Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: 4MrlGsR/ZtfmHIdLx6pjUU6ksuQTtJdng12CtAjy9xs=
Subject key identifier: B3:0D:3F:48:73:63:0F:6C:5F:23:CB:47:DC:92:D0:E0:76:F5:95:4C
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 0198D62985FA78DD012B72DA4CFD96BE9FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=)
3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: iHnjAlVR85zYOVndKraTJ62Oo9ZA62mY6VeNB3PX4Ac=)
4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:85:fa:78:dd:01:2b:72:da:4c:fd:96:be:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=b30d3f4873630f6c5f23cb47dc92d0e076f5954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:d6:ad:49:ab:f7:48:c1:f5:0b:aa:09:02:
7f:f2:61:3f:87:69:34:f5:7d:b2:9e:15:2b:4b:a0:
0e:df:cb:e8:b5:55:80:60:55:04:6d:fa:a2:cc:00:
e0:50:06:ad:5c:67:64:e8:53:36:6f:6e:96:ae:48:
d0:e2:30:6e:77:89:ac:9b:34:49:26:60:c9:73:6c:
e6:72:94:b9:f3:80:cf:d3:45:1f:0c:9e:5c:f7:99:
6e:6d:54:8b:0a:78:10:5e:4c:c2:af:0d:06:ce:ad:
a4:9d:2f:fb:59:fa:a2:e0:d2:1e:84:ec:c5:3d:9f:
36:4e:3c:4a:22:3e:8f:7a:01:50:de:c0:f8:9c:66:
79:cb:8e:df:4d:d2:dc:5b:26:1c:ee:4a:cc:31:16:
86:53:de:be:ff:d8:ac:12:63:be:00:6a:bc:88:4d:
57:e8:db:cb:27:37:cc:82:2e:9f:c4:c4:7b:20:4e:
89:38:9c:1a:18:7a:42:45:43:e7:dd:40:25:b4:e2:
f5:b3:25:3d:97:21:ca:23:6b:24:27:e2:c3:d1:fc:
9b:41:4f:96:36:db:c8:61:b3:f1:2a:42:fd:7e:36:
80:e6:6c:00:d1:d5:ba:1e:40:a0:c6:60:d1:2d:3c:
9a:63:dc:69:b1:4d:6f:ec:e4:a5:f7:26:73:4b:70:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:3F:48:73:63:0F:6C:5F:23:CB:47:DC:92:D0:E0:76:F5:95:4C
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:07:ef:b1:3b:ce:d6:58:1e:06:82:19:07:b8:db:7c:07:
f8:b1:56:aa:0c:38:72:ff:bc:25:8b:c6:85:30:af:57:1e:28:
f5:31:3e:11:46:2f:76:40:67:60:35:9a:c3:f0:dd:90:ee:7c:
05:f5:b2:9f:4b:f9:b6:65:07:e3:74:f0:bf:71:db:bd:ac:de:
f8:56:72:a7:e3:2a:23:9e:17:47:6c:ab:2b:d4:18:20:e5:8d:
29:92:6c:a6:18:99:04:0c:1f:2e:a8:3a:d4:3b:8c:62:fd:78:
28:49:d2:23:b1:8b:98:cc:e5:08:22:66:ee:e8:84:1a:fe:46:
b7:36:a8:14:9a:d9:f4:1b:6f:4c:f4:e6:43:fb:9d:d9:85:36:
91:be:54:48:83:eb:2d:10:0c:26:c9:db:58:2c:b9:af:dc:09:
8b:2a:e1:33:11:46:2f:79:b3:d5:df:6d:ea:af:cd:a5:e1:3d:
a1:43:78:db:f6:28:4a:90:ea:3a:13:cb:06:98:ea:32:d6:75:
7d:d1:49:02:8d:92:d7:9e:e8:11:4e:3a:ab:91:97:d6:1d:14:
6b:62:1e:65:69:3f:ff:55:90:cb:69:9b:a9:6c:fe:85:a3:2d:
6c:00:c6:65:04:c9:96:e1:f0:bd:d6:bb:54:4c:fa:f3:93:6e:
93:2c:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:23 2025 by rpki-client