Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: aWU0VWbG2jPfz4K0OEbyuq6kHinjohbw/5aIxd143qQ=
Subject key identifier: 73:8B:88:4E:6C:5C:DF:6B:A5:5C:13:8F:CD:26:F5:9B:9C:25:5C:02
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 0198D4DFEC4252F463D8658DDCC2B4A64A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 05B5
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: OJ4L0gcGjyEiXrZdIXyzWa+VL+QprWrkMg9Ns5L0XLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ec:42:52:f4:63:d8:65:8d:dc:c2:b4:a6:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=738b884e6c5cdf6ba55c138fcd26f59b9c255c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:c9:a2:88:46:01:fd:6f:c1:93:9f:07:c6:
b9:42:a8:25:80:2d:4e:c0:16:6e:f2:fa:80:8e:2f:
fa:e4:10:cd:15:1e:0b:56:19:12:7c:9e:21:69:9a:
65:ab:6d:c9:3e:98:ba:c7:a5:76:3c:c4:e8:fd:64:
16:54:01:d5:43:e5:c8:aa:cf:e8:40:cc:77:95:80:
49:06:b5:ad:d2:e6:b4:85:4d:80:08:f7:aa:6f:54:
3b:85:f9:7f:43:cb:6c:0c:1f:ff:d4:dd:59:1a:1f:
20:97:2c:ae:df:c3:51:06:66:56:bb:f1:e8:36:d8:
f1:5b:c5:89:3c:51:ca:76:f2:24:64:dc:22:27:f8:
df:2a:88:c9:29:63:b8:80:51:3f:bf:d9:c5:79:ad:
d4:1e:0a:1c:29:6d:25:a6:2b:c4:b7:db:0b:3e:fd:
9d:53:e3:04:7f:1d:88:2d:50:b3:7c:b3:24:c9:bf:
dc:aa:9f:19:b5:e8:3d:5d:56:a3:bb:29:5e:60:85:
26:c9:8a:09:45:95:0c:0c:fa:fd:af:4f:b7:b8:42:
a7:df:07:ab:d1:1a:2a:05:0f:dd:b6:1e:3c:02:89:
95:cb:37:ad:d2:a3:04:53:0d:ab:68:22:13:32:21:
f5:d0:ee:99:00:35:5c:68:3d:7f:e3:79:dd:b2:72:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:88:4E:6C:5C:DF:6B:A5:5C:13:8F:CD:26:F5:9B:9C:25:5C:02
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:da:4c:20:db:e8:dd:1e:d8:7a:eb:3a:79:b9:52:bb:3a:
f1:da:a7:26:d3:c4:87:61:8e:9e:73:2f:27:bc:6e:47:4b:1e:
b6:b1:9d:f0:5c:ea:f3:d6:27:9b:73:f5:99:d4:a7:3f:f0:0b:
85:47:75:2a:c4:d2:eb:1f:30:1d:3b:f3:a3:17:19:93:f8:8a:
95:ab:45:cb:a3:fe:3d:76:71:19:86:cc:51:1a:fc:4a:21:42:
e9:09:91:46:a3:16:75:f0:46:ff:9b:da:9a:34:5a:7a:2b:72:
95:ee:e2:58:88:01:95:53:96:7c:b1:fa:0b:f7:d8:ab:27:e1:
70:a1:0d:32:2b:f2:29:12:7b:95:b8:db:c2:f2:b5:bf:b4:b6:
ea:c1:2e:ba:13:e2:0c:ef:11:f2:54:74:4f:d4:3d:4a:c5:23:
33:ac:6b:c6:47:c5:67:73:c4:8c:c3:c6:8d:53:1f:ce:d6:07:
70:4a:ba:74:6d:40:be:e2:09:ad:02:64:05:64:92:f3:e9:3a:
24:b2:a2:57:e3:a8:8f:e5:d7:2e:58:a7:5c:9a:00:d8:61:a7:
0d:8b:b6:b6:ef:d0:fa:11:50:04:f1:3a:0d:fe:a2:06:49:35:
dc:fe:99:bb:48:44:98:38:e4:aa:1b:30:20:51:2c:c9:b0:81:
d8:c6:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:07 2025 by rpki-client