Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: fWR3sWPSKxk6oJSXGmGYzPAUd1TX/tL3E4d1ggRz5gQ=
Subject key identifier: A0:A2:34:D4:B4:00:36:6A:60:A6:DE:46:23:89:68:7F:8F:14:91:18
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0199FB4618EE9FCA236B89DF4A934231B88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0C79
Signing time: Sun 19 Oct 2025 07:01:39 +0000
Manifest this update: Sun 19 Oct 2025 07:01:39 +0000
Manifest next update: Mon 20 Oct 2025 07:01:39 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: POLg4KxtbQwmuwMraaSy7wcC3iozfph3I/x8eXYSVr4=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:18:ee:9f:ca:23:6b:89:df:4a:93:42:31:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Oct 19 07:01:39 2025 GMT
Not After : Oct 20 07:01:39 2025 GMT
Subject: CN=a0a234d4b400366a60a6de462389687f8f149118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:ee:56:73:49:ca:b6:de:42:b4:e7:6f:62:
eb:9b:1c:bb:81:72:7c:b8:d5:a2:04:16:9d:d8:23:
4a:49:e1:82:a4:6b:d8:c4:bd:46:31:a2:f4:53:f1:
6d:cd:2b:23:28:ac:cf:08:06:bb:d5:4d:4d:92:5b:
f7:86:a3:0a:b5:1e:6e:2f:2e:70:0a:e9:b6:25:75:
8f:b3:39:27:26:65:65:57:d2:47:2b:41:95:e2:ef:
ae:dc:e0:e0:68:ad:36:57:a6:ad:b7:0a:c8:c7:8e:
51:f2:b2:fa:bc:89:54:36:8a:7a:12:92:0c:94:f2:
5f:a4:9f:42:7c:c4:14:d4:b0:4e:15:dd:69:9d:65:
91:ae:f6:ec:7c:45:42:42:59:bb:66:e1:b9:bf:5a:
8d:d7:0a:63:54:68:89:f5:d6:20:2f:6c:28:04:ce:
1d:af:15:72:cd:04:71:19:79:30:55:4f:b4:b0:61:
87:ac:7b:f3:a2:05:b8:71:41:41:4c:ff:6a:30:d8:
40:91:f3:8f:df:df:bd:0c:ad:be:22:fa:e3:f1:1b:
23:9e:83:3f:a6:9f:c8:06:99:27:65:6f:aa:82:d7:
c8:28:5f:9f:98:a1:21:9f:45:9d:ae:e3:2c:d3:7b:
66:0d:93:d8:7f:d1:1a:d8:95:12:4e:a5:40:41:0a:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:34:D4:B4:00:36:6A:60:A6:DE:46:23:89:68:7F:8F:14:91:18
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:e7:eb:03:5d:db:b0:07:2f:d1:b1:79:6b:c6:5d:ac:94:
37:e0:f5:d6:16:12:48:5b:6e:f0:af:a6:dc:87:16:4c:d0:38:
15:be:34:76:35:0d:18:73:bd:8c:46:56:63:d9:7f:7d:5c:2c:
68:d7:7d:f9:0e:fa:1a:40:e2:18:13:e8:39:c8:97:51:ba:01:
61:b8:5b:34:d6:62:5c:54:b7:16:fe:a3:89:49:62:a9:16:c7:
6e:ea:18:73:79:0c:ce:c5:3a:56:e7:30:af:43:8b:1c:c3:17:
61:c3:df:5f:73:6c:5a:4c:9e:37:fd:2d:04:5e:b8:2f:f1:d1:
92:ed:38:fe:5b:ab:46:95:4e:26:d3:e6:e1:16:6a:dd:a8:5d:
26:76:08:ac:9a:43:97:18:a6:4c:81:1f:0d:b4:fe:74:e6:ed:
b1:4f:c5:71:6d:b1:e4:52:b2:20:95:03:0c:b1:78:9e:33:73:
35:ea:69:c6:63:cb:b0:3e:26:38:d8:bd:49:11:53:21:80:2f:
8d:eb:5c:84:6a:2b:dd:63:b1:28:06:8e:eb:e4:bf:7f:fb:16:
9b:a1:e4:22:71:ac:6d:31:4b:23:8c:15:c1:bf:0e:76:8e:50:
92:69:14:8d:25:7c:fc:61:7b:44:54:80:1c:c2:af:3b:7b:cd:
f6:5e:62:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rhjun8oja4nfSpNCMbiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjUxMDE5MDcwMTM5WhcNMjUxMDIwMDcwMTM5WjAzMTEwLwYDVQQD
EyhhMGEyMzRkNGI0MDAzNjZhNjBhNmRlNDYyMzg5Njg3ZjhmMTQ5MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6buVnNJyrbeQrTnb2Lrmxy7gXJ8
uNWiBBad2CNKSeGCpGvYxL1GMaL0U/FtzSsjKKzPCAa71U1Nklv3hqMKtR5uLy5w
Cum2JXWPszknJmVlV9JHK0GV4u+u3ODgaK02V6attwrIx45R8rL6vIlUNop6EpIM
lPJfpJ9CfMQU1LBOFd1pnWWRrvbsfEVCQlm7ZuG5v1qN1wpjVGiJ9dYgL2woBM4d
rxVyzQRxGXkwVU+0sGGHrHvzogW4cUFBTP9qMNhAkfOP39+9DK2+Ivrj8RsjnoM/
pp/IBpknZW+qgtfIKF+fmKEhn0WdruMs03tmDZPYf9Ea2JUSTqVAQQq9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCiNNS0ADZqYKbeRiOJaH+PFJEYMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcDn6wNd
27AHL9GxeWvGXayUN+D11hYSSFtu8K+m3IcWTNA4Fb40djUNGHO9jEZWY9l/fVws
aNd9+Q76GkDiGBPoOciXUboBYbhbNNZiXFS3Fv6jiUliqRbHbuoYc3kMzsU6Vucw
r0OLHMMXYcPfX3NsWkyeN/0tBF64L/HRku04/lurRpVOJtPm4RZq3ahdJnYIrJpD
lximTIEfDbT+dObtsU/FcW2x5FKyIJUDDLF4njNzNeppxmPLsD4mONi9SRFTIYAv
jetchGor3WOxKAaO6+S/f/sWm6HkInGsbTFLI4wVwb8Odo5QkmkUjSV8/GF7RFSA
HMKvO3vN9l5iwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:41 2025 by rpki-client