7:0e:a5:16:
80:3b:be:19:69:cc:4e:4b:40:35:b0:4a:c2:df:6d:
d9:39:32:07:03:ed:e6:ff:83:4d:03:47:0d:6b:4c:
49:c3:ba:60:71:6a:13:21:e0:0e:dc:0e:90:36:f5:
0b:bd:79:f4:57:4c:9c:3b:8c:79:b5:57:2b:13:a0:
17:2d:08:7e:3c:c7:b9:7a:77:88:90:9b:29:3c:be:
a2:8b:51:78:78:6f:12:6d:81:87:85:26:21:e9:1f:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:C7:7F:43:52:D0:DD:4F:39:59:A2:72:DC:B8:2E:4D:62:68:83
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:0e:d2:11:dc:4f:43:12:e0:f7:4c:2f:14:88:ce:39:d2:
e0:9a:dd:af:62:8b:8c:c4:cc:9e:ce:9a:65:95:41:35:de:48:
af:ad:e0:3e:fc:8f:d7:69:5a:e6:62:32:23:6e:82:e6:61:66:
66:2e:da:0c:db:3f:0c:9a:44:13:f3:91:be:bd:49:92:80:4b:
e6:8a:7f:33:85:ee:ed:fc:e0:a7:b5:c9:22:60:5f:da:d1:f2:
73:d9:b5:52:d2:11:1f:cd:bf:18:b3:de:00:91:a4:7b:81:34:
dd:61:a1:b1:15:48:6f:b0:06:ab:dc:54:fb:11:96:b6:db:e7:
6f:a2:18:93:a5:90:94:30:1d:13:c1:e0:43:0b:8a:5e:0a:93:
f5:13:92:0e:2f:45:b9:17:d4:a2:23:f3:d7:03:6e:d4:2d:a0:
c0:25:7b:c3:23:bb:e3:9a:bc:cb:5e:a1:01:ec:bf:ac:5c:16:
4f:c1:57:00:f0:a0:0f:89:57:3c:12:dd:89:9e:a9:7c:c0:0c:
de:49:63:87:59:54:c6:6b:ce:e7:7b:7c:68:7a:53:b3:8c:25:
93:ba:25:b5:6e:2c:8f:10:0c:40:84:d6:7b:19:20:83:1d:b0:
37:7c:c5:9b:89:fb:d3:f3:9b:e1:db:bd:01:94:dc:8c:4e:43:
3f:f7:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:57 2025 by rpki-client