Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: Zz98Ynb/O1x/bi6QQpC6x77I0CYeL0zgmzZs5gDn014=
Subject key identifier: 8B:79:23:12:11:91:D5:0E:77:EF:45:24:AD:B0:D4:CA:17:02:C1:78
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 0199FAD8534A85652757A46F022B6A211E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 07CE
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: IAHGfmR2UcA/34J/3KFe2R6lVuZp03LzYBg/g1Mjp0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:53:4a:85:65:27:57:a4:6f:02:2b:6a:21:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=8b7923121191d50e77ef4524adb0d4ca1702c178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:1a:57:2a:e7:a8:86:d0:16:b7:16:84:38:
ff:38:e4:2e:d2:93:e3:81:19:05:51:4a:f7:2a:a5:
82:f6:2a:21:6f:85:b8:cc:6a:ee:5b:08:17:69:64:
41:1f:f3:3b:b9:c2:12:e0:f0:c5:ef:03:eb:d8:a6:
62:6b:10:e0:bc:59:fe:7f:23:0b:cd:1f:dd:67:6b:
b4:17:b9:a1:af:3e:af:73:7b:7e:13:ef:f8:be:71:
55:a8:ab:a2:f0:af:16:0f:c8:8e:ea:5e:2f:60:44:
0d:df:73:5e:f9:ef:b5:df:ba:7a:93:86:1a:b8:84:
f5:a5:53:91:26:a6:c8:2c:ea:71:bd:57:a3:01:6a:
03:6a:5d:c0:c1:5a:98:94:a1:15:1f:ee:41:91:1a:
2c:01:94:20:e7:3c:16:25:ff:21:2e:ff:24:18:0c:
8c:82:33:6b:44:33:a3:88:8b:ef:2f:9e:5a:4b:79:
8f:c0:be:62:b2:1a:2f:3f:33:d2:44:28:9a:b0:57:
7c:22:09:aa:3b:97:0a:04:50:a1:44:37:66:e9:30:
4c:1d:4a:92:82:56:58:54:cf:2d:63:22:2a:17:0c:
25:fc:2f:d3:7c:38:cc:87:04:7f:9e:f1:86:2b:11:
d0:e5:84:9b:ab:ce:4e:e6:15:b3:47:a9:f6:ba:ca:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:23:12:11:91:D5:0E:77:EF:45:24:AD:B0:D4:CA:17:02:C1:78
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b7:5c:ca:71:d1:a0:6f:8c:20:8e:87:8b:f1:d7:e6:69:ad:
48:24:3b:a3:62:17:ef:2a:ce:79:59:e4:06:d4:91:e1:e2:07:
8a:65:9d:27:d8:f2:19:9a:53:8a:c7:8a:7f:51:c3:64:2b:c4:
5a:86:f8:3b:b3:5d:30:5c:26:40:69:55:26:b7:68:db:a1:5f:
60:68:11:e1:7f:fc:91:ba:ed:ba:0e:de:78:92:1c:21:5e:06:
dc:ca:49:d9:1b:d8:bf:6e:89:db:7c:7b:a9:7e:9c:79:b1:a7:
0c:76:77:cb:8c:4c:fa:33:23:a5:79:0b:f6:b5:41:08:59:6c:
23:6f:21:d3:ff:de:e6:67:67:89:bb:a0:16:5b:7b:11:37:90:
49:33:7b:cd:92:9d:71:64:45:8e:29:a8:5c:88:bc:12:a6:45:
e5:42:62:b9:07:d5:47:b5:f3:7a:04:38:86:18:64:a1:1d:80:
a2:aa:00:64:76:e8:55:16:b1:f5:62:af:e4:94:59:2b:13:64:
24:65:23:9e:de:ac:96:28:7f:f5:45:3f:95:b3:3a:5b:7e:da:
24:cd:cf:ef:b6:1d:64:be:10:07:ee:fa:34:99:63:ee:69:c0:
8b:52:b1:b8:c7:c5:2c:5d:5d:8b:7d:dc:61:40:3f:48:ba:4c:
ac:ae:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:21 2025 by rpki-client