Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: RmTNbsOaTut8eiq+G7vB2sLyX0+EYvQbG/TkpxW9DoI=
Subject key identifier: CC:4C:26:AE:EC:3D:19:93:4E:C6:91:4E:08:F3:92:1E:38:AE:1F:A3
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019A52D1B87D713910977D4F8245157ED2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 14CD
Signing time: Wed 05 Nov 2025 07:01:07 +0000
Manifest this update: Wed 05 Nov 2025 07:01:07 +0000
Manifest next update: Thu 06 Nov 2025 07:01:07 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: REDeouA2srpNsOHsWR3W+anh8zs+6oR2CMYDIwbiJzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b8:7d:71:39:10:97:7d:4f:82:45:15:7e:d2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Nov 5 07:01:07 2025 GMT
Not After : Nov 6 07:01:07 2025 GMT
Subject: CN=cc4c26aeec3d19934ec6914e08f3921e38ae1fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:25:d4:6b:dd:4f:33:91:cf:05:4c:f2:a0:
d7:8a:2f:f8:ae:d5:5c:70:a5:81:b3:8f:10:f4:6c:
34:f3:f1:94:76:8a:79:ca:82:bc:89:45:26:b6:dd:
8e:88:7c:63:ab:4b:b8:bb:a3:d0:a0:b5:4a:e3:1e:
0a:cf:65:53:a9:0b:c4:f9:73:5f:17:c6:e2:dd:bc:
94:fc:b1:ef:d6:38:73:f4:98:3b:7f:54:ea:98:08:
6b:fe:25:bf:0e:b6:81:91:b2:bb:dc:68:ad:9f:73:
ed:a7:8b:c0:a6:1c:74:90:f2:df:e9:72:33:6f:76:
8a:17:80:11:7c:30:68:95:3c:db:ac:96:44:26:9a:
42:61:f7:ea:30:48:9b:db:54:e0:2e:30:bb:4f:9c:
96:32:a3:ea:80:2a:e7:25:8f:d4:bd:22:99:9e:3c:
e7:d5:fa:3c:2c:a8:b5:b2:09:c0:8d:d6:0d:6a:6d:
bb:3b:10:bb:d1:33:c7:16:6f:7b:16:df:f1:4f:fd:
2c:df:50:65:60:a8:16:b5:1d:d2:8d:91:ba:b6:b3:
e7:80:b9:94:36:74:49:a5:9a:4d:38:a1:5b:bd:ee:
a3:c8:72:9b:81:7e:b4:8c:01:e2:91:68:9a:65:09:
7a:54:e1:0d:f0:28:59:85:6a:56:2a:e3:d1:28:4a:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:26:AE:EC:3D:19:93:4E:C6:91:4E:08:F3:92:1E:38:AE:1F:A3
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:da:65:f7:7e:a2:a3:19:76:fa:8f:66:72:3c:d2:cd:db:c6:
45:99:ca:d4:9e:30:4d:bf:da:f5:6f:dc:d0:ba:ea:4c:06:08:
30:bd:d5:e7:0f:c8:b0:bd:4e:df:70:82:6a:71:ed:22:db:a6:
13:2a:fe:50:d4:e6:02:f9:99:1f:08:9e:d8:2c:13:45:b8:be:
cc:c6:ab:31:5f:38:f2:ce:48:ea:f9:94:85:00:47:01:75:7a:
d1:84:ab:56:39:e5:2d:0c:60:6c:86:e8:a4:99:f1:5e:c9:19:
ff:6a:f3:f7:c0:89:89:19:42:9c:f9:da:b1:78:17:3a:3b:c6:
04:bd:d9:59:f8:a0:81:84:d8:d5:4c:6e:94:20:fb:a9:fb:76:
19:5c:ad:34:f3:db:6f:e9:a7:4a:c9:da:8e:96:70:32:a3:74:
6e:7d:82:79:a2:8f:91:82:fc:2c:9a:42:94:f7:a7:18:7d:d1:
2c:16:98:be:44:ad:f1:0c:b3:df:63:e3:c9:24:a6:59:04:58:
8c:a2:a8:04:97:61:9e:3e:9d:e7:26:2f:f5:d9:01:ff:a1:bc:
f2:f7:48:9d:30:ec:b2:e4:1b:3b:90:0c:17:6e:16:5a:7a:7e:
41:98:8c:60:57:eb:19:c7:d0:ee:05:e8:42:17:88:6d:71:d8:
1b:6e:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:44 2025 by rpki-client