Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier: JqMY3HI13bzvHBMoNdFU4n7DDIL2HVD2hNMhBEr/wAs=
Subject key identifier: 42:E7:36:64:EE:C7:DE:98:EE:66:5B:B5:58:AE:07:05:19:56:FC:24
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial: 0198D705BEC11AF56E4CE0F08AD9B540D29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: iGV/O9KZ0MbtwvfW6MhLsLRykYfiqSx+6C0NIe9ry0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:be:c1:1a:f5:6e:4c:e0:f0:8a:d9:b5:40:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=42e73664eec7de98ee665bb558ae07051956fc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:cc:ad:27:9d:5d:d1:6f:f5:56:28:58:05:
83:f3:b1:b2:f0:bb:e6:11:2d:25:02:8f:58:ba:6c:
ea:a2:21:a8:af:20:7b:1c:8d:38:68:26:28:69:00:
81:6f:ee:c3:b7:31:eb:17:04:db:5e:02:09:34:1d:
e7:95:46:71:1f:40:fd:95:da:c7:de:4c:c6:55:fb:
3f:94:72:b8:db:f6:2a:3b:fb:23:d4:59:8c:d0:10:
c0:5d:52:4f:70:d6:6b:13:e9:54:1f:d7:56:f9:17:
b4:6c:06:b5:1c:c9:8d:65:8f:97:29:45:91:be:e7:
34:1c:3e:ab:ba:d4:91:8f:e8:e5:a0:2e:b7:e5:b7:
a3:e8:31:5f:69:3f:53:b9:e6:4f:6b:be:7d:f6:fc:
90:65:e2:e7:fd:de:36:bb:55:8a:6c:cf:59:90:5b:
05:35:d9:a5:d9:79:60:99:c0:5e:db:df:31:f8:22:
88:9c:c3:59:d9:2d:f0:d3:06:75:96:7e:13:21:e3:
bd:de:e8:c0:62:e9:96:00:09:11:40:78:f6:dd:2c:
9a:52:b9:86:13:d1:ba:3a:4f:31:35:96:69:1b:df:
99:26:af:19:61:e3:32:72:e2:1c:31:d1:a9:3e:56:
55:1a:b2:7d:34:2f:ef:c1:d6:20:d2:26:5a:74:55:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:36:64:EE:C7:DE:98:EE:66:5B:B5:58:AE:07:05:19:56:FC:24
X509v3 Authority Key Identifier:
keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:84:f1:68:fc:6e:ce:a3:e9:0e:35:22:bb:c0:8b:99:d0:65:
7a:ba:17:8c:e1:7f:3e:35:95:57:d1:4b:87:90:ee:1c:9d:e2:
6b:fc:e5:0a:60:f7:ea:e1:3c:9e:40:9e:eb:34:88:04:d2:ff:
70:c6:25:4f:c4:37:da:ed:bc:90:72:da:77:ba:80:14:ad:6e:
f6:a3:8e:6e:37:d2:63:69:0f:44:4d:76:9f:ad:e5:a3:f3:52:
23:9e:43:cb:5a:45:fa:1d:a2:87:2d:f6:77:1f:99:95:0b:6d:
4b:ff:d9:2d:05:46:17:df:71:91:b7:89:e8:3c:94:21:70:c0:
78:3d:bf:1c:d1:8a:22:cb:79:2a:21:5d:03:32:a6:86:2b:ca:
1b:96:c7:0f:24:9b:1f:80:30:3c:95:09:82:8a:ef:93:1b:50:
21:d1:7f:2f:3a:ed:27:10:90:2e:5d:11:53:16:65:67:33:33:
18:1d:dd:8f:f8:f6:c2:18:07:07:9a:ca:f7:ad:94:c3:5b:a6:
80:b7:92:7a:75:31:77:ca:0a:4b:d8:27:b8:26:05:6b:f8:3d:
35:23:39:16:0d:0d:0d:80:21:19:5b:e6:e8:48:de:d5:d0:83:
a2:8b:b1:e7:7d:a9:fb:0d:49:fd:c4:57:63:73:63:d1:8d:0c:
f0:bb:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:13:53 2025 by rpki-client