Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: Ar5On5cNamTv6vcyC2JfcgAbKdlFOd82drIeyF8ThBg=
Subject key identifier: 31:AC:16:5A:5A:AE:C8:12:6E:87:0C:37:74:9D:6A:B2:64:83:9F:CB
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 0198D472A9E99EE0301A2469C54A6FC8C11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 1407
Signing time: Sat 23 Aug 2025 01:02:21 +0000
Manifest this update: Sat 23 Aug 2025 01:02:21 +0000
Manifest next update: Sun 24 Aug 2025 01:02:21 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: wveGqRfHiIPQpURk895DqqxmW/4eVMoE6pN6DdjTvT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a9:e9:9e:e0:30:1a:24:69:c5:4a:6f:c8:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Aug 23 01:02:21 2025 GMT
Not After : Aug 24 01:02:21 2025 GMT
Subject: CN=31ac165a5aaec8126e870c37749d6ab264839fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:45:ce:1d:36:92:50:50:a0:40:ba:9b:28:
85:1a:8c:73:25:54:f7:9c:4f:6c:34:ee:75:d1:f2:
0d:67:bc:62:0c:9b:dd:da:f4:9a:28:31:3f:e1:aa:
dd:a4:1a:f3:a9:17:98:40:09:97:0d:10:ac:a8:e8:
a5:23:ea:05:ee:7a:90:72:8e:59:66:af:c2:ef:e8:
1c:36:2f:07:e6:4c:41:1a:11:15:b5:ad:e4:aa:a5:
95:a8:92:b7:eb:7a:33:f0:4a:b6:27:a3:76:06:fe:
ff:19:3c:63:17:bd:ee:3f:ae:e1:ae:57:8a:46:4e:
57:7b:dd:c7:4f:cf:dc:1f:d5:85:5e:56:e1:7c:8a:
a4:fb:3b:74:c1:5f:3d:95:bb:35:2a:e4:63:40:06:
0c:c9:86:17:0d:18:94:49:a5:fb:0a:4f:80:6c:20:
c1:e3:2c:57:47:b0:72:cf:3c:09:3a:1d:52:5b:5f:
fa:f0:01:f0:d5:4d:a1:78:92:6d:b1:44:87:41:f8:
a0:27:58:0a:09:d9:78:4a:78:8e:6f:74:a0:4e:c2:
21:e2:6a:f3:e3:67:0e:e2:23:83:3e:dc:bb:fa:64:
dc:c8:14:35:9e:c4:44:67:7d:5b:0a:95:df:ad:9d:
61:82:5c:c1:8f:9a:c4:65:77:9e:11:0d:4a:1c:72:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:16:5A:5A:AE:C8:12:6E:87:0C:37:74:9D:6A:B2:64:83:9F:CB
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:62:6e:e2:0e:3a:f3:ab:e8:13:f1:de:dd:6d:2e:d4:8a:
bd:5b:83:4e:58:47:48:6e:68:12:e8:3a:a1:3f:2b:96:9f:e5:
c5:5f:ae:2f:37:88:8b:6f:bb:56:5a:76:59:c7:58:69:6c:ff:
83:97:d6:da:cc:d3:e4:1c:b3:04:41:db:25:35:65:b8:52:cc:
87:60:fb:b3:21:57:e9:67:87:43:40:fe:38:6d:aa:ac:cb:94:
e2:72:b2:10:46:fd:83:71:72:89:c9:b4:27:2e:4f:39:da:72:
a7:a0:64:03:ff:b6:92:5d:cc:0b:0b:f1:4c:09:c3:38:81:aa:
02:29:6c:93:7b:38:2e:80:10:64:bd:ae:1f:5e:a8:da:2b:de:
c5:85:a7:5a:e8:a9:0b:da:f3:88:34:8b:d7:3d:61:96:f4:9d:
0d:bb:22:63:3b:22:aa:0a:f7:1e:19:c8:ef:f5:7a:62:7e:22:
21:69:d4:e5:56:09:55:37:af:ba:0c:c6:70:0c:71:5c:07:ec:
47:9a:f7:d9:bb:13:bb:fa:a8:c5:c2:3d:a4:6c:47:93:0f:11:
37:47:78:50:fe:cb:3e:b0:da:e4:d1:a9:a4:7d:0b:dd:47:24:
56:dd:6d:2a:1c:00:cd:b0:8f:28:c2:4c:a7:de:f6:55:46:ef:
b7:0f:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:15 2025 by rpki-client