Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: 1rjmTfIVVeysu5JmbMt5gfgzPxR6/OJVx8HWqkEI/DY=
Subject key identifier: 89:A0:95:07:49:03:25:B3:24:5F:C2:03:62:6B:E2:C0:6F:38:E5:EF
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 0198D6CD8AE13D22A34BC0AF8740F3CD75FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1590
Signing time: Sat 23 Aug 2025 12:00:51 +0000
Manifest this update: Sat 23 Aug 2025 12:00:51 +0000
Manifest next update: Sun 24 Aug 2025 12:00:51 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: okuwX83qpfPyKm/X8uLqnQCz6vrcg73OLzlaQ2w8pVU=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8a:e1:3d:22:a3:4b:c0:af:87:40:f3:cd:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Aug 23 12:00:51 2025 GMT
Not After : Aug 24 12:00:51 2025 GMT
Subject: CN=89a09507490325b3245fc203626be2c06f38e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:1d:b2:a0:b2:6a:17:1a:64:e9:95:ce:3a:
14:09:dd:5a:4b:ac:d9:9c:3e:1b:c1:3f:15:0f:b4:
58:53:a8:61:92:16:18:21:5e:56:3e:0c:d8:07:d2:
df:02:26:9a:b6:9f:22:67:ef:fa:aa:5f:d0:75:90:
84:3b:66:5f:96:9e:26:a3:21:a7:59:17:e2:25:46:
9c:7f:e5:bd:e3:4b:1b:6a:b0:c6:94:8d:7f:c4:ab:
6d:c3:b1:8a:5c:28:e0:59:c8:54:0a:8c:e6:d0:26:
1d:5d:20:90:a5:ff:b4:ec:f2:de:18:9b:c8:83:98:
b4:12:5f:1f:ca:32:18:5d:93:fc:ef:1d:54:b9:7a:
0e:b2:d3:6a:74:d8:fb:c6:76:fa:67:18:a0:a4:39:
76:5a:21:93:6f:0b:c3:45:06:3a:14:4c:23:4e:7e:
37:c1:24:e0:10:89:52:bc:19:bc:3c:e8:17:c5:c9:
c1:85:a2:3c:c6:4a:ab:58:8e:16:6e:0f:e8:df:9d:
df:90:8c:1a:b0:46:51:59:3f:f3:fb:90:90:a0:0f:
9b:f3:fc:97:eb:ce:ae:6d:63:1d:1f:55:98:40:8f:
33:5d:8e:7c:d3:06:0e:a8:7d:67:51:50:28:a6:ec:
e8:9f:f9:53:48:54:ba:6d:03:1c:3b:23:a5:f3:a7:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:95:07:49:03:25:B3:24:5F:C2:03:62:6B:E2:C0:6F:38:E5:EF
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:36:f4:e5:d7:0c:23:72:42:7b:00:f2:8a:f9:4f:99:ec:d7:
a4:14:32:4f:57:ad:70:29:df:d1:bb:71:54:87:b0:d8:f8:8d:
fd:bb:8f:2b:4f:8b:bc:3c:d5:7c:f8:a0:f0:aa:b2:11:75:5a:
b3:10:0f:60:c0:a3:96:2e:b3:f0:6a:bf:fd:8d:f9:53:2d:ba:
ef:cd:d7:08:71:a9:bf:2f:eb:35:60:f5:ca:11:27:02:f7:40:
c4:d3:82:ba:7d:9c:9f:41:52:7e:39:c0:10:f8:e2:50:38:d2:
5c:bc:c1:a7:3d:47:5e:76:92:52:31:a4:d7:1d:85:67:bc:33:
c8:b1:76:bd:6a:b8:77:42:e0:44:d3:12:87:70:b7:a7:58:06:
cb:1a:36:d6:59:a6:da:6b:b6:a5:ac:82:c9:ce:4d:ab:99:2a:
30:04:85:c4:b7:a5:7d:bd:24:ad:c5:c9:8a:d6:19:bc:9b:06:
f1:07:23:3b:82:30:9f:32:a6:06:e1:a4:cb:eb:be:51:6b:7f:
65:fe:f9:21:b9:1e:a5:de:19:30:32:1f:d0:06:c3:1c:5e:31:
25:1e:d0:28:32:a1:94:5e:70:09:16:be:3f:5d:b8:7a:de:0c:
18:9c:34:79:18:8b:8f:31:96:2a:27:d8:0d:28:3a:57:29:27:
c1:bd:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:50 2025 by rpki-client