
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: jWT6KsnG/35Rlj0jxl9VPv7qdGCux6sjhJC6NHjXNTA=
Subject key identifier: E7:24:41:75:DC:59:F4:F4:F0:72:B1:24:75:F9:52:D7:0B:2C:62:81
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 0199FC8F7D3CAF8E67B5E2B4149E1B1FB140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 1411
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=)
2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: QOUBA0F3gC2clEqWdrCPq8/qaGLMuN8etomFJJa19e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:3c:af:8e:67:b5:e2:b4:14:9e:1b:1f:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=e7244175dc59f4f4f072b12475f952d70b2c6281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:54:8a:96:c8:92:c5:03:23:60:0e:c7:a7:
e7:fc:4c:ec:07:47:46:ed:6d:ce:bb:68:11:46:9d:
11:af:52:ae:d8:ad:49:51:77:ac:e8:7a:57:6c:a3:
8a:75:f2:64:ac:7a:61:9f:5f:24:d6:a5:5e:1e:02:
03:c4:df:cc:80:9c:77:fd:5b:0c:5a:42:ec:79:94:
d5:ec:37:f7:07:f6:1b:df:60:eb:14:ed:14:79:10:
23:41:2e:8f:26:db:1b:cb:c5:33:37:f3:90:39:6e:
e0:79:16:6e:3e:40:f0:62:8c:f7:4d:48:9c:f3:ef:
4a:1f:09:1f:28:b1:bc:4c:2d:a6:6d:f9:ca:61:b5:
04:3c:2b:a2:0a:f0:f2:24:24:f9:0e:02:86:e7:27:
d5:19:2c:51:d7:9c:39:7b:14:4b:ca:f0:e3:c9:8d:
40:b1:49:3b:e1:8e:5e:c4:80:06:98:f8:df:3a:9b:
7c:50:30:be:06:0f:12:68:00:48:61:51:95:b8:e8:
3b:55:39:c2:6d:57:fa:3d:51:6e:ea:de:4c:4e:97:
3a:3e:08:87:c3:74:d2:23:c4:5a:aa:42:5d:11:a9:
40:1b:db:e2:97:c4:30:58:c8:02:60:2c:ec:79:c6:
4d:51:d1:f9:b7:e3:35:44:2f:4a:1f:40:c2:43:fe:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:41:75:DC:59:F4:F4:F0:72:B1:24:75:F9:52:D7:0B:2C:62:81
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:47:5c:e4:10:7a:a9:b4:ce:66:68:f3:c9:84:3a:0e:bf:a4:
52:5f:c6:cf:3e:6c:18:5a:8e:93:55:28:2f:55:c4:6a:ef:b4:
1d:66:5f:d3:c0:e5:df:e3:b3:4e:87:d6:3b:1f:1e:97:7c:05:
dd:16:6e:8f:81:3c:68:d8:e0:f5:26:aa:a4:d9:cd:49:e8:e6:
8f:7e:39:e0:48:b1:19:da:10:58:0a:6f:f7:16:68:e2:9f:34:
ef:a1:7b:c4:6a:71:ba:7d:ec:82:c9:5c:9d:3a:eb:31:38:ec:
a6:58:ed:a2:02:e4:c4:ac:75:26:33:fe:6a:93:80:59:dd:a3:
fa:18:9f:4c:df:a2:20:09:5e:98:59:8f:9d:ba:e2:ee:27:fe:
80:87:4e:13:38:8d:f5:7e:13:3a:30:58:ef:94:43:af:f0:a4:
5e:4b:e9:39:3d:a9:0f:6b:15:90:8e:58:3e:c7:60:c5:8f:f1:
cc:23:e1:a8:78:6f:bb:66:73:3d:5f:9e:bf:15:6c:4c:7e:ef:
e9:ea:46:57:c1:30:8e:f5:46:63:2c:cf:bd:72:f7:f5:27:28:
7c:f9:5d:2b:71:b2:47:11:56:84:d6:40:d6:89:8c:63:38:f7:
8f:b4:82:1c:1f:ff:ef:b9:2b:ee:99:55:93:4b:6b:c5:39:25:
d1:c8:f1:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j308r45nteK0FJ4bH7FAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5
MmFkZTQwHhcNMjUxMDE5MTMwMTI2WhcNMjUxMDIwMTMwMTI2WjAzMTEwLwYDVQQD
EyhlNzI0NDE3NWRjNTlmNGY0ZjA3MmIxMjQ3NWY5NTJkNzBiMmM2MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W9UipbIksUDI2AOx6fn/EzsB0dG
7W3Ou2gRRp0Rr1Ku2K1JUXes6HpXbKOKdfJkrHphn18k1qVeHgIDxN/MgJx3/VsM
WkLseZTV7Df3B/Yb32DrFO0UeRAjQS6PJtsby8UzN/OQOW7geRZuPkDwYoz3TUic
8+9KHwkfKLG8TC2mbfnKYbUEPCuiCvDyJCT5DgKG5yfVGSxR15w5exRLyvDjyY1A
sUk74Y5exIAGmPjfOpt8UDC+Bg8SaABIYVGVuOg7VTnCbVf6PVFu6t5MTpc6PgiH
w3TSI8RaqkJdEalAG9vil8QwWMgCYCzsecZNUdH5t+M1RC9KH0DCQ/5VZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOckQXXcWfT08HKxJHX5UtcLLGKBMB8GA1UdIwQY
MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt
OTc1OGNiMmI4NDRlLzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl
LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEdc5BB6
qbTOZmjzyYQ6Dr+kUl/Gzz5sGFqOk1UoL1XEau+0HWZf08Dl3+OzTofWOx8el3wF
3RZuj4E8aNjg9SaqpNnNSejmj3454EixGdoQWApv9xZo4p8076F7xGpxun3sgslc
nTrrMTjspljtogLkxKx1JjP+apOAWd2j+hifTN+iIAlemFmPnbri7if+gIdOEziN
9X4TOjBY75RDr/CkXkvpOT2pD2sVkI5YPsdgxY/xzCPhqHhvu2ZzPV+evxVsTH7v
6epGV8EwjvVGYyzPvXL39ScofPldK3GyRxFWhNZA1omMYzj3j7SCHB//77kr7plV
k0trxTkl0cjxSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:32 2025 by rpki-client