Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: gYve8HeaM2MJcR9rOMGvnJfII6vYspttp0jMCR6m9KM=
Subject key identifier: 9D:40:3A:B5:0F:CE:FE:AB:1B:9E:A7:66:F2:F6:5B:C3:7B:A9:9C:A6
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019A04116D52511BEC81EE0BA32ADF14BDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 162C
Signing time: Tue 21 Oct 2025 00:00:42 +0000
Manifest this update: Tue 21 Oct 2025 00:00:42 +0000
Manifest next update: Wed 22 Oct 2025 00:00:42 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: 6yiLJ+e5s2uTO+5OyQop/iZv8/NDV8iaP5558GCdDOw=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:6d:52:51:1b:ec:81:ee:0b:a3:2a:df:14:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Oct 21 00:00:42 2025 GMT
Not After : Oct 22 00:00:42 2025 GMT
Subject: CN=9d403ab50fcefeab1b9ea766f2f65bc37ba99ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:0e:d6:b9:00:6b:a7:06:0e:84:31:fe:41:
d1:eb:8b:0a:69:a7:a9:d0:96:59:4c:92:03:f9:fd:
6a:f6:64:04:a6:10:55:de:c1:3f:c4:99:e6:a1:90:
40:04:b9:11:24:b9:09:8b:84:61:1b:bb:a4:c0:10:
4d:c1:28:7d:ba:f9:88:22:f8:ed:eb:8b:a0:4d:3c:
4f:46:2f:da:f3:fe:5e:e0:a6:b4:07:3d:59:98:78:
96:b8:99:63:f1:0d:fc:a7:e4:bd:3c:a7:e5:b2:b0:
5d:7e:03:1c:af:33:a2:8f:94:fc:33:64:a5:cb:bc:
8d:80:63:79:e7:47:5c:0e:98:fe:64:1c:b3:ba:60:
f6:4d:b7:86:47:9b:b1:80:a1:51:5a:23:13:a1:6e:
f4:ae:d6:d1:d4:a5:31:51:e1:5e:95:02:d5:a8:6f:
14:c3:bf:e4:b9:65:40:b2:39:35:a9:3b:83:fd:75:
cd:44:c2:84:f3:d2:34:99:90:ea:50:6c:9b:0c:cb:
48:f2:67:fc:d1:dc:6d:3b:5b:cf:7f:90:4b:42:d6:
e9:51:15:74:c0:78:1b:13:18:f2:9d:34:cb:8d:0c:
93:2d:df:ba:b5:4e:96:ff:88:c1:08:73:db:a4:7f:
42:de:18:36:b9:f3:13:16:e3:5e:3d:0d:54:22:7e:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:40:3A:B5:0F:CE:FE:AB:1B:9E:A7:66:F2:F6:5B:C3:7B:A9:9C:A6
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:26:cc:5f:78:43:05:cb:2c:f7:16:db:5c:e9:84:9a:4f:
d4:6d:92:ff:f9:ab:1a:51:d3:09:5f:b3:58:04:ce:61:6c:75:
3d:a3:77:a8:67:e0:90:43:1a:6e:fb:03:e3:cb:58:24:6c:18:
af:29:dc:bc:b0:62:a3:d3:4e:a4:b5:67:f7:ee:f3:c6:fb:9b:
41:bc:3e:aa:68:c8:46:ac:cc:3b:a6:6c:e0:d0:33:4e:cd:4d:
fd:0e:a8:f9:10:1b:e6:22:a6:13:1c:1a:b7:22:9a:e3:74:fc:
9d:0d:e9:8b:86:13:18:87:ce:f7:dc:2e:f5:93:7f:1c:c6:e5:
b9:5e:30:43:6b:cd:8d:5f:94:33:92:cd:91:de:34:63:79:31:
89:8d:20:e8:cf:34:b2:6e:93:d1:2d:4d:c4:e2:aa:20:d2:91:
93:14:ee:1f:47:c0:ab:64:c4:45:a2:14:cc:a0:ed:6a:67:35:
87:75:05:73:03:15:ec:10:51:3d:aa:21:4c:a7:01:65:42:c0:
12:1e:1d:b8:b1:ac:96:f6:36:b5:7c:d3:7e:ff:54:56:a5:8c:
47:38:ca:93:7b:03:30:af:08:82:3d:05:00:a8:5d:cd:44:81:
45:53:1f:9b:ff:9e:6f:a0:92:6d:ea:94:39:5d:a9:90:f2:e0:
b5:2f:f8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:58 2025 by rpki-client