Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: yyLMmELpu7DClgjvde7i+8JIn71OLLFia/O0lzoNqHs=
Subject key identifier: 3F:BC:84:9C:7E:4A:81:8E:6D:72:1A:93:07:85:F6:BB:6F:E0:E2:90
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0198D4E03F22540E9F0525DE3ACF850A4671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: IGnhQkURQyMjtziRQ6dY2KHMBVWuK7E4j8U7n43i3Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3f:22:54:0e:9f:05:25:de:3a:cf:85:0a:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=3fbc849c7e4a818e6d721a930785f6bb6fe0e290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:ce:35:32:e5:7c:6b:1b:de:b1:c5:c6:7c:
a0:0f:3b:9a:b8:3c:aa:18:91:ae:e4:cc:e7:59:d9:
a7:40:49:8e:18:7f:d2:c7:25:6d:37:99:cb:53:7a:
1d:7c:28:c1:f0:5d:0c:6c:38:79:c3:e6:32:cf:d5:
33:e8:03:76:41:86:9e:fc:4a:8b:61:16:a6:d9:8a:
d6:e3:91:52:99:cd:80:b0:b6:f0:e3:09:fd:29:19:
82:80:30:54:97:8c:57:7e:7f:4f:2b:87:92:57:77:
50:c9:01:10:ff:ee:4e:68:32:81:88:89:d1:99:91:
3d:4f:f9:cd:79:cb:cb:ba:f6:28:7c:93:7f:52:5a:
f0:50:ba:46:e9:17:de:c1:ca:68:69:b9:4b:6e:33:
d9:d6:cf:53:2c:5a:4a:4e:21:51:61:59:06:df:7b:
01:3f:fa:9a:d3:84:5c:42:20:94:00:bf:d5:0f:c6:
d2:58:5b:1e:fe:8c:b2:ae:33:a2:4a:ef:62:9c:f9:
3d:a4:81:7f:1a:54:2a:05:c5:4f:ae:00:d4:7e:e0:
16:f6:35:af:b1:f8:87:6c:f3:98:c4:2e:da:3e:71:
25:90:d3:cc:98:99:19:4d:5e:48:9d:de:dc:a1:67:
39:30:2b:85:17:5b:ff:cc:79:1e:59:05:24:a8:6d:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:84:9C:7E:4A:81:8E:6D:72:1A:93:07:85:F6:BB:6F:E0:E2:90
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:29:aa:30:c1:7e:c4:c3:41:ad:c8:f6:01:a7:3c:ca:3d:81:
be:4c:83:9d:2b:c8:e9:c1:6a:6b:4a:3e:54:92:c8:53:16:57:
ef:95:66:96:08:a8:96:c8:35:57:d9:15:e4:55:fd:e5:d2:6c:
f5:c4:8d:f2:c3:f0:fb:f3:06:e4:5e:8f:9c:06:58:2b:56:b1:
7c:69:3f:fe:b4:0e:d2:d6:9b:27:42:07:01:ff:d9:8b:96:34:
c1:53:ec:c2:d7:2a:89:f1:3c:de:fb:26:d6:19:70:12:20:04:
ce:f6:08:ed:5f:8b:4c:46:e3:3f:f7:a7:80:a8:80:0e:75:f0:
99:ac:ca:14:90:68:2a:f5:ad:79:92:61:55:23:8a:f9:20:99:
2e:7a:8a:fb:ee:56:b2:2a:32:25:55:5e:69:ac:47:cf:5e:59:
78:ce:8c:16:c4:4d:9e:71:d9:55:ff:6e:d5:fe:69:a9:f9:e7:
0d:3f:1b:4a:4a:4d:1e:c6:9b:9f:cc:43:55:d0:1a:6b:a0:2c:
f4:eb:ef:8f:22:a2:13:ef:0e:dd:95:c9:dd:1c:cc:0e:f9:d3:
d1:fa:ca:3d:13:1c:a9:9b:24:d4:05:97:97:40:43:b1:76:64:
28:6b:51:dd:d1:78:fa:89:73:1c:84:42:30:9e:f0:a2:6c:33:
fe:cf:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:09 2025 by rpki-client