Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: ar2guqQad+NqdVq2yGJipvBkhmB/X/0bgv++tcY/A04=
Subject key identifier: 93:8D:BA:F9:83:CA:22:FE:C9:4A:CA:1B:5E:57:CD:E1:0A:13:7B:DA
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 0199FC8F7B29DCA80170355A9292C7F42D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0CE6
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: fPS24CGVobX1Ooyq5wxiGq75z+baX5UinA2DszPj54Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7b:29:dc:a8:01:70:35:5a:92:92:c7:f4:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=938dbaf983ca22fec94aca1b5e57cde10a137bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:ce:f5:2f:63:d6:37:f7:25:06:ff:b1:88:
83:9f:8f:56:1b:2a:a9:03:41:99:16:c1:b2:5e:f5:
4f:7f:bf:57:9a:1a:9c:eb:e0:7d:e2:a0:c3:f1:c8:
d2:c5:34:b7:df:40:aa:3c:80:82:8f:65:f5:1a:78:
40:74:aa:e3:4c:e8:d9:44:9d:32:fb:15:17:46:ed:
4f:fc:dc:e5:43:2d:5a:73:be:83:dd:10:93:74:42:
2e:f6:55:b2:3d:24:dd:89:d8:7b:b1:3a:fc:d4:1e:
06:7e:f2:4c:8f:c5:89:34:db:1d:3a:5f:7b:3d:fc:
44:b9:24:0b:15:48:89:4c:71:ac:6c:ff:3f:19:d8:
b9:d4:a4:7f:71:64:b0:cb:eb:63:34:72:80:ab:09:
d0:ce:be:b5:65:2c:2c:46:3b:0e:59:8d:e8:4f:7f:
44:b7:36:93:57:47:5f:95:9f:76:e9:34:43:53:66:
9b:81:9a:e0:5d:d8:c9:72:b1:4f:5d:44:11:43:41:
4f:65:96:21:3d:a5:60:c6:e4:dd:63:8b:96:e2:d8:
56:71:e9:a9:60:e3:cf:7b:b4:8b:2c:05:dc:9c:9d:
65:a0:dc:2e:dd:39:89:8d:3c:3d:7e:0f:a8:dc:de:
bb:97:8c:86:74:b0:7e:3e:95:2b:6a:aa:b9:22:4e:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:BA:F9:83:CA:22:FE:C9:4A:CA:1B:5E:57:CD:E1:0A:13:7B:DA
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:07:65:a5:d6:a8:f6:7c:ee:de:74:39:31:fb:b1:ca:e0:
26:f5:aa:42:80:be:d0:59:4c:54:ae:ca:0f:c1:ef:58:d4:34:
f2:5f:b3:1a:07:c7:94:2a:24:06:7c:15:5f:6d:3b:c0:e1:c9:
50:24:45:98:70:86:82:4f:f6:95:01:e2:cb:fb:26:0e:e1:c3:
54:7b:9e:ef:58:2c:f1:43:95:29:5d:2f:bd:15:3d:bf:19:f4:
88:ad:f6:41:a0:f1:5e:08:6c:a9:b6:d6:3f:f5:af:34:c6:93:
85:56:22:18:ae:bf:fe:4d:0a:39:91:6f:df:9f:83:f5:cd:9a:
ff:ca:87:7a:8b:a7:aa:3e:53:6f:0e:78:f3:82:ae:ee:ab:f2:
ab:d3:51:7d:48:97:cc:46:7e:10:a2:fe:da:3b:42:6f:f0:ba:
bd:db:56:e3:5f:f9:d2:d9:28:8e:df:f8:14:88:aa:ff:43:4a:
5b:70:85:f0:cc:23:79:90:cf:ef:bc:ea:30:73:c1:c4:5e:76:
53:56:c9:e2:e1:e0:fb:f7:d6:2d:21:74:39:4a:2f:46:a0:d7:
f5:88:91:2d:bf:1e:ed:fd:ae:e3:0e:aa:85:61:cf:9f:98:7a:
ab:b8:c4:86:1b:c9:3f:6d:e6:62:f9:61:c2:63:e9:6f:e1:ea:
25:39:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client