Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: RZnlo5RXrA+AWInmT1tvxCFttrnvvkF831fNm56H1QE=
Subject key identifier: 89:D6:46:73:FE:E4:8D:5C:ED:B4:97:AB:21:3C:84:1A:E6:E7:AF:52
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0199FD6B71E369E00A60D476709C93E4BA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 12C0
Signing time: Sun 19 Oct 2025 17:01:41 +0000
Manifest this update: Sun 19 Oct 2025 17:01:41 +0000
Manifest next update: Mon 20 Oct 2025 17:01:41 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: nSxFgvxuTuajhpT9Ynae8+bMK/DFQamnuWMJi3vMuok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:71:e3:69:e0:0a:60:d4:76:70:9c:93:e4:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Oct 19 17:01:41 2025 GMT
Not After : Oct 20 17:01:41 2025 GMT
Subject: CN=89d64673fee48d5cedb497ab213c841ae6e7af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:de:69:70:3d:90:15:a8:a1:09:8f:d4:02:
3d:1b:7f:22:96:05:e4:09:43:3f:0a:e3:12:df:40:
9e:db:18:24:42:71:87:d8:bd:1f:91:a4:63:33:73:
b0:51:5e:92:e3:2b:c5:05:ad:32:0a:82:d7:9e:6e:
33:b4:10:87:99:bb:15:6a:57:a2:41:53:e3:7d:86:
53:25:b7:52:f2:5e:be:3f:35:49:76:34:9b:90:91:
a4:08:69:e5:be:cc:5a:7f:ac:9d:46:ec:da:39:af:
f1:fd:f4:e5:18:b8:ba:ad:c0:58:6f:09:d1:de:49:
66:15:6a:be:92:4c:5c:50:39:55:eb:9d:09:f1:ad:
44:8f:b0:8a:09:0d:40:f5:6a:b1:7a:d6:4d:db:b9:
01:8b:7f:bc:c4:a7:eb:1c:4b:de:d2:a3:8e:fa:57:
6e:4b:0e:da:9a:d4:a6:c1:de:f5:f3:29:cb:1a:27:
57:77:b9:fb:e6:dc:d9:fe:a0:1e:ff:e4:da:3c:63:
fe:49:61:6e:66:1a:72:a9:3d:d0:7d:36:4c:b9:61:
df:2f:2e:6c:01:dc:27:18:50:c4:7c:99:fe:f8:6d:
84:2f:0b:5b:9e:f4:13:3f:84:27:1c:92:68:10:9c:
bb:a3:3b:0d:22:cc:84:b9:1c:67:7c:c8:95:c1:4b:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D6:46:73:FE:E4:8D:5C:ED:B4:97:AB:21:3C:84:1A:E6:E7:AF:52
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:7c:7a:f7:17:80:22:93:fb:df:fd:63:77:c1:3c:b5:f6:
39:3f:e0:a1:d1:7e:24:37:4f:2b:ce:a9:b9:5f:5c:48:90:6c:
b1:df:56:5b:7c:83:d0:e8:75:3e:e5:fa:cf:13:4b:10:c1:94:
03:01:f8:c2:6f:14:52:68:22:a1:44:6a:69:bf:b7:b2:ec:7f:
bf:ef:89:74:2c:c0:6e:a7:bc:ea:e6:f6:9b:94:72:82:53:00:
c9:09:de:a3:1a:4e:ff:5f:29:70:c1:db:8b:c9:79:e1:a9:07:
da:cc:c1:07:6d:89:67:60:63:26:d1:be:92:00:1e:22:fd:cf:
cc:dd:2a:ed:52:1b:36:e0:0a:62:66:33:67:04:d3:e8:c6:78:
b5:b3:c0:c1:09:90:9f:c6:6b:d2:95:9a:a5:4b:2a:fe:99:99:
28:e5:18:69:70:bb:31:39:6b:66:1c:d7:3e:2a:6d:72:dd:ad:
73:56:10:1f:cd:c0:0c:79:54:a7:e3:63:39:ea:28:e7:6a:52:
b7:43:64:64:2a:ad:94:a7:0b:0b:f9:18:bb:2e:df:4e:0f:21:
bc:aa:e3:e4:70:4d:80:d7:b4:af:a9:fd:90:d4:b1:5c:1b:c4:
a6:af:5e:97:85:5e:c1:46:9a:53:68:0b:ad:69:fe:5e:91:c9:
53:b9:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:27 2025 by rpki-client