Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: RMcL6YgywbBwm1HgQY96ZvG01UPJa9MqEv+DQhM2Rps=
Subject key identifier: 86:ED:90:A0:C5:8A:FF:43:8B:96:1D:E6:65:8F:20:03:3E:5A:94:34
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019881686929470242FBC3A7E6A4AADA694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 13DC
Signing time: Wed 06 Aug 2025 22:02:40 +0000
Manifest this update: Wed 06 Aug 2025 22:02:40 +0000
Manifest next update: Thu 07 Aug 2025 22:02:40 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: iGsCZEFZTc0DFXj1UgUAH4f2IqVvQK7GYYH6jwcYfOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:69:29:47:02:42:fb:c3:a7:e6:a4:aa:da:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Aug 6 22:02:40 2025 GMT
Not After : Aug 7 22:02:40 2025 GMT
Subject: CN=86ed90a0c58aff438b961de6658f20033e5a9434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:fa:15:0e:9e:69:26:10:5b:65:be:5c:ac:
a9:c9:30:ba:62:de:80:e1:9b:fd:8a:a1:dd:0c:e3:
60:3b:7e:47:06:3a:1e:90:1d:13:74:6d:3c:9a:31:
d5:1b:0f:66:de:8e:1a:4c:6f:c1:37:f7:95:4c:d2:
62:90:25:30:13:f6:9b:f0:d4:e8:33:79:53:5d:40:
21:0a:0e:f3:0c:a9:fc:3a:6b:35:eb:f5:d2:9d:b7:
72:93:15:c8:9c:d4:60:a5:c4:c9:64:9b:47:28:5f:
8b:59:87:7d:79:ef:de:2b:a7:2e:af:ee:e6:c3:26:
73:a0:8b:c2:bd:13:e2:c1:4e:c1:e7:af:4b:06:85:
32:dc:f0:81:3f:be:dc:90:07:fe:41:02:69:ca:16:
70:fc:51:8b:7d:a4:27:a9:28:33:07:db:da:5e:04:
d8:b8:63:b5:3e:80:7e:16:4c:1a:d7:7d:1c:65:0b:
77:18:9a:88:98:c0:f3:66:14:3d:53:fc:da:87:f8:
9e:48:36:f6:6b:bc:7d:25:36:84:c0:06:e3:de:e6:
94:c5:f7:0f:ea:40:34:24:9b:e3:f9:91:d0:85:78:
f2:54:ac:a0:c2:43:45:2d:a3:40:11:de:b2:5f:a9:
7c:4c:36:9a:79:5f:1e:c9:af:76:fc:d5:64:ba:dc:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:90:A0:C5:8A:FF:43:8B:96:1D:E6:65:8F:20:03:3E:5A:94:34
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:04:52:a5:bc:6e:13:58:25:03:5f:fa:d6:c3:8c:a1:a9:
b3:5e:62:68:4c:20:ed:d9:52:66:d4:12:2f:fa:99:35:03:df:
03:54:bc:5f:72:2e:e9:93:22:d6:a0:b6:c0:fc:6a:2d:d6:5e:
3d:ba:18:bd:13:6b:b6:d0:e4:e4:85:71:a6:97:65:b6:7f:ff:
64:9b:71:bf:24:6c:88:bf:89:73:78:5b:14:cd:46:46:f0:11:
51:3d:0d:f5:ba:57:8f:d0:05:7f:c3:70:88:cf:5c:f6:1b:03:
0d:94:6a:cf:e9:ca:58:50:56:1a:8b:ac:f9:5c:a9:9b:07:d7:
6f:9f:48:55:9f:64:00:21:1d:47:d8:6f:39:5e:70:1e:89:7e:
96:9a:20:16:49:3c:2c:6e:5b:62:61:ab:8a:87:39:e9:14:4e:
7b:39:88:b6:f2:2b:1b:17:9b:85:37:90:4a:4e:2b:99:1b:be:
57:5a:7f:68:ab:7f:1b:e3:80:12:d2:93:f4:ad:d4:15:4c:c0:
19:55:67:88:31:aa:88:6f:b5:ee:ef:2b:bb:c5:9b:92:c1:22:
f0:cb:99:d2:96:3e:de:fa:34:3e:23:bd:eb:a5:5d:24:d9:67:
dd:9c:09:9b:14:b7:7d:13:8f:75:5c:dc:6c:06:3c:40:4b:37:
fb:98:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:56 2025 by rpki-client