Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: M8HnMHZzyJxLfbRZBNy6kOL6wH/1rqTjiniy4YN/m+g=
Subject key identifier: 57:3F:9A:CE:C6:0D:D7:0F:F0:12:3E:64:EC:48:93:05:E7:C0:AE:77
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 019A4FD021A683AA086F0F6B73D87D487CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: SqC+a5PiQ/H3hTKt1Jb6c/RtSLwrXOENp+4/fJHVMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:21:a6:83:aa:08:6f:0f:6b:73:d8:7d:48:7c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=573f9acec60dd70ff0123e64ec489305e7c0ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:7d:72:9a:7b:c5:2b:85:82:bf:31:32:4a:
56:58:b8:ad:2c:3f:79:90:91:43:3b:c3:ec:01:1c:
ff:e3:24:8a:4a:28:7c:80:2a:e3:4c:9d:e3:6b:40:
31:54:bb:8b:ab:65:71:56:67:11:33:ee:31:9e:a9:
e0:87:0c:1e:94:de:47:e8:5b:34:b0:ca:ad:4e:04:
ab:d8:69:0c:54:31:cd:33:5a:38:ec:75:d1:8d:36:
96:6d:44:42:b3:38:bc:7f:ce:6e:64:1a:25:13:4e:
3e:24:fe:60:91:5a:61:41:0d:08:aa:ae:db:02:e6:
53:fb:63:04:30:b9:39:02:ed:cf:51:2c:a5:db:e9:
3e:83:74:7a:e3:31:52:77:90:79:45:70:0e:9b:95:
83:f4:90:6a:bd:74:7d:b9:aa:d6:66:cd:cf:c6:49:
d8:80:75:24:f8:cb:70:85:ec:00:1c:e7:96:7a:00:
1d:4c:2f:e5:43:d4:a1:21:ab:72:d4:b7:d8:5c:fd:
58:24:aa:ec:77:87:5e:bc:61:dc:d6:da:2d:c2:ed:
55:c3:4d:33:3b:1c:8c:29:85:4c:3d:7d:66:64:8f:
c2:af:08:a6:0e:92:62:2c:17:25:82:9f:c7:16:fb:
75:05:ca:bb:67:77:a3:e4:2f:65:33:ac:c3:13:bc:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:9A:CE:C6:0D:D7:0F:F0:12:3E:64:EC:48:93:05:E7:C0:AE:77
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:92:9d:3a:f2:20:cc:6d:2e:1d:9f:62:d4:33:7f:37:ca:
f1:f4:ab:b3:15:07:ad:32:1e:4d:0e:50:67:fe:61:2b:b6:11:
0c:a3:5a:5a:16:71:ca:6c:63:5b:23:6c:81:30:e2:ad:27:53:
b2:20:15:91:c1:38:fb:43:0e:0b:ee:59:fa:f8:bd:7d:91:20:
29:3a:f1:76:c8:b1:4f:1e:31:09:b9:b4:c3:fa:26:11:5a:ad:
8c:95:08:2b:55:a5:a1:e3:98:de:9c:73:1d:ed:84:25:af:b5:
cd:e4:4a:ee:1c:46:97:6d:56:42:21:36:44:f1:51:05:34:93:
b4:d1:34:55:22:41:1e:78:5f:bc:a5:c8:df:97:68:18:ae:39:
a4:52:dd:8b:4f:6f:83:a1:0d:6f:04:27:7d:66:12:d1:c2:e6:
55:9d:2c:0f:c8:9e:6a:56:54:0c:d3:63:47:5b:ef:48:aa:88:
27:58:ab:fb:b0:7a:8b:5f:dc:ef:3c:b4:5c:3f:83:9a:4d:98:
38:0e:c4:57:b4:04:72:9e:2f:d4:c6:8e:3c:13:7a:eb:65:83:
7a:3c:e6:7a:cd:d4:02:0c:e5:b3:43:ff:c8:05:b1:46:5f:1f:
5b:a6:ae:80:4f:eb:30:cd:a2:f0:40:92:c9:2e:da:f5:37:b1:
ac:84:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:27:08 2025 by rpki-client