Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 79C9eR5mwYmt4ITny3hvkZAg1kGPkY0uD6xn52qV7EM=
Subject key identifier: FE:12:34:94:E2:BC:11:7D:BA:C6:19:23:B3:37:41:9A:CC:48:20:D5
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 0199FBEA8B2FE46517230BC5444539388433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: MNBxTb7AYyNuRq+ECOZML6bDAr9qTVAguqvKMJPCV7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8b:2f:e4:65:17:23:0b:c5:44:45:39:38:84:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=fe123494e2bc117dbac61923b337419acc4820d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:60:f5:ed:72:12:47:ab:65:08:25:97:fa:
97:3a:b8:00:0d:68:88:df:c5:1d:bd:39:e4:4a:4e:
a6:53:11:39:d7:d2:52:6a:77:6b:b1:b8:a1:18:89:
1f:8c:bb:b7:a9:88:73:4e:dd:a3:ac:e3:a4:f9:c3:
26:10:f0:d9:67:d0:1d:9e:8f:10:14:e4:66:29:2d:
ee:75:60:06:d4:a3:7c:13:42:1b:4d:63:b0:85:9d:
d2:6e:14:71:c1:5c:f2:f9:8c:18:b3:6d:b0:38:2a:
07:1f:64:4b:d0:51:39:1e:55:e4:ee:5e:e6:8b:da:
a1:e1:a9:c5:03:29:97:5e:98:e7:d1:f0:ef:57:de:
77:39:8d:6c:ef:47:73:89:35:3b:e6:4c:66:13:fa:
93:11:72:8e:56:12:36:76:4d:33:e3:71:1e:c7:5a:
58:d9:a4:85:cc:7f:ab:b6:9b:5b:17:2a:a7:2d:a1:
bf:36:13:b1:8d:d1:0b:7b:72:cd:c7:2e:79:26:bb:
d8:e6:9d:4d:7e:0d:19:50:10:77:00:68:55:90:f4:
ef:8b:dd:ad:ba:47:6e:b3:27:e8:8b:94:5e:9f:28:
66:4d:f5:7a:81:46:61:da:c5:ed:5e:f6:46:e9:a4:
b1:68:fc:d2:64:a7:99:57:ca:f8:09:96:b8:07:b4:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:34:94:E2:BC:11:7D:BA:C6:19:23:B3:37:41:9A:CC:48:20:D5
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:ef:3e:74:87:a2:b5:6e:a8:c5:71:39:75:c6:a8:51:4f:
a6:5b:9b:cc:86:c7:d3:40:2b:23:62:d9:9c:77:ad:28:a6:19:
d6:50:53:c5:35:f8:e5:45:52:f4:9e:81:8c:37:c2:7d:c7:38:
59:3b:22:37:7c:a9:37:8a:b8:f9:dd:6d:23:f8:48:39:e3:58:
48:0e:cc:1d:e6:3f:dc:25:df:9d:3a:58:8a:65:a4:bb:6d:bd:
3e:aa:c1:4b:e1:e4:c2:c1:69:5c:ca:71:e2:1b:46:14:f7:8d:
89:cd:f1:a4:82:46:dd:d7:b9:53:c6:40:e6:7a:db:a6:f3:a6:
e4:c7:47:bd:b9:78:b3:66:80:d1:8f:3d:47:99:06:2e:23:cd:
2a:92:5c:9a:0c:ef:22:ae:44:b1:29:f7:04:ed:09:8f:6c:76:
36:98:8c:1e:13:99:2e:f6:1f:27:87:8f:08:7b:e8:9f:92:70:
b7:82:fb:0b:d6:72:57:5c:69:4a:7c:ce:6e:3d:79:00:1f:b4:
40:dc:b7:c6:d6:26:68:f9:11:56:9d:18:5f:e4:37:5f:2d:df:
0c:eb:74:b4:e3:1d:28:45:3c:5d:6a:89:97:12:63:5b:90:1a:
be:0f:69:61:6a:ed:c1:e3:1b:0a:c5:3b:89:10:41:62:a4:10:
88:40:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:01 2025 by rpki-client