Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 7eXcZSJI0C4IX+Ru0b1z2U/eLPoOLdPspDWD4Z5UFoI=
Subject key identifier: FD:21:DF:E3:C9:5D:CF:4C:54:29:C4:11:89:B9:DF:D3:50:71:32:24
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 0197B6A1380289553B0D8CB5EC90CE6FB0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: sfrqyWXHgtZIXZiY/teBtFox5ZANT2kD0lk/zF6jngM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:38:02:89:55:3b:0d:8c:b5:ec:90:ce:6f:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=fd21dfe3c95dcf4c5429c41189b9dfd350713224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:9d:88:1e:ad:c7:7b:dc:f7:68:90:51:23:
54:49:96:b5:f2:4b:af:31:84:18:ac:f8:74:25:64:
31:44:1b:f3:f5:bc:72:56:8e:26:89:91:82:46:6b:
55:fd:80:a2:d7:ae:4a:35:97:b1:57:cf:d6:24:71:
85:b1:74:79:3d:a9:f2:7c:3a:48:4a:4a:12:3f:90:
6c:20:94:a2:46:26:a1:fd:87:86:2d:66:ec:73:de:
7a:54:eb:2d:ad:cb:4a:38:fa:72:58:0b:f7:76:3d:
04:92:72:5d:17:19:65:0f:2c:76:79:24:d3:89:d1:
f7:7f:f4:fd:c0:80:5a:c2:c6:11:71:39:11:23:64:
31:29:33:2c:d5:f6:7b:20:bf:4d:83:38:7b:5b:da:
d3:87:73:e0:79:0f:b3:2b:9b:05:d8:fa:2b:cd:0b:
86:f3:a8:44:ed:b9:90:4d:95:04:2e:57:27:f6:72:
0a:ea:0a:00:7c:62:06:ad:2e:f7:bb:96:50:0b:e3:
27:28:77:48:15:7d:26:c6:0f:85:53:7c:45:6e:df:
01:bb:bf:ba:cc:e3:6d:56:0a:72:1b:11:83:f1:6f:
18:57:46:9a:8e:da:d3:06:41:77:a2:bd:f4:01:b7:
a8:f9:b3:63:43:2b:0d:a7:5c:32:e2:5a:a7:e9:60:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:DF:E3:C9:5D:CF:4C:54:29:C4:11:89:B9:DF:D3:50:71:32:24
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:21:4a:a6:f1:3f:49:7c:02:5b:37:c5:58:e8:ea:95:5d:68:
ca:36:61:92:c3:0c:72:29:56:6a:74:3c:d3:2f:a5:a1:09:b7:
19:f2:99:21:02:9a:68:c1:0f:e8:8e:2f:b4:86:d7:5f:73:c3:
49:60:6f:c5:18:ce:7c:cf:07:de:e0:9b:0b:f5:ff:07:76:2d:
3a:a9:5e:7e:08:7b:95:97:f6:01:ff:e7:b2:77:d5:f6:45:fa:
29:57:26:32:cf:71:51:65:8c:bd:42:fb:e2:7f:a9:d5:7e:b4:
f1:05:0e:41:3f:b7:0e:62:51:9d:72:4f:51:6b:0e:a7:04:a2:
3e:7c:77:01:1e:5a:62:27:b8:a6:4b:08:3b:fe:61:24:0e:1c:
73:2c:46:a9:c3:6c:03:0c:de:70:d4:08:6d:ea:64:ea:9c:8a:
90:6b:0d:e6:8b:61:44:59:d4:6d:5f:f4:4f:46:7f:10:9f:31:
a5:8d:d7:6e:e5:bb:65:7c:85:2c:9a:24:58:bf:06:2a:6f:1e:
02:56:b0:1a:e7:e7:d9:af:0e:24:b7:fc:76:c0:23:44:e2:dd:
63:5b:28:e2:5f:9a:40:92:cb:3a:fa:bf:88:29:cf:7a:bc:1c:
22:af:15:65:eb:b3:71:c8:d6:d9:bb:6f:44:2a:d7:59:ae:75:
3e:44:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:17 2025 by rpki-client