Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: 3ti8pLEoQbcVIa6ggjCfVX8BLbRcpAeMFnUnOyTIwzY=
Subject key identifier: 26:06:A4:A3:79:BF:2D:57:1D:D9:0F:0A:D9:4A:40:E8:33:64:69:AB
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019A4F624A6DD7EEB92B04855600CDF018CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: oMoS9GWwinLXA9lk7mktZFu7oFtOPa0FhykkriJRZz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4a:6d:d7:ee:b9:2b:04:85:56:00:cd:f0:18:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=2606a4a379bf2d571dd90f0ad94a40e8336469ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:12:91:0a:b1:d5:ad:96:81:ad:f1:5e:70:
e7:e7:8b:6f:4d:68:aa:c1:ab:b3:73:fc:bd:20:dc:
a1:2d:46:af:8f:07:2e:92:85:ee:dc:bc:80:e0:72:
33:ce:18:fe:83:d4:7b:64:63:e1:f0:4f:97:8d:1b:
91:0c:de:c8:6e:63:f3:bb:c9:38:78:ff:77:06:5d:
58:6f:da:4a:0e:78:69:b7:43:68:70:fa:2e:a6:e4:
2e:67:d3:a8:ad:6b:ae:c4:d5:b0:3d:77:d1:8d:a6:
ca:d7:a6:36:1e:7a:dd:d2:fd:3b:c9:0f:37:76:09:
f1:64:b9:e3:2a:62:16:cc:d2:23:e1:dc:e0:3c:19:
d3:95:b6:c6:05:f6:68:46:91:04:20:9d:ff:00:26:
ce:98:19:69:55:af:f6:86:e8:73:5c:bf:99:c7:c9:
02:ba:b0:a2:54:3e:4f:44:85:6f:51:96:cb:25:ec:
01:01:83:7a:09:ca:09:22:a7:bd:3f:1d:2f:ef:af:
af:26:00:14:2b:4f:ba:ef:71:fb:70:9a:c3:65:f7:
f1:54:c0:2c:46:2a:60:59:c6:dd:6a:43:d2:40:d9:
ae:8d:f3:11:e4:42:8e:63:4d:46:ba:5a:8c:ad:80:
a4:ba:6c:13:fe:d1:6a:d9:63:07:cb:8e:ba:e4:b2:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:A4:A3:79:BF:2D:57:1D:D9:0F:0A:D9:4A:40:E8:33:64:69:AB
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:cf:ba:f4:63:54:0a:45:51:e2:8e:a6:89:00:44:d2:33:
76:35:25:2e:2d:36:90:48:fa:7d:ab:c9:21:9c:2b:a8:e8:f5:
0a:b0:80:78:39:28:92:94:dc:53:a1:6b:ee:75:50:4c:bd:34:
4e:cb:38:bc:8f:4b:ae:4a:1d:72:f8:48:c2:d5:51:a1:b6:d0:
f5:8e:90:0d:11:8d:74:03:30:8b:f3:fc:59:3d:50:67:06:83:
4a:cf:36:d3:b9:72:f9:32:95:6e:0e:b5:0f:a1:2a:e8:62:05:
53:66:d0:42:0d:c3:63:3e:7a:6b:6b:c4:1f:04:24:28:c2:3d:
86:11:d6:7c:fc:9d:b3:9d:d6:83:25:64:64:9d:d8:eb:12:17:
db:7b:57:e9:63:3d:c3:20:9e:62:13:b5:df:ab:c6:8c:98:1f:
9e:8a:09:97:22:92:bc:34:2f:6f:d2:60:cd:f6:27:73:5e:6d:
a3:21:dc:a2:49:69:f4:c0:09:89:d3:01:d8:2f:7f:e8:a8:45:
48:5d:d0:aa:4b:ad:dc:6e:92:25:be:ea:c7:7e:f7:26:e8:e1:
da:0e:c3:85:18:76:aa:21:b4:79:ad:f0:75:b0:a1:a9:56:ad:
0b:d4:ca:28:ea:f3:dd:25:6f:8c:21:a3:58:88:54:75:32:eb:
53:e1:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:59 2025 by rpki-client