Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: TJGEB3eNE9LaRhkXcb/AoXvHzHYNQ9pJ4k5HZCAp9kQ=
Subject key identifier: 67:91:18:BC:96:D1:B9:E8:69:A6:8F:E7:CD:79:59:C6:7C:C0:49:EF
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 0199FC583DF8AA5266246F017FE1EAA15FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 11A3
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: fiyqRNqydNg5xSdiBS9+p3YytLvFUt+ptWP0Il/hwrU=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3d:f8:aa:52:66:24:6f:01:7f:e1:ea:a1:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=679118bc96d1b9e869a68fe7cd7959c67cc049ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:fd:52:0b:d8:1a:3a:63:d7:e6:20:b0:08:
d9:82:10:39:ad:42:2f:cb:0d:5a:ab:e8:43:5f:52:
f3:9c:ab:a1:e0:b4:23:b6:6e:d8:b0:22:38:8d:16:
78:97:38:54:2b:07:4b:ba:53:76:64:7a:35:52:3e:
4f:c2:05:99:cd:9c:7b:4f:4b:15:4b:1b:a6:03:47:
29:eb:fb:3d:c4:d0:79:67:9d:21:c6:13:a2:46:7c:
ce:26:21:9f:c4:59:fc:59:57:ab:53:51:54:c6:63:
f8:13:6a:a3:aa:af:b3:70:cd:8c:d5:39:f3:53:b5:
4b:8e:bf:e3:a2:e7:6a:18:1e:b4:9e:0d:59:c5:e8:
d3:72:80:6f:80:e9:19:c5:0a:a2:63:c0:3a:68:0b:
a0:12:45:1a:72:8c:2e:71:e6:f3:3a:23:ea:1c:4e:
5e:4b:c6:cf:2d:72:70:6f:eb:0a:44:4f:0e:8c:e2:
4d:b3:d6:c9:8a:73:45:c3:49:eb:ee:0a:85:e9:f8:
99:de:9f:5f:26:50:2b:d3:a6:dc:c1:99:78:8c:a8:
5f:f7:aa:1d:a1:ea:75:ce:4e:51:0e:a2:01:f4:b8:
e6:9a:e4:7c:c3:0a:13:ac:2c:95:f3:10:81:7b:7c:
74:43:32:0c:09:3d:b0:d9:4e:81:bd:fc:52:01:0d:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:18:BC:96:D1:B9:E8:69:A6:8F:E7:CD:79:59:C6:7C:C0:49:EF
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:05:58:e9:26:ee:13:2d:6d:5f:da:dc:34:1a:da:cb:51:c5:
69:94:0a:dd:e2:65:31:b0:bc:6f:45:b9:4d:b1:a1:91:c7:ff:
37:5f:c5:c5:aa:32:d1:af:38:72:50:ef:2b:24:7e:a9:d7:8c:
20:b9:c9:f7:97:ab:cb:a2:e6:81:95:01:2d:b5:ef:86:f0:11:
b4:82:9b:e0:98:5c:ef:ef:75:a2:82:ec:f2:13:81:6e:f3:2c:
ac:5f:e3:52:44:d7:61:34:87:94:43:08:58:86:f2:c2:19:3f:
f7:b5:52:d2:4e:b7:61:cc:e1:84:e7:0a:1c:61:45:73:5c:ed:
54:8d:c8:be:5a:75:2a:cb:0c:03:06:bc:bc:24:d0:b3:01:3b:
63:e7:c6:cd:be:92:6b:80:ec:27:b4:87:b5:8d:78:f1:2f:bc:
01:aa:a7:6d:50:76:6c:4e:a8:3e:f8:4c:e4:e7:eb:4b:ca:7e:
74:ac:02:fc:e8:16:c6:52:8f:8a:8b:40:e6:fa:47:27:9d:5d:
c6:5e:94:23:8f:ac:80:ca:3d:cc:54:d7:cc:82:18:ae:d5:b3:
b6:9b:98:47:19:69:d8:45:7d:5a:3b:5d:62:b4:4e:e3:09:19:
53:c7:1f:e8:01:d4:00:bf:90:1c:0c:9d:6a:bb:b6:d2:70:50:
fd:7c:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:12 2025 by rpki-client