Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: iOOEX/JCuqw94A23W6AicGoxqFskiFomR/gzKU+3Wck=
Subject key identifier: 5F:16:FF:33:0B:97:5B:1F:5C:5C:A6:0F:6A:A2:D8:99:CC:0E:E4:22
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 019A4D7424464BA18C61BECC346FA35A995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 0678
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: C8ncNgslaj4R1AUXa8rbFU8TS83lvSRF/6z5OdB/kAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:24:46:4b:a1:8c:61:be:cc:34:6f:a3:5a:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=5f16ff330b975b1f5c5ca60f6aa2d899cc0ee422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:71:73:ce:0f:d4:78:7e:7a:f7:e1:86:34:
96:14:88:e3:48:c8:3e:67:5d:0a:a3:5d:2a:ff:f2:
65:08:57:d2:ac:cc:17:0b:53:8f:fa:fb:2e:4f:8d:
1a:49:61:77:45:38:4f:66:b9:65:c5:e3:8e:09:a8:
f1:f0:d3:ef:97:06:35:bd:1d:71:1f:06:37:0b:28:
26:59:50:ee:c5:b6:3a:0a:27:19:64:00:82:32:07:
c2:cc:e6:7f:d0:3e:db:f6:01:26:6a:cd:01:58:c5:
6e:35:70:04:f8:66:e7:c0:d6:ee:92:00:50:6f:bb:
3a:35:65:58:a7:ab:26:eb:0e:a1:1b:11:71:c3:db:
f4:e7:2b:58:66:23:44:9a:10:52:41:45:71:be:fa:
a5:5a:64:cd:f3:84:d0:4a:cf:11:27:bb:2f:66:7a:
9c:f4:31:d5:9d:30:2f:22:49:ab:9b:c3:d9:4e:8f:
5d:3c:89:39:5a:82:02:4f:41:22:e3:a1:ef:9f:a4:
01:24:3d:4d:85:86:a9:2f:a1:45:68:10:e2:ce:f9:
66:d6:55:6f:29:1c:16:4d:a1:c3:a6:a5:5b:92:7d:
37:e5:15:d3:45:46:f0:92:1b:f8:e1:fa:73:3f:8e:
75:8e:fb:c7:c6:55:7e:ae:df:10:3b:7a:e3:47:ec:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:FF:33:0B:97:5B:1F:5C:5C:A6:0F:6A:A2:D8:99:CC:0E:E4:22
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:13:43:73:2a:78:8e:62:1b:d2:bc:16:83:77:15:72:9d:
af:95:67:21:d5:b7:4c:b1:bc:2a:4d:fc:66:7e:15:ae:a1:25:
eb:46:88:b7:85:da:60:ad:d4:73:b8:34:cf:9b:1b:9a:b9:31:
c1:0e:3a:38:70:e3:08:63:b9:fa:56:3f:73:20:ed:35:96:2f:
2d:a2:25:ee:a5:f4:7d:45:94:af:7d:d6:16:4b:58:ac:a3:f1:
11:d2:64:d8:0b:74:7b:f3:7a:62:d4:bf:62:14:d4:1b:a9:50:
0e:7c:2c:fb:0e:f5:35:d4:b1:12:d8:60:67:a8:f8:7b:45:36:
7a:f8:f1:23:a8:57:77:19:ce:86:a1:c5:16:44:1d:f5:53:37:
41:c0:ba:06:35:57:da:99:69:00:dc:3f:ed:67:cb:8f:c2:00:
d5:77:15:33:84:ae:8c:94:b3:7c:7d:f4:0f:ab:a8:9a:b4:16:
ab:31:0a:36:90:9d:db:44:fa:5f:fc:2e:f0:d2:c0:3f:4f:65:
c8:20:da:d3:5d:fe:5a:b2:e4:d4:47:f8:53:a0:16:54:3e:69:
14:7d:f3:63:0f:12:f7:02:72:38:05:15:e1:02:e8:7c:e4:8a:
ae:b0:82:96:8c:92:a0:0b:57:7c:4e:87:bf:9a:b1:92:db:8f:
dd:f4:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:10 2025 by rpki-client