Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: tmCM/hE2tXCdvxrsf6xnczEzSUX6zn3tArrooN/KhK0=
Subject key identifier: 8F:1A:43:22:AB:BA:89:63:76:45:C3:B4:66:91:88:07:00:F8:2A:E5
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019A503DA1F94CCC9C78DC8C56F705760F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 141C
Signing time: Tue 04 Nov 2025 19:00:07 +0000
Manifest this update: Tue 04 Nov 2025 19:00:07 +0000
Manifest next update: Wed 05 Nov 2025 19:00:07 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: r5ZuVo8VOnuk/vHE7TYIVFUnlj03m7lZZ01dwh9VQc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a1:f9:4c:cc:9c:78:dc:8c:56:f7:05:76:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Nov 4 19:00:07 2025 GMT
Not After : Nov 5 19:00:07 2025 GMT
Subject: CN=8f1a4322abba89637645c3b46691880700f82ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:db:63:92:1b:51:7a:fb:a2:2e:a9:ef:06:
10:b2:44:00:a8:3a:4c:f4:83:47:18:5c:df:05:d6:
60:5d:4b:98:ca:ac:eb:60:f4:95:9a:27:b6:60:4a:
33:46:0d:ae:ae:ae:20:3f:6d:64:c2:b1:5d:51:83:
92:10:1b:1a:08:38:90:84:df:78:fb:2e:75:d1:a4:
6b:53:26:03:15:38:27:49:da:80:a1:72:d1:58:88:
96:e3:bc:9e:c5:2c:f4:38:ad:3b:e0:34:b9:81:ad:
25:e8:e8:48:4a:95:aa:16:37:74:e3:e4:e5:37:dc:
5e:0c:1c:76:24:5f:a7:dd:ce:40:e9:63:9a:8e:fe:
51:26:20:c8:9b:c0:86:5c:2b:e4:f7:93:5e:3a:54:
b5:d9:7b:d3:80:bd:68:b0:6c:ce:03:d6:e6:fc:06:
95:9e:6a:86:da:a1:d4:13:77:e5:2c:49:51:c5:ab:
fc:94:6d:3c:99:0e:93:df:eb:e6:09:69:f3:76:39:
81:9e:42:ad:5c:97:4f:a9:93:84:bc:93:cf:46:52:
95:ac:1c:da:47:b2:25:d1:a5:fe:39:b4:0a:dc:6d:
d4:29:ab:13:50:c6:0d:7d:4d:f0:83:ae:3a:9d:73:
9b:d1:48:8b:34:0c:ce:08:b1:d8:e4:9b:4b:38:4f:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:43:22:AB:BA:89:63:76:45:C3:B4:66:91:88:07:00:F8:2A:E5
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:85:53:92:e9:85:23:86:d5:09:2d:24:31:c8:18:7e:39:
05:a8:b9:49:67:d0:38:e7:6e:1e:0b:42:b6:2e:d5:04:a7:ab:
21:88:31:a1:10:2b:6e:12:d1:51:61:18:6a:da:20:0c:37:06:
88:05:2e:d5:6d:fb:b9:2e:e0:35:18:a6:44:85:bf:80:cf:16:
9d:c9:70:89:a6:1d:6b:78:45:41:06:c5:1e:96:f2:da:a2:57:
84:9c:6d:32:2b:b4:4c:96:28:27:49:6f:55:48:5c:34:17:10:
03:f5:30:19:4d:45:6c:a1:b2:4b:db:fc:d9:33:75:2d:03:a1:
2b:2b:56:26:e7:5f:1c:8f:d3:fa:ab:68:9e:94:cd:88:87:0b:
86:c2:bf:1b:3d:b1:4c:04:f4:2f:2e:d1:b7:f4:eb:cc:c2:88:
63:62:cd:86:77:3c:46:51:26:d9:79:0c:c3:5c:2c:a4:f6:5f:
23:bd:f0:70:32:53:b3:6d:7d:b5:50:79:95:6b:f2:ab:b0:eb:
1c:20:a1:a3:55:af:c3:47:3f:84:d6:2c:62:ab:4a:58:0f:ea:
c6:6a:01:83:06:cd:28:ae:09:9f:44:2c:80:12:35:75:c7:7e:
26:52:3c:5a:fc:eb:51:32:83:66:bc:c5:53:d3:41:c2:19:33:
b9:8b:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:30 2025 by rpki-client