Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: DKJ+UVZZnAbhTr9l3iHlikxNoiZjzQKmqFWVWgl7Tl4=
Subject key identifier: 1F:9E:91:B0:35:B0:F1:4A:55:C5:C8:94:D7:80:50:32:67:C6:90:E6
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 019A51BEF71EB18901D190FF64D34AFFF2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 02:01:00 +0000
Manifest this update: Wed 05 Nov 2025 02:01:00 +0000
Manifest next update: Thu 06 Nov 2025 02:01:00 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: 3EDNiY5O/9dl3IrX+KLKltodUZt46c6RrEcB5iUgqe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:f7:1e:b1:89:01:d1:90:ff:64:d3:4a:ff:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Nov 5 02:01:00 2025 GMT
Not After : Nov 6 02:01:00 2025 GMT
Subject: CN=1f9e91b035b0f14a55c5c894d780503267c690e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:d4:8c:ce:92:5e:b2:3e:d0:c8:68:3e:11:
36:e5:1b:24:93:35:b4:d4:b7:ec:9b:1e:ec:c3:01:
43:81:ff:1f:14:23:b7:0e:26:5c:e7:63:21:e9:bd:
ad:93:28:9c:ef:5d:53:16:f8:41:f1:49:78:9c:e5:
9f:83:03:0d:4a:25:a7:de:df:f3:fe:5c:59:e5:1c:
0d:99:d9:ed:f1:ca:6a:68:a4:e2:ca:15:53:04:5a:
4f:88:93:a1:bf:78:37:94:9f:04:cd:39:a4:02:7f:
c7:e3:32:b7:a0:6c:f9:58:5e:20:c5:02:84:77:db:
8a:c4:cf:8e:1e:97:e9:a6:b5:05:50:f4:dc:cc:d8:
94:00:ff:28:03:01:89:a8:07:96:3f:98:17:fc:40:
24:2d:83:4e:1f:6e:f6:47:30:89:4e:b4:83:9b:67:
33:8f:46:d4:d0:97:56:09:2a:57:ca:a3:ea:89:9c:
d9:13:3d:6d:87:99:58:e4:57:cf:34:67:13:d1:8b:
73:29:95:09:65:c8:72:30:8f:83:73:a9:23:65:cf:
fb:6e:0a:85:81:fd:46:fa:d0:7b:84:69:d9:bb:47:
54:93:82:45:62:9c:f7:4d:ae:94:c6:cc:62:81:8c:
2d:01:40:c2:21:a6:70:ec:31:25:ad:b0:64:e0:a9:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:91:B0:35:B0:F1:4A:55:C5:C8:94:D7:80:50:32:67:C6:90:E6
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:ce:a2:ad:14:84:67:88:50:ac:0e:7b:13:59:2e:4a:10:
8e:90:94:15:8c:0c:bf:5d:27:2f:ea:66:7c:6b:da:1a:4a:c4:
aa:b6:51:0f:d5:40:65:cd:b2:49:41:c0:a2:72:b5:00:81:2f:
ab:b8:69:43:e7:43:ff:b5:a3:55:a5:75:a4:e7:3e:14:14:9d:
df:0f:91:5a:6c:02:ea:60:59:57:48:9a:37:f0:20:c3:30:1f:
55:96:87:09:c0:ea:ae:55:1d:d2:8d:74:61:aa:e3:2a:32:a4:
1f:24:04:1c:bd:1a:a6:c3:8e:fd:a7:f5:5f:ea:0a:6a:b3:05:
79:b8:ef:e5:17:b8:f3:c2:2a:88:da:c6:10:5c:fa:de:77:9b:
e4:b9:06:b5:df:57:47:28:b9:60:dd:51:47:00:73:fd:8e:bd:
19:63:6f:27:7f:97:d6:e9:b9:24:a1:a6:b2:a8:4b:f7:e2:a3:
64:00:38:91:e3:bf:f9:79:75:eb:5e:75:4b:c6:9f:39:1b:67:
14:de:2c:0b:a9:c3:bc:f9:3c:a5:f2:b3:5b:f6:7e:c7:a9:c0:
c5:4e:56:cf:28:40:d2:83:14:44:7e:17:f8:65:57:72:80:61:
3c:49:ff:7f:d9:56:fc:78:0f:73:c3:e2:77:92:68:c0:5a:7a:
9d:da:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:42 2025 by rpki-client