Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: E0GTypsuZidWa8hqGmmSu1XO+5Q3q7+QP1MklMeL/bY=
Subject key identifier: A6:EB:2A:0B:55:37:B6:84:B0:72:1C:3C:49:33:F7:05:D5:42:5F:99
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 0199FF59799ED6B7EE44442395A6EB96EF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 05E2
Signing time: Mon 20 Oct 2025 02:01:17 +0000
Manifest this update: Mon 20 Oct 2025 02:01:17 +0000
Manifest next update: Tue 21 Oct 2025 02:01:17 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: CbITfXjmFOoEkjzDbeJaI7RFGRAoeDDKlG0wHdYIHZE=)
2: cP3ZObpESgmIwVeoeUilsXbe7dU.roa (hash: x1z5oGuQZIc9RbQHr2zNPztkI2YQUxkkGtsbysCQzFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:79:9e:d6:b7:ee:44:44:23:95:a6:eb:96:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Oct 20 02:01:17 2025 GMT
Not After : Oct 21 02:01:17 2025 GMT
Subject: CN=a6eb2a0b5537b684b0721c3c4933f705d5425f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:0e:14:1b:c5:42:69:1a:41:f2:a7:d9:2d:
41:f2:05:87:99:88:b5:2b:ec:7f:a8:ae:a6:8d:64:
74:f6:bf:47:a4:9f:5e:5f:4c:b2:e8:f3:68:6f:30:
87:29:f5:8b:73:0f:ac:2a:fe:e8:df:84:a1:37:9e:
27:3f:11:8e:4d:4f:4b:d6:29:b1:29:b1:f7:97:d7:
28:b8:8a:f3:4a:68:67:c9:bc:e3:85:ed:e3:15:75:
58:8a:49:7d:32:36:aa:7a:83:21:54:1c:a1:4b:4c:
3b:3b:2b:1c:42:e7:d0:9d:d9:1b:fe:c7:fa:8f:81:
2a:0a:d4:45:2d:93:bf:dc:33:d7:18:63:4e:c0:73:
10:37:1e:e9:4c:33:fc:e7:94:b1:7b:68:64:89:62:
4f:96:2c:a1:c5:5a:f8:8e:45:9a:21:fa:d0:5d:7a:
17:82:bb:69:b6:9c:37:41:00:c4:50:f7:ac:28:e7:
6c:07:8f:76:f8:a6:31:43:fb:a7:ac:52:ab:f9:13:
ec:1f:41:bd:3f:a4:80:d1:22:96:d2:a5:58:f6:fa:
a6:04:d8:0f:c3:1b:33:d7:13:e0:14:40:46:df:4d:
aa:dd:82:0c:e5:f8:57:cb:66:1e:7b:5a:a6:3c:4a:
fe:42:db:67:d0:03:7a:2a:98:68:b0:15:4e:16:aa:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:2A:0B:55:37:B6:84:B0:72:1C:3C:49:33:F7:05:D5:42:5F:99
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:c6:8f:bd:a2:2c:22:86:01:7e:e8:34:ec:39:95:3e:e4:
7b:f9:79:a2:03:7b:bf:b8:ae:22:37:2a:ed:fc:2d:79:ac:d5:
1e:cf:db:0d:d3:d1:3d:a9:b0:ae:78:7f:24:bb:8f:6a:61:fa:
30:3c:37:51:4f:96:db:36:c5:cf:ba:f5:a6:41:bf:bd:e7:84:
da:65:f4:74:1e:62:56:86:43:df:12:8d:9f:90:93:83:de:17:
61:96:0f:09:41:92:c1:6f:bb:4e:74:70:2f:1f:bb:9e:4c:a5:
44:e8:7f:e2:de:8d:ce:a7:62:fb:a4:f9:1e:cb:5c:bf:19:3e:
cc:5a:2e:54:45:87:b1:87:82:16:6e:18:7e:6c:77:a9:b8:ad:
bb:5d:22:c9:81:6b:80:ad:01:52:96:15:40:e2:af:4b:0b:77:
28:33:c2:d3:c3:1d:ca:34:50:c1:ed:ad:34:69:e2:d8:da:99:
a9:d3:e5:a4:95:7e:d4:e9:30:d2:c8:65:b1:ec:e2:c3:d3:9f:
29:80:97:95:df:19:64:ef:70:7c:52:dd:b6:fd:a4:e2:11:84:
81:34:1d:94:fe:20:1d:60:fc:c1:2d:6e:2a:af:d6:bc:d2:94:
32:47:7b:0d:0b:12:9f:6d:4c:cd:cc:90:a5:00:d6:e8:be:99:
3a:8d:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:16 2025 by rpki-client