Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: rVItQsir+0kZCack6ajtD9EuIj1rqhhzAImzYBRnSwI=
Subject key identifier: F8:D6:F1:05:C5:F4:E5:4B:20:5F:2D:28:09:10:6D:AF:FF:FA:DE:4F
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0199FC5865D4FD5DAA91568257242A5122B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0F4B
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: oAY55qaLeZLtEUi+2QYn+smBJmTMD8VMBC1SZu5yDhA=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:d4:fd:5d:aa:91:56:82:57:24:2a:51:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=f8d6f105c5f4e54b205f2d2809106daffffade4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:cf:a5:d1:c3:d7:1b:0b:41:66:1e:d0:81:
7d:32:04:cb:fa:ac:1c:0e:12:20:7e:22:f8:7f:50:
92:e1:52:3f:08:58:65:3e:f7:a0:e2:ae:c6:07:6e:
43:27:f4:a3:49:9d:53:d5:8d:49:f7:dd:01:a2:74:
d1:2f:55:ee:56:ec:79:bb:f7:78:30:73:e9:0d:30:
06:29:36:1d:6c:27:f8:ec:00:d8:af:7d:6d:b2:3e:
b1:e8:22:6a:6e:05:85:cc:53:fb:c4:0a:ce:51:a7:
0d:9f:8f:1c:17:e5:8c:38:bc:83:72:0a:80:41:7a:
cf:16:28:b3:42:93:64:eb:0a:9f:7e:83:f4:a3:a1:
cf:70:f2:40:2c:26:88:84:73:e2:6a:25:5a:96:59:
29:07:2d:50:5e:8c:6c:3f:79:08:85:03:f2:d4:54:
09:bc:7c:34:61:c2:45:ec:85:41:c5:ba:68:9e:66:
d2:c6:a0:36:2e:bf:1f:0f:1a:3c:9b:f9:60:a6:48:
ce:a7:5d:db:2e:5a:5e:10:cd:85:29:66:4d:8b:5a:
12:c2:55:34:fb:e6:75:13:e2:8f:35:41:a2:37:fb:
a2:f6:88:47:92:fd:f9:c1:e8:69:31:1f:21:39:cc:
cb:19:66:b8:c5:b9:df:10:70:2a:47:0e:c3:18:29:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:F1:05:C5:F4:E5:4B:20:5F:2D:28:09:10:6D:AF:FF:FA:DE:4F
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:7b:49:38:11:d6:1b:20:58:c2:d0:9d:f7:b9:80:80:bb:
29:32:7b:5e:47:e0:1d:22:08:7b:0d:e0:63:57:89:b7:85:f6:
e6:a1:84:dd:68:26:b5:35:9d:15:77:83:b7:4e:43:9f:35:82:
95:a0:1d:de:ac:57:2d:02:62:a9:ec:10:95:6e:6d:87:7b:26:
52:2c:58:42:e6:4c:a7:a6:b6:2f:d6:ff:e0:d9:e7:b6:3e:f0:
d2:ac:fb:2d:9a:e6:85:33:6d:16:b1:8b:78:5c:34:7b:c4:83:
f3:64:ba:b9:33:c5:5c:6c:4b:f8:24:2e:0d:bd:c7:a9:26:ec:
65:22:df:c4:3d:04:0e:67:6e:45:5c:ec:21:5d:f9:a2:b6:92:
a2:6a:09:33:36:7d:0d:68:b1:d6:28:57:96:8e:dd:46:56:cd:
db:4f:d9:e6:98:2a:cc:a0:78:ce:ab:f2:ab:c3:6f:fb:06:e8:
81:16:2a:0d:21:0b:81:d0:16:0e:52:3a:26:c9:1e:b2:e2:b3:
b4:f6:14:9a:85:d2:9d:64:17:21:ba:f6:be:66:65:ee:b5:55:
ce:5d:27:6b:9e:97:37:b6:bd:63:2c:15:fc:10:04:ff:18:93:
b7:93:1d:ef:4b:6c:e0:a1:30:93:3b:9c:f1:d5:79:7e:0b:fc:
d5:40:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:13 2025 by rpki-client