Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: 4GJ8ehXB/IQXfjwJJ8eY3G0RjBVKXIuSzE43RPaF36M=
Subject key identifier: 77:8A:88:5B:B7:8B:F0:F9:46:47:55:9B:9A:C1:6D:CD:3D:C3:9E:D9
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0199FBEB7C2110FF5822A0B38D194DAC8813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: DbxeduiOAqXxsVh/tWzj/NfNf02IEuzj3c9+oBF26oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7c:21:10:ff:58:22:a0:b3:8d:19:4d:ac:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=778a885bb78bf0f94647559b9ac16dcd3dc39ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:fd:6e:98:ca:e0:41:ad:b7:9a:2d:62:13:
48:db:d6:dc:5f:09:29:f4:95:31:e2:43:4c:8d:a2:
ca:05:45:c1:5d:b1:87:57:18:14:17:99:82:6b:f0:
51:4f:97:92:32:24:37:c9:56:83:a0:f7:d6:29:3d:
2d:26:55:4a:74:06:4c:6b:33:4f:92:24:12:ca:31:
75:ce:24:a8:fc:43:07:bc:a0:d2:62:8d:07:1c:13:
35:82:04:1d:6a:5a:97:3b:37:10:a8:b4:2b:11:1a:
3e:0b:b6:b2:fa:d4:7b:a6:63:7f:22:f2:21:fe:b2:
aa:ed:6f:b6:b2:91:3d:ef:1f:0c:4a:de:ba:b0:78:
5b:5e:83:95:00:0f:d6:4f:4d:ad:e2:cc:e9:76:fb:
93:4d:76:a3:93:07:f2:58:ed:bf:97:47:05:98:4c:
30:b9:f6:e7:bd:1c:bb:75:4a:da:2d:78:c7:76:16:
e3:4c:60:44:45:f6:dd:c3:cf:bf:66:a1:6f:d8:65:
bd:60:80:d3:cf:b8:d1:f5:f4:43:f4:c7:e3:6a:61:
6d:35:12:8e:9a:c9:39:8a:c6:6f:11:2f:48:c1:0b:
1f:d9:fc:9e:a0:c9:61:00:6f:00:2a:31:64:ee:d1:
e3:c4:a3:89:42:39:a4:85:8d:de:d8:f8:86:5f:f1:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:88:5B:B7:8B:F0:F9:46:47:55:9B:9A:C1:6D:CD:3D:C3:9E:D9
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:56:7b:c8:d5:9e:1d:3a:aa:0f:85:0a:d0:cd:ce:82:c9:4f:
cb:07:a9:fc:0f:3b:7d:ac:00:0c:4f:d1:dc:e0:86:10:d3:65:
f2:10:86:d0:1f:45:5e:3e:0c:81:26:a4:58:8f:e5:50:3d:ed:
10:d0:dc:0b:c7:ca:d3:7a:54:c7:36:6e:3a:f9:e2:0b:0a:f2:
e2:69:4c:b5:3c:18:e7:92:33:ce:71:1d:b3:e0:b9:72:8a:b6:
20:07:6f:2f:97:90:46:d0:b6:7d:26:5c:a6:ee:36:71:05:5b:
f8:89:94:5a:ab:be:4c:08:74:ad:24:41:11:bc:ed:64:13:2e:
67:73:a7:59:e3:41:eb:cd:26:fe:1d:e3:04:7c:0a:4d:55:f6:
99:6a:e3:70:67:b1:c3:b6:15:ab:26:16:4b:70:83:f3:6b:62:
ed:fc:1d:9b:31:1c:3b:8d:f2:ad:58:66:b4:83:0a:73:56:e0:
f5:fc:2b:3f:36:a0:74:72:83:92:c7:d0:dd:4f:63:2c:7d:87:
0a:e0:d8:38:e2:f0:61:7e:83:89:bd:aa:77:2d:16:a7:07:40:
df:3e:f5:e7:d1:a4:55:f4:3d:a9:e1:4b:55:61:86:a9:3e:f7:
d5:64:4d:c2:3f:bf:d3:ab:f3:e0:75:01:a8:be:e3:13:59:5b:
fd:09:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:49 2025 by rpki-client