Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier: /suMSgMS5md/hDOPNEQ7JC+IjTrHxbx5pwBo8/O2PeM=
Subject key identifier: DE:F2:5A:4B:DF:27:26:AA:1F:88:15:1C:DF:84:18:33:00:4F:A5:AB
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial: 01992443F05885D025AA3B1C197939AA0EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 13:00:55 +0000
Manifest this update: Sun 07 Sep 2025 13:00:55 +0000
Manifest next update: Mon 08 Sep 2025 13:00:55 +0000
Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: nVM0rBIYT5+IwsdYEaYwWnFm8ule2C4WH9OK0e1LMb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:f0:58:85:d0:25:aa:3b:1c:19:79:39:aa:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
Validity
Not Before: Sep 7 13:00:55 2025 GMT
Not After : Sep 8 13:00:55 2025 GMT
Subject: CN=def25a4bdf2726aa1f88151cdf841833004fa5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:92:71:54:64:d1:59:b1:ad:24:ba:c6:0b:
3c:95:d6:d8:cd:20:41:12:3f:16:72:62:03:3b:76:
c8:02:90:10:7c:98:29:75:4f:11:95:ba:c5:b1:e1:
c0:9e:bd:67:a7:ff:20:ca:1f:68:24:b1:ee:14:e5:
20:e5:80:a5:b3:be:cf:7a:82:cf:3e:62:d0:e4:11:
84:be:d5:7e:95:fe:f9:ba:44:90:46:2f:68:38:25:
53:88:18:9f:a8:ea:e8:d9:b9:2c:e0:7f:f1:bf:fd:
a7:0e:6a:46:ad:01:6f:d7:61:fb:3e:27:c9:13:30:
29:6d:79:a8:49:6a:67:b1:05:8a:40:b6:a8:0d:39:
75:c0:ca:b8:b0:2d:b3:e2:8a:2f:ab:66:5d:36:15:
e8:d9:73:23:0f:fd:31:ad:6b:9d:1e:e1:f5:f6:4f:
13:5e:1c:c7:ec:e2:6b:38:03:89:74:f1:0f:1d:0b:
fa:27:0a:64:c8:85:73:b6:f0:5e:5f:28:5c:78:bb:
cd:de:d0:80:1b:9a:c5:c4:ac:5a:12:72:37:5a:b4:
4f:81:eb:d5:21:32:c1:c0:a9:98:19:95:04:60:6c:
c1:68:8f:4f:28:59:43:cf:8f:9d:d1:e7:dc:f0:39:
21:1e:70:cf:70:be:16:69:c2:58:55:ba:aa:ee:22:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:5A:4B:DF:27:26:AA:1F:88:15:1C:DF:84:18:33:00:4F:A5:AB
X509v3 Authority Key Identifier:
keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b7:19:a2:b6:83:7e:b2:55:c1:af:9d:4b:1e:9c:2e:bb:c5:
cb:ff:08:45:01:79:54:e6:e3:51:a7:05:bb:08:d6:d1:95:bd:
a3:97:e0:24:bd:c7:37:c2:2f:2f:61:0e:6d:1f:df:03:42:de:
d4:3c:22:80:39:6a:4b:a9:96:77:c5:9c:aa:e7:46:7e:c3:8f:
fb:e4:36:d9:52:94:4d:b2:2c:3b:97:38:cf:8b:ac:85:85:45:
4d:4a:6c:53:26:4c:34:ec:a6:63:f0:2a:df:07:cb:04:30:4e:
97:75:16:76:2f:4c:65:41:0d:d2:f6:01:c8:f6:5b:c3:91:2e:
74:0b:98:84:dd:b2:56:2e:60:e4:95:9b:33:87:b6:8a:8f:f3:
1b:11:08:3e:5a:ea:98:2b:98:72:a7:c2:a6:18:dc:e7:76:24:
f5:f0:e7:b4:4a:ba:ce:03:c9:a0:51:f7:27:80:ba:e6:e4:47:
7d:ee:50:c4:30:0e:b1:3d:d5:b9:06:a1:2e:89:8f:9c:78:db:
ff:ff:2c:85:7c:ce:03:81:66:ae:e8:7c:6e:be:90:27:30:fa:
e8:d1:0d:e0:14:45:a0:bf:37:93:5f:ce:3c:a8:aa:2d:10:2c:
ca:e8:63:9e:1b:47:c5:37:70:66:42:62:12:b4:d6:27:d9:4a:
58:51:49:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ/BYhdAlqjscGXk5qg69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjU1M2ZlZjVjMTg1OWQ5NTIzMDBhZDNlZmI1MTFlNThh
ZmRhMDEwHhcNMjUwOTA3MTMwMDU1WhcNMjUwOTA4MTMwMDU1WjAzMTEwLwYDVQQD
EyhkZWYyNWE0YmRmMjcyNmFhMWY4ODE1MWNkZjg0MTgzMzAwNGZhNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHaScVRk0VmxrSS6xgs8ldbYzSBB
Ej8WcmIDO3bIApAQfJgpdU8RlbrFseHAnr1np/8gyh9oJLHuFOUg5YCls77PeoLP
PmLQ5BGEvtV+lf75ukSQRi9oOCVTiBifqOro2bks4H/xv/2nDmpGrQFv12H7PifJ
EzApbXmoSWpnsQWKQLaoDTl1wMq4sC2z4oovq2ZdNhXo2XMjD/0xrWudHuH19k8T
XhzH7OJrOAOJdPEPHQv6JwpkyIVztvBeXyhceLvN3tCAG5rFxKxaEnI3WrRPgevV
ITLBwKmYGZUEYGzBaI9PKFlDz4+d0efc8DkhHnDPcL4WacJYVbqq7iII4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7yWkvfJyaqH4gVHN+EGDMAT6WrMB8GA1UdIwQY
MBaAFCL1U/71wYWdlSMArT77UR5Yr9oBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQt
NjZkOWU4NjFiNDc4LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQtNjZkOWU4NjFiNDc4
LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALcZoraD
frJVwa+dSx6cLrvFy/8IRQF5VObjUacFuwjW0ZW9o5fgJL3HN8IvL2EObR/fA0Le
1DwigDlqS6mWd8WcqudGfsOP++Q22VKUTbIsO5c4z4ushYVFTUpsUyZMNOymY/Aq
3wfLBDBOl3UWdi9MZUEN0vYByPZbw5EudAuYhN2yVi5g5JWbM4e2io/zGxEIPlrq
mCuYcqfCphjc53Yk9fDntEq6zgPJoFH3J4C65uRHfe5QxDAOsT3VuQahLomPnHjb
//8shXzOA4Fmruh8br6QJzD66NEN4BRFoL83k1/OPKiqLRAsyuhjnhtHxTdwZkJi
ErTWJ9lKWFFJQA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:19 2025 by rpki-client