Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json)
Hash identifier: tpxu0f1Ku2i3EGdTdRka2auCjmar6K0e59cQWAu6Xd4=
Subject key identifier: 6C:92:BB:23:AB:7C:82:C0:4C:A9:A7:48:AB:F9:3F:A9:1B:78:02:D3
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial: 019A711316B94FA6C4969C0911125F9F71CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
Manifest number: 0A19
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: lM3Rb3Xx25lcyQT4h9a7cTYDy+agCMulxRUJ2B0j/uw=)
2: NfqHOhcJXcqSfQpuNgytLU6Q0gw.roa (hash: fdvl8Vjh1i6SnoxQG77IPFWNq1tbBXhWcHGwbwfOV50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:16:b9:4f:a6:c4:96:9c:09:11:12:5f:9f:71:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=6c92bb23ab7c82c04ca9a748abf93fa91b7802d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:66:dc:cb:cd:10:03:2e:ab:8b:74:38:6b:
34:78:74:39:db:81:69:22:ef:c7:e9:a0:78:d2:dc:
05:4e:29:b6:6b:f0:f2:af:f1:ac:5d:3e:12:2c:9c:
f1:ee:03:1a:77:16:e4:b7:08:13:b8:9d:7e:82:8c:
fa:4c:06:39:c4:e0:65:c9:f7:b4:4e:98:15:bf:0e:
56:a6:f4:4d:d2:1e:59:86:76:35:b0:9f:a0:39:28:
18:71:21:fc:08:21:ff:70:1b:d1:cc:fe:b4:8b:aa:
ec:e4:a1:7b:54:a2:0f:fe:ab:fe:91:54:a2:7e:33:
d1:5e:02:c0:0f:af:af:ad:a1:3c:a5:2a:6c:b3:75:
7a:44:15:3d:39:63:c6:c6:72:43:83:dd:32:2f:77:
78:af:ec:c3:87:1e:36:a6:69:15:f1:b6:90:74:ce:
c7:60:5b:b5:1f:0d:a2:6c:58:42:17:85:23:47:7a:
f7:96:dc:70:4f:57:49:c8:be:91:ee:95:b3:a4:d1:
43:d4:8c:55:40:c9:ac:32:95:01:f6:d7:c4:f1:b2:
64:af:38:c0:36:fe:58:71:13:8e:bf:eb:af:21:77:
11:89:37:f0:57:cc:82:02:bf:a6:da:d9:47:68:ac:
27:84:59:e7:78:b6:ed:67:13:e7:48:a3:b3:6a:4a:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:BB:23:AB:7C:82:C0:4C:A9:A7:48:AB:F9:3F:A9:1B:78:02:D3
X509v3 Authority Key Identifier:
keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5d:c9:09:b3:df:d8:dc:0e:18:f4:73:97:c5:84:00:60:63:
0b:5a:28:2a:d5:58:9a:85:96:f8:d7:29:c2:59:34:3c:3a:94:
9e:26:fd:77:ad:1b:b7:50:ea:2e:32:b6:07:e0:8b:46:f4:bb:
ef:cc:4f:bb:0d:da:9a:39:2e:80:46:37:58:37:92:be:26:ff:
06:d7:e5:c7:3b:6a:1a:4c:aa:aa:4e:af:31:5a:94:b0:d6:39:
c3:71:12:fa:68:9d:80:d4:4d:ec:d3:8b:9f:98:fd:c2:77:a1:
50:3f:8d:ca:cf:60:97:62:a2:71:8b:00:61:08:58:2b:44:b5:
f3:7f:4c:49:a2:c1:5f:32:fa:79:4c:5f:bd:1b:56:82:a2:75:
a3:ff:11:83:7b:31:f3:70:5b:f6:89:3c:26:f3:65:17:44:47:
e9:40:c7:20:80:db:60:be:26:15:dd:5f:a9:b2:07:da:81:71:
9b:21:df:61:8c:3f:a3:aa:b5:43:3a:2c:a9:09:a9:9f:57:6c:
96:74:ac:23:05:82:3e:f2:f6:d6:6d:e6:bf:9b:66:ee:e3:bf:
0f:35:fe:ef:db:04:a5:a5:48:f3:3b:07:e2:70:f7:e2:1c:b4:
e7:bd:38:67:20:78:cd:9d:51:9c:1b:0c:3d:b0:04:c0:e6:ce:
a9:d8:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client