
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: LXrZL5kRfSzQsbeFWZXcXGJ55CKn1YojLfM+vfUNGw4=
Subject key identifier: 97:2A:D2:A2:03:AF:28:93:C8:CB:BC:02:EA:11:97:4E:94:C1:2F:01
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 0199FCC612307CFB8EB971EC914AFDF5DE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: MbmTjamIzZ64lAJiJkh/689tvqvjNL1UW350ZmlZVWA=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:30:7c:fb:8e:b9:71:ec:91:4a:fd:f5:de:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=972ad2a203af2893c8cbbc02ea11974e94c12f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:67:49:d8:0a:b2:71:3a:28:c0:72:82:ec:
fe:08:6e:34:a8:cc:19:05:1d:73:78:6c:fa:9d:19:
a5:f5:b5:29:2a:ac:4a:35:28:3f:40:6c:0f:66:0a:
30:86:96:e8:e8:44:9e:39:d4:f6:6b:3b:d5:25:22:
24:70:f1:98:08:aa:76:45:6d:a4:66:ca:4a:90:b3:
31:19:c3:59:af:06:ef:c2:f6:85:12:de:a5:91:93:
5e:80:18:ab:10:cd:ee:af:ba:88:32:80:64:b3:59:
f2:fd:33:cb:6c:89:2c:5a:09:19:67:81:83:5c:f9:
63:13:34:98:e2:80:46:33:fe:0b:00:2a:50:da:2c:
6f:10:19:92:3b:65:10:d7:89:23:0c:34:66:d9:f5:
ac:9f:9f:19:52:18:a9:42:4a:62:a4:06:13:19:b4:
53:f3:a9:eb:9d:f9:ea:e4:d2:b7:20:88:97:72:47:
83:08:f8:74:74:8c:08:45:8c:06:04:a4:79:2d:76:
88:c2:00:77:a0:26:35:0f:99:82:70:80:cd:c9:a2:
93:87:d9:58:01:6b:24:fb:e2:69:54:02:17:32:4a:
a9:00:cc:3b:5a:46:3e:14:95:b5:68:df:f0:c5:b6:
13:4b:0c:48:ef:cf:6f:f4:40:e3:c0:31:d1:5e:43:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:D2:A2:03:AF:28:93:C8:CB:BC:02:EA:11:97:4E:94:C1:2F:01
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:0e:ae:51:e0:a2:e2:90:b7:ac:b1:5f:3b:fa:aa:61:71:
80:8c:7d:1f:b0:94:c1:a1:e9:6e:e2:aa:26:6d:c0:ac:80:d6:
05:55:2c:97:d3:b7:fa:cf:41:55:d3:26:af:b5:7e:bd:8c:e1:
ce:b9:aa:23:ee:9f:7d:3f:f9:3f:92:42:88:0b:08:43:8b:2e:
fb:69:fb:a9:34:17:86:be:dc:d0:69:44:6c:19:63:f7:12:c6:
70:a6:1a:f8:f0:9a:7e:21:9e:ce:76:66:13:53:9d:84:4b:8a:
8c:1a:83:05:af:af:39:e3:1e:11:15:fb:fb:30:13:57:74:64:
bb:f2:01:67:4c:5b:bd:5e:8d:2e:29:5e:af:60:13:28:a2:84:
0d:d3:aa:4d:14:ec:c0:f0:5f:fe:5a:b6:ea:d3:31:ea:9b:e0:
25:3c:27:93:cd:7b:b1:21:f6:4a:74:71:ec:14:92:a7:45:41:
6d:93:f6:fc:99:08:23:2b:ac:5d:1d:0c:8d:22:f4:a1:0c:6b:
27:16:c2:34:91:3a:32:e4:72:73:04:9f:9e:2d:e1:1a:e1:02:
0d:11:9e:c7:2f:bd:03:85:0b:6d:c9:a1:14:c8:e4:f1:57:33:
9b:08:88:1b:67:9b:51:5f:01:a1:88:80:0c:8c:e9:6f:d9:89:
51:27:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:47 2025 by rpki-client