Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: ftmg3NhCDXa1uCJYgLfW3rPosfgzcr7HK/qo0KCJ4x0=
Subject key identifier: 64:D9:D9:F4:7E:BA:79:80:F9:8F:6A:55:40:80:71:99:A6:54:CB:6E
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019A7112ABA4E9F7BA1618582360BEF9D2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 142D
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: HmtVUOxWJJskE9qhp2Ycp53L/1xY1Va7GCRl1AL3HcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ab:a4:e9:f7:ba:16:18:58:23:60:be:f9:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=64d9d9f47eba7980f98f6a5540807199a654cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:26:16:74:0a:5f:25:bc:ff:dd:8c:18:41:
77:33:af:9f:ab:30:f2:72:75:03:6c:f7:b5:86:44:
30:67:14:db:f6:01:21:87:9e:45:ee:8c:b1:12:21:
d6:2b:da:2c:c5:38:a3:d5:cc:45:aa:63:15:47:c0:
cc:fc:dc:ed:7f:ac:ea:24:14:ab:68:a0:33:b0:f0:
ae:4f:a0:15:9f:c6:43:dc:ca:dc:4b:86:fd:73:9b:
ab:9a:45:57:a0:73:3d:f8:a3:e9:ab:c4:69:2f:32:
da:31:19:05:ec:4a:97:01:70:4b:bb:22:9e:30:df:
bf:b7:7b:e6:8c:3f:0f:fb:08:3e:bf:29:bc:84:13:
b1:dc:49:f6:be:cc:1b:19:44:5a:7d:d7:e3:71:b9:
cb:d5:cb:f0:2c:1b:55:f7:a1:ce:5f:61:17:bb:a8:
39:5a:3b:24:45:8d:41:82:b8:1d:83:b3:90:d2:54:
a0:f8:a4:f1:b2:89:75:92:07:50:c0:ec:13:1b:b4:
19:fc:d7:e2:66:e1:4d:fc:61:df:82:60:72:13:c2:
41:62:42:1d:fa:a1:89:7f:24:1b:9d:44:85:21:f1:
4c:a5:28:d2:92:6f:14:8b:8d:ec:ec:10:62:a9:17:
00:67:b5:0e:7a:8f:33:e3:8e:7a:6d:c6:ed:d6:aa:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:D9:F4:7E:BA:79:80:F9:8F:6A:55:40:80:71:99:A6:54:CB:6E
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:70:07:eb:15:1d:dc:2e:3c:94:0e:4b:4c:ad:3d:cf:0f:
6d:76:8a:fc:31:c9:c7:b3:a4:c7:5b:81:a4:6d:0c:6e:90:09:
51:65:56:22:eb:62:2f:39:37:48:5a:ea:61:0d:63:78:73:42:
05:62:0d:19:1f:27:2e:35:1d:7c:9e:f1:9a:86:1b:29:7f:14:
88:24:71:25:f2:89:41:57:44:c1:6a:15:37:d1:02:a1:ee:f8:
ad:3b:24:9f:84:3b:4f:79:96:6b:1f:06:30:2e:0f:5f:fa:04:
12:46:e7:af:86:87:1d:8e:e7:d2:95:33:e8:87:63:46:33:b4:
4b:7c:20:05:4f:d1:58:62:ab:4b:72:ee:9a:2e:fb:ad:21:26:
dc:e6:e7:8b:97:8f:10:e2:4e:40:77:ac:c5:b2:73:06:6d:a2:
6c:01:fa:4a:c3:ad:70:77:ca:95:29:0c:ac:21:60:13:53:f2:
2f:f5:7a:c4:9d:41:52:fe:84:24:8c:8f:bd:84:74:0b:84:5b:
16:77:0d:d3:1a:fa:df:f6:aa:e6:7b:8f:85:08:87:b4:66:20:
d0:3c:7c:67:cc:30:c1:b4:4a:20:03:8c:07:c1:83:b5:90:21:
61:50:c0:56:9b:73:62:80:8b:04:59:c8:5e:ba:47:99:b0:7d:
04:0b:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:18 2025 by rpki-client