Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: VdQ19kud56HbMptEJA/bJpRZ8VTIX6TtQZvSDb2HTgw=
Subject key identifier: DC:3A:41:8B:B5:FF:D1:FE:83:6D:7C:14:67:74:B8:3C:74:9D:44:15
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 0199FC583C484B7B358FA50E8DEB61EFA328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 064E
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: MX2n5YvGxczPxiv2xOa4iIsc/mv9Sa90wz9pmZcuA04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3c:48:4b:7b:35:8f:a5:0e:8d:eb:61:ef:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=dc3a418bb5ffd1fe836d7c146774b83c749d4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:5a:d3:56:38:2b:87:fc:58:3e:e2:73:b6:
ac:01:09:50:19:f9:58:0b:d4:08:75:35:66:2a:62:
5a:01:7f:c5:4c:d3:7c:18:9e:0f:7a:fc:6b:86:93:
1e:b7:b4:61:db:ca:ba:3e:aa:6d:8a:7b:d9:9e:95:
5a:c6:7f:5a:ba:88:89:a2:2b:4e:93:40:17:e4:5c:
0f:b2:2d:70:d0:e5:e3:71:9f:e9:58:29:39:05:d4:
e9:69:ad:ed:d8:99:d5:60:da:8f:10:4a:1a:c5:d5:
11:ff:03:69:a9:66:9e:94:1c:26:a4:84:c6:33:59:
4b:6d:c2:95:47:48:64:32:48:df:2e:60:d0:b1:a5:
21:5f:f4:87:cc:53:bc:0a:ed:8d:d0:83:93:44:85:
b3:8e:8a:1a:b0:5d:0d:5f:6b:05:1a:55:b6:26:de:
44:80:50:8f:ef:5e:62:25:cb:76:22:1a:be:08:4c:
b4:4b:ee:48:4e:21:28:b4:78:8b:a7:b2:d8:ab:61:
eb:dc:63:90:0d:0d:c6:a9:94:15:4a:ce:87:a9:1d:
01:6d:50:2c:07:64:b1:fc:a7:dc:c7:fc:fd:fb:e6:
21:a7:f8:ff:c9:2e:b4:35:11:71:64:19:14:06:27:
1b:49:98:3a:9f:68:e1:a5:14:5a:0c:38:df:2b:f3:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:41:8B:B5:FF:D1:FE:83:6D:7C:14:67:74:B8:3C:74:9D:44:15
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bd:c2:47:ce:65:43:45:c6:a0:02:9d:e7:8c:bb:f3:33:60:
63:37:c7:d8:7d:9b:1a:4d:96:5e:5d:bc:f1:c4:4a:5b:ee:91:
ce:22:3d:47:71:5b:70:14:c8:35:5f:59:8d:08:2e:54:79:9c:
de:ea:0c:17:ea:20:13:75:13:56:65:d9:a1:8b:ee:fb:c1:8a:
a6:d7:60:55:45:ce:02:4d:9b:e2:98:2c:a6:dd:a5:b5:27:06:
ac:d9:1c:ca:2c:4d:d4:ca:3d:9d:da:9a:ff:47:d7:24:83:41:
25:d5:a5:4e:af:d9:55:4a:50:11:b0:52:f7:6a:c9:8c:53:6a:
81:3b:1b:03:f7:e2:5e:35:52:0a:55:52:8c:46:c1:a0:85:59:
88:9d:96:33:c5:be:16:fc:34:7f:4e:dd:d2:0c:8c:a7:80:5e:
5e:c0:70:e2:5c:42:5f:77:ab:7e:91:cb:b7:8c:76:e9:76:52:
d6:74:65:cb:b4:e4:92:18:0e:d6:7d:52:62:0a:27:85:23:3b:
b6:c6:10:5f:76:47:29:f0:42:d9:8e:fa:e7:f6:bc:12:66:b2:
a9:69:49:a3:1a:7f:43:8f:6a:c6:fe:c2:e4:97:03:2d:17:19:
29:67:6c:db:28:11:a0:dc:c1:93:49:c5:d6:dd:7b:3f:59:4d:
4d:fa:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:01 2025 by rpki-client