Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: +AE1553WSvIknCXYHytM14KisGmAwwEMfIpMRCfqc6A=
Subject key identifier: 34:98:D6:41:EF:A1:B7:A0:67:B6:0C:05:2C:66:39:0B:9C:93:20:27
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 01988D6AC52CEB40BC1CD3E689A7957EAD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 10E5
Signing time: Sat 09 Aug 2025 06:00:41 +0000
Manifest this update: Sat 09 Aug 2025 06:00:41 +0000
Manifest next update: Sun 10 Aug 2025 06:00:41 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: 0l9qwP/U0cqRMr1LTRedh9ghE1Pm37Izma20ltliNc8=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:c5:2c:eb:40:bc:1c:d3:e6:89:a7:95:7e:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Aug 9 06:00:41 2025 GMT
Not After : Aug 10 06:00:41 2025 GMT
Subject: CN=3498d641efa1b7a067b60c052c66390b9c932027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:d3:d3:ad:ad:b7:9c:7e:6a:0e:ef:c9:52:
f7:3f:55:df:d4:e6:d2:77:fe:a8:4b:ba:26:ba:01:
b3:27:ad:41:46:03:99:91:84:50:9f:0c:c0:01:64:
f2:30:2d:ff:58:bb:6c:d7:da:4b:22:d9:e2:48:36:
b7:a0:5f:94:07:b3:40:af:4a:8d:d7:89:b5:0c:01:
eb:44:48:44:19:b5:28:49:57:89:5b:da:19:5a:25:
c8:37:76:f2:d3:fb:eb:30:ce:90:3e:56:38:52:9c:
b7:15:e9:70:0d:dd:d5:52:aa:8d:4d:00:9c:82:d5:
cc:b9:83:c8:92:79:52:59:dc:59:94:86:e1:9e:57:
4f:0c:ee:f8:95:9c:b9:63:0e:b5:09:18:e8:1d:18:
a9:29:7d:98:36:e5:2f:02:31:88:81:01:5d:89:df:
70:de:a9:bd:2c:a2:c4:a9:66:f7:ed:a3:f2:86:32:
1f:90:16:3e:01:b3:2e:49:47:ed:31:ae:7b:8b:63:
a2:bf:03:21:2e:6c:23:e0:ec:d5:7b:9b:7e:3d:b3:
5b:b7:c1:de:c5:6b:50:32:c6:1c:21:37:b1:e0:e4:
a4:29:95:17:c0:b4:f5:2d:40:b4:a3:18:cd:c9:4b:
3e:9f:73:ad:03:86:c5:80:f1:aa:81:c8:70:11:41:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:D6:41:EF:A1:B7:A0:67:B6:0C:05:2C:66:39:0B:9C:93:20:27
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:3d:2c:e1:4f:e8:bd:9e:e7:c7:27:e6:c3:37:1b:11:54:
e8:e4:bb:d7:df:0f:f0:6b:b2:49:0e:1b:1e:a3:a1:ed:4a:bf:
8e:1c:6d:db:a3:32:2e:52:dc:7e:98:7e:da:2a:dc:60:1e:87:
c8:0c:e1:80:88:58:e3:82:91:10:e7:05:d9:1b:51:ff:84:6f:
dc:c3:55:83:c0:e6:20:31:c9:49:4a:4b:af:b1:53:29:b8:0f:
85:da:38:5d:f1:50:1c:d0:10:26:7c:e0:ac:a5:02:35:c7:21:
6e:3e:49:cd:1a:13:9c:c9:ba:26:8c:93:2b:73:71:ce:e6:63:
ed:47:0c:29:84:91:7a:44:df:85:b8:f4:eb:7f:0a:85:f7:31:
0c:45:fe:a5:10:37:ff:47:dd:fd:f6:97:fd:4a:5b:14:7b:f5:
c0:d5:ac:71:51:d3:12:ff:3e:ed:f8:d9:1c:75:e0:1e:94:ef:
bc:04:47:66:6c:40:d7:b8:a0:ba:5a:0f:d9:c5:ce:6d:e1:5b:
78:09:0b:da:08:a4:8d:9f:fe:16:d2:d0:5b:95:ee:0f:e5:f9:
75:e8:42:b0:8c:43:a7:0f:7f:08:d3:95:eb:1b:9d:c7:26:e1:
f9:3c:de:26:6b:ed:fa:59:f8:a6:d0:46:12:21:5b:88:e6:fa:
c1:63:8d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNasUs60C8HNPmiaeVfq0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTE4MWI4Mjc3Njk3OGFkMmRiYjY5NTI4ZGNlOWIyMDk4
ZWIwN2UwHhcNMjUwODA5MDYwMDQxWhcNMjUwODEwMDYwMDQxWjAzMTEwLwYDVQQD
EygzNDk4ZDY0MWVmYTFiN2EwNjdiNjBjMDUyYzY2MzkwYjljOTMyMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyivT062tt5x+ag7vyVL3P1Xf1ObS
d/6oS7omugGzJ61BRgOZkYRQnwzAAWTyMC3/WLts19pLItniSDa3oF+UB7NAr0qN
14m1DAHrREhEGbUoSVeJW9oZWiXIN3by0/vrMM6QPlY4Upy3FelwDd3VUqqNTQCc
gtXMuYPIknlSWdxZlIbhnldPDO74lZy5Yw61CRjoHRipKX2YNuUvAjGIgQFdid9w
3qm9LKLEqWb37aPyhjIfkBY+AbMuSUftMa57i2OivwMhLmwj4OzVe5t+PbNbt8He
xWtQMsYcITex4OSkKZUXwLT1LUC0oxjNyUs+n3OtA4bFgPGqgchwEUGMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSY1kHvobegZ7YMBSxmOQuckyAnMB8GA1UdIwQY
MBaAFCFRgbgndpeK0tu2lSjc6bIJjrB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUt
NDkwMzFjNzcwNDg3LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUtNDkwMzFjNzcwNDg3
LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQQ9LOFP
6L2e58cn5sM3GxFU6OS7198P8GuySQ4bHqOh7Uq/jhxt26MyLlLcfph+2ircYB6H
yAzhgIhY44KREOcF2RtR/4Rv3MNVg8DmIDHJSUpLr7FTKbgPhdo4XfFQHNAQJnzg
rKUCNcchbj5JzRoTnMm6JoyTK3NxzuZj7UcMKYSRekTfhbj0638KhfcxDEX+pRA3
/0fd/faX/UpbFHv1wNWscVHTEv8+7fjZHHXgHpTvvARHZmxA17iguloP2cXObeFb
eAkL2gikjZ/+FtLQW5XuD+X5dehCsIxDpw9/CNOV6xudxybh+TzeJmvt+ln4ptBG
EiFbiOb6wWONQg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:17 2025 by rpki-client