Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: a4iiIGZMoH4eZUv6aJQ9JmJpd34jQ70j/2T4X4gmlmQ=
Subject key identifier: C8:5E:B9:16:0E:17:B6:78:DB:A6:34:50:64:97:84:9A:9C:A2:1D:CE
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 0197BA7D9BB9EA554321EEDF30F2598DFDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 07:01:23 +0000
Manifest this update: Sun 29 Jun 2025 07:01:23 +0000
Manifest next update: Mon 30 Jun 2025 07:01:23 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: Wv9JzfTdy1P9fyH2e2Nr0YtFsP66m9kyhY7bO26yn6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:9b:b9:ea:55:43:21:ee:df:30:f2:59:8d:fd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Jun 29 07:01:23 2025 GMT
Not After : Jun 30 07:01:23 2025 GMT
Subject: CN=c85eb9160e17b678dba634506497849a9ca21dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:cb:ac:8d:dc:34:d5:9b:8c:aa:ec:85:bf:
61:cf:1f:b9:ff:b1:8d:1e:d6:ec:78:09:78:71:30:
90:65:5d:d0:cb:57:24:d9:d5:ee:eb:81:18:83:9a:
2d:e7:18:2a:69:e4:e3:ee:5b:2e:b3:14:28:c7:a6:
5a:d3:cb:45:42:f7:de:bf:cb:92:7f:87:67:63:2a:
cb:ad:7e:b8:fd:76:fc:66:ae:cb:ab:8a:4d:bf:27:
aa:92:9d:6a:52:94:00:34:9b:50:7b:15:34:95:fa:
59:94:4c:d9:be:b9:cb:a4:b3:e4:52:fe:3d:c4:78:
16:40:cd:72:dd:14:00:02:25:7f:fe:97:74:d0:56:
cb:f2:51:4e:b1:fa:d7:07:d8:9f:e8:4b:3c:d8:f5:
c1:e4:71:62:e1:02:5e:fb:c4:fa:de:a6:98:51:a2:
94:7c:31:95:f8:1c:9d:fe:7a:53:cb:8b:20:d8:f0:
a6:ae:6b:ed:ba:a1:3b:fa:d0:39:9a:75:f2:ca:77:
ec:be:e4:d0:f1:d0:3c:1d:2d:fe:79:d0:0a:a3:53:
cf:cf:6f:44:1b:73:c2:28:4d:af:f9:87:7b:30:36:
31:fa:7a:48:d9:9e:9c:d4:b0:1f:17:60:61:f9:ca:
29:16:02:1b:6d:d4:99:42:e0:0d:5c:a7:f1:62:d4:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:B9:16:0E:17:B6:78:DB:A6:34:50:64:97:84:9A:9C:A2:1D:CE
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4b:e6:ef:09:f8:8c:2a:12:23:8a:36:b6:90:6f:fa:e2:eb:
bf:fc:22:ba:4b:c3:94:91:b8:da:27:fb:e3:c1:43:5f:2e:5b:
6f:9b:b7:8b:cf:b1:01:eb:79:de:1e:07:4f:e2:f3:1d:f6:38:
e0:f6:32:35:0a:cf:b0:98:1c:fb:11:c0:6a:37:61:9f:2e:18:
f9:05:f9:0b:f8:6c:5a:e3:52:13:66:dd:6a:13:8d:24:e8:99:
6b:f2:60:c5:4e:b7:2e:36:66:c9:49:4b:5c:40:fe:eb:de:1f:
99:fd:fb:a4:3c:e9:fe:66:01:d5:4f:b9:de:b6:47:53:6f:71:
cf:b6:62:3e:e0:93:d1:46:b1:8e:89:6e:97:aa:37:1b:f8:62:
7c:64:f9:1d:c5:b8:0e:ce:c4:7b:db:fd:08:4d:20:63:9d:92:
44:85:31:3b:d7:a9:9c:84:70:05:7d:39:af:31:d1:0d:0c:0b:
f3:05:3e:a9:b8:62:75:b5:ca:3c:53:cb:9f:91:d8:60:53:83:
f9:77:1c:39:92:79:da:cd:31:b7:58:13:b3:b4:f6:76:56:95:
1e:9b:af:db:12:34:4f:2a:44:73:fd:b4:6e:55:a9:ee:cf:43:
71:dd:70:57:7e:c6:f9:a9:c0:61:13:47:c6:01:63:94:30:b7:
b8:16:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:40 2025 by rpki-client