Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: 4RBLRTcatWj1ZCugsZlb2mbNPd7W30P+BH5lVmJZob8=
Subject key identifier: 4C:3E:E8:D8:AD:ED:17:19:07:5D:91:58:8D:D5:D4:3A:D4:94:78:38
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 0198D5157107C49F1E07A182A9817590CA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0F1F
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: 0b2oARI0a+DpMUTRdCQCI5USZZhjOphrXIzVeCigr+U=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:71:07:c4:9f:1e:07:a1:82:a9:81:75:90:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=4c3ee8d8aded1719075d91588dd5d43ad4947838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:f3:66:63:af:c6:bf:e4:e2:2c:27:4c:b7:
56:61:97:5e:d7:32:a1:15:7f:ea:fe:ca:6c:6c:19:
55:b3:47:3d:65:0d:a9:f8:31:84:16:9c:48:95:81:
f9:f0:aa:44:f3:7e:35:b6:74:44:d8:cc:16:d7:9e:
c2:60:8e:a6:22:b7:5b:25:18:b2:be:e3:6f:be:6e:
78:93:27:36:f9:8b:52:4f:d4:bd:b1:37:6f:56:d2:
92:68:c6:9c:f3:2d:d8:54:12:95:f7:4d:91:77:6c:
ac:23:1d:b3:c5:8f:eb:24:06:43:b7:2f:ac:b4:24:
00:47:74:6b:47:72:53:0c:84:35:07:9b:ea:65:b7:
b6:90:3d:eb:dc:34:77:cf:08:98:a6:eb:34:58:f0:
8a:0b:ce:37:da:e9:f5:5d:08:4f:f7:cb:60:b3:6d:
5e:24:16:82:04:31:14:c2:66:51:e5:fd:d8:2a:45:
7f:7b:7f:5c:32:6f:8e:4e:f5:8a:5f:62:71:2e:66:
6f:f9:f0:11:31:71:54:46:98:55:2b:bc:a3:d1:97:
b3:8f:a9:14:c0:57:3b:ce:8f:57:e8:d3:e6:46:5c:
f0:e9:7b:50:0d:33:47:67:df:07:78:9b:fd:7b:4e:
38:4e:5b:07:f0:a6:83:be:bf:3e:b0:09:cb:ab:b3:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:E8:D8:AD:ED:17:19:07:5D:91:58:8D:D5:D4:3A:D4:94:78:38
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:9a:88:d4:0e:5a:13:c9:ff:76:cb:ec:7c:ac:0a:e9:8b:
a8:76:a6:6b:3a:8a:7b:63:df:16:4e:cb:d6:57:ce:0a:97:7c:
92:c5:f5:ca:fa:f7:79:74:b4:a8:27:eb:29:1a:f5:50:6b:b6:
a4:2c:04:d4:b2:f8:9e:d5:8f:c5:28:3f:85:4b:6a:84:14:6b:
cd:cb:bd:3f:e6:83:9b:82:b0:14:2d:20:e1:81:5e:21:16:a9:
3d:3d:95:49:c0:b7:3b:e2:ce:e3:51:8f:7c:7b:2b:70:17:6d:
ce:57:d5:b4:fb:09:5e:c9:62:3a:40:95:8e:de:c6:a2:f0:dd:
e1:b9:32:8b:05:e3:03:0c:4a:11:9d:50:aa:96:0a:df:09:c7:
c3:a1:4f:e2:49:fd:fc:bd:fe:eb:3d:f4:7f:a1:e1:42:63:bf:
06:66:90:24:05:e3:ca:3b:bb:a3:c3:23:ba:5b:27:93:0a:19:
77:85:01:03:65:1f:c5:d1:f0:fc:61:a0:dc:3f:2e:f5:99:11:
fd:0e:10:cf:67:57:f0:a3:8d:75:a6:b8:f7:91:6d:a3:e3:81:
4f:25:0b:42:b0:b5:2f:8b:21:2b:d6:c1:30:1d:e0:74:fd:f9:
3f:99:25:4a:c7:54:ab:6d:c6:83:71:d4:8a:b8:71:ea:0e:5f:
10:0d:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:18 2025 by rpki-client