
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: YSQHn5bkKkVoZ8WWskcSesX9Ij/1PkG8jNLUJhfGAo4=
Subject key identifier: BA:9B:49:42:F0:1F:78:0C:14:9B:04:E1:11:52:9A:75:7C:F8:2B:B5
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 0198D54E8D25F39126E4587620363030CEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 0607
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: s3Yy2N4TREwyBuQftxng8aVEBo5qmlwESLnp3i/XyoU=)
2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8d:25:f3:91:26:e4:58:76:20:36:30:30:ce:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=ba9b4942f01f780c149b04e111529a757cf82bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:e3:eb:4f:04:3e:52:e8:0b:5d:60:35:67:
71:c7:9a:60:17:8c:03:36:c9:08:bc:9e:9d:1b:ef:
68:0c:b5:c1:ff:4b:2c:e1:66:f5:7f:3b:d6:af:24:
c9:e4:b3:1b:2c:d4:14:1e:80:d1:76:4d:45:ee:91:
44:de:f8:ad:0d:94:27:99:b0:33:33:48:65:ce:c8:
b1:3c:ed:40:7f:5a:25:6d:6b:ac:7e:9c:a5:5c:0c:
3e:b0:15:eb:b2:49:59:02:2d:eb:8a:57:1e:64:37:
f9:6d:ed:47:58:3e:93:3d:83:73:f9:ad:f9:23:97:
41:1e:2a:b3:59:26:a8:b1:bb:53:d5:44:3a:b7:6a:
5c:75:56:84:56:f9:a7:1f:25:5a:99:51:18:c9:1e:
24:97:36:d4:7b:b9:ea:c4:1a:a0:c2:44:ed:89:16:
19:a0:b7:b3:53:01:c6:fe:c7:ac:88:f0:65:c4:c3:
c9:7d:ed:f5:06:d6:46:f6:79:6e:92:60:60:47:4e:
fe:d8:b0:8c:7f:53:7f:d0:00:46:0e:81:5d:fd:d0:
eb:20:ed:66:e6:99:ef:b7:f4:ba:6a:82:2c:67:6f:
e0:da:e2:eb:63:76:30:8e:61:44:95:c1:0e:83:2f:
4c:8e:bc:ff:0f:65:78:ac:5d:fa:79:64:aa:4d:b4:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:49:42:F0:1F:78:0C:14:9B:04:E1:11:52:9A:75:7C:F8:2B:B5
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:54:c3:a9:a2:c8:b3:4d:22:a7:5f:a6:07:ec:e6:b6:83:85:
59:fc:2a:d8:79:b1:0f:b0:08:a8:f4:64:b9:a2:41:eb:4d:b7:
61:16:f9:6f:c6:e8:da:e0:d7:46:a9:03:01:ea:d1:80:0d:4d:
48:13:76:86:e9:b3:46:18:6d:a8:82:df:ec:2d:23:c0:08:4a:
03:ab:cc:38:20:ce:23:d9:2f:cb:cc:10:42:af:72:ae:63:eb:
73:50:c1:3e:3a:9e:f3:3c:c4:34:b3:d8:af:37:a0:97:5a:88:
5e:7d:01:83:df:aa:c4:6a:09:4a:7d:ac:e3:67:b2:fd:5d:2f:
27:1b:8c:f9:5d:a9:f1:e4:9a:06:a4:6e:ed:8f:a7:46:56:cf:
0e:a6:e0:20:1e:53:e7:f5:be:1d:1b:55:fc:36:63:6f:99:2a:
6c:51:c4:b4:33:fe:a5:e5:f2:d8:56:45:0b:98:8b:26:1f:8d:
bc:de:a9:7b:2b:3c:65:26:39:ea:df:41:92:5c:fd:c1:ba:8f:
17:aa:c0:5f:45:79:8e:c3:7d:ed:fe:9b:1a:a7:d9:1b:96:00:
53:60:13:97:d3:a9:2f:6b:40:be:55:a1:3d:d2:8d:51:c4:e8:
8f:dd:ee:f6:4d:d9:48:25:bc:5f:a3:78:43:2e:64:db:af:f7:
c0:2c:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:55 2025 by rpki-client