Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: AIPQnUcG6zpkb1eI2DNHGdd5mnXR59POEVIeswAcVT4=
Subject key identifier: 91:C5:0C:8D:7E:BB:9E:9A:26:88:05:31:07:92:85:3C:FF:23:BF:69
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 0197DBBFC43EB179CE5E30EF1AD434B628E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 1089
Signing time: Sat 05 Jul 2025 18:01:07 +0000
Manifest this update: Sat 05 Jul 2025 18:01:07 +0000
Manifest next update: Sun 06 Jul 2025 18:01:07 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: rl0+1M09tjxPjRvz/YDIF6dFvrWfePUR8wjDj1Y/NZU=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:bf:c4:3e:b1:79:ce:5e:30:ef:1a:d4:34:b6:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Jul 5 18:01:07 2025 GMT
Not After : Jul 6 18:01:07 2025 GMT
Subject: CN=91c50c8d7ebb9e9a268805310792853cff23bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cd:d7:a7:7c:fc:28:81:52:14:df:7a:fd:a5:
70:11:2a:f0:c5:0f:70:a1:fa:4b:6b:ec:25:f1:0c:
27:8d:5c:7b:d5:86:85:49:32:be:63:f9:dd:64:89:
cf:3f:32:a1:e2:af:fa:69:63:eb:a0:55:86:65:a7:
97:7b:8a:09:e3:32:a7:6b:88:5f:90:37:6e:24:d5:
d7:63:17:a8:2e:4f:d6:2b:cf:1f:bf:7c:44:9f:23:
4c:c1:5b:0d:bd:00:b6:2b:86:aa:bf:ff:8d:63:47:
c7:18:db:8f:91:1d:20:c9:ed:3f:96:3b:58:8c:95:
11:8c:30:b3:b0:a6:af:a9:8c:bd:7f:72:75:03:4f:
94:fe:a3:9f:a6:5a:0a:34:5e:ca:7f:8d:17:3d:bc:
87:93:87:2b:6a:ed:46:79:69:a1:a9:c4:fa:fe:29:
7f:79:fd:6c:f9:0a:e2:62:76:34:d2:3a:75:64:4b:
79:0b:71:13:9c:73:16:4f:99:3e:42:fa:2a:0d:f4:
17:02:b4:80:13:88:8f:5b:c0:c9:14:67:60:50:19:
f8:af:9b:ec:64:a7:2a:78:70:8f:78:f2:df:3c:ba:
d3:e4:68:b3:79:6e:d9:1a:b9:39:8e:35:2d:2e:b9:
2b:f6:8f:eb:0e:6e:5c:61:fe:cf:7c:8a:a5:cf:6d:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:0C:8D:7E:BB:9E:9A:26:88:05:31:07:92:85:3C:FF:23:BF:69
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:a3:ce:5c:78:73:2d:ee:cb:0c:ff:59:8c:2f:f2:14:92:
2a:07:84:5e:6c:4c:63:7f:25:8b:25:11:ba:52:8b:e5:6d:b5:
25:e8:a3:68:e8:47:8e:30:ba:45:94:72:8a:cc:6e:63:6f:2a:
0b:4a:8d:d8:76:9d:a8:56:66:81:3c:d3:74:1b:fa:23:20:62:
74:fa:8b:59:a0:b4:08:34:b3:19:07:a5:66:10:fd:c8:88:a4:
72:84:63:db:c0:d1:ad:d5:ee:f3:90:23:20:83:1a:25:19:1a:
ad:b1:d0:54:cc:c9:4f:60:09:a0:f7:95:c0:91:fc:d2:38:c4:
ad:96:9d:a8:80:61:b7:2f:fc:49:46:d1:73:1a:5a:b1:27:9b:
09:f4:f5:eb:74:32:fb:e2:c6:1a:24:4e:7b:26:62:93:96:fd:
31:3b:79:e2:33:e0:b3:f0:18:bb:65:ce:ea:c7:b6:6c:af:a3:
4c:71:1c:d1:f5:66:68:f4:f5:25:a8:8e:d0:b0:aa:6a:77:83:
c1:bb:85:71:17:32:7f:f9:8a:04:ae:d7:61:b1:d0:40:ab:92:
96:4b:12:c3:58:cc:91:9a:1f:4d:ae:7d:a1:3e:be:b6:7c:e2:
20:83:b8:32:08:ae:7d:8c:b5:05:e2:53:1b:0f:47:18:ad:a7:
1f:a2:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:58:57 2025 by rpki-client