Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: wqae0Wvkh9FsU3mmNeSQPkRTLF+W8Ku11MaMPss3N4w=
Subject key identifier: E0:B7:7B:38:43:BF:3A:AE:C2:04:54:F7:A6:59:D2:68:0F:29:26:E7
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 0198D54EA7D8DF7035FB374458372682175C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 13BB
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: dS/+imFV7j1XwgUgxml3LLxsRr1baxLVrAuCOte/2/U=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a7:d8:df:70:35:fb:37:44:58:37:26:82:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=e0b77b3843bf3aaec20454f7a659d2680f2926e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:ea:cd:73:4c:78:17:43:5d:25:04:e5:76:
8e:89:2e:62:a6:01:5f:e4:1e:07:b8:94:8c:12:e7:
b9:5c:6a:35:ec:06:8c:fe:50:84:4f:f2:9d:86:47:
a2:86:d4:e0:a4:3c:66:71:43:76:7d:c8:27:32:fc:
36:d1:cd:24:b3:65:e8:ba:e3:b4:f8:d0:41:d6:53:
dc:fa:43:5e:52:cb:33:8f:54:a6:d9:55:27:71:88:
70:09:86:b9:23:b6:25:76:ab:94:41:a4:57:68:9a:
93:9b:31:92:db:09:06:94:0a:44:4e:7b:db:46:d1:
7f:f2:02:33:db:57:64:3d:02:03:46:11:5d:8d:05:
78:9d:bf:9d:a5:24:a6:c8:0d:5d:2a:8a:d7:76:0b:
8b:5b:b3:a9:b5:34:c3:17:9e:e9:5f:92:8f:a2:c3:
a1:a9:ca:24:22:c0:1b:76:3d:22:b7:e5:51:35:5c:
21:a8:c0:a6:2d:99:be:9f:db:fe:ee:1e:59:07:4d:
ac:33:63:20:ad:3c:b9:55:ab:9a:7a:36:32:ab:f9:
e5:11:b3:a0:91:24:d4:44:75:4c:32:96:82:54:b4:
3a:48:6d:6b:bc:c1:e6:a7:5d:05:85:e4:38:86:fc:
9c:93:b4:92:04:25:f9:a8:14:d4:e9:64:79:2e:dd:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:7B:38:43:BF:3A:AE:C2:04:54:F7:A6:59:D2:68:0F:29:26:E7
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:98:a7:f8:15:3a:54:7a:eb:80:11:be:ab:43:e0:50:94:eb:
a2:ab:bf:6f:88:b5:a3:75:c8:97:11:21:1d:ed:4f:c1:50:9e:
5b:21:cf:73:6f:7f:eb:75:9d:62:eb:7a:5e:0a:96:e5:f4:2d:
72:df:ff:d5:a6:2d:22:4c:12:ab:86:80:b5:dc:43:be:75:ed:
5f:f0:82:c5:c6:8d:96:6c:d9:ee:27:fe:e0:94:cd:c9:71:3b:
c1:0e:49:dc:ce:ec:bf:ac:62:f3:e0:fd:a0:de:f2:cc:6e:e6:
a2:f0:45:e2:8b:d5:99:84:57:d6:01:06:50:a2:7d:b9:12:69:
8a:f8:c1:a0:2c:64:53:52:b8:b1:4f:4b:3d:2f:81:1b:55:36:
e1:07:d9:39:9b:ea:cc:bb:cd:a8:52:21:3b:09:f6:8b:b0:9b:
59:42:84:4a:2a:74:1b:9f:d9:fc:7b:9a:b5:83:de:b0:d4:7e:
bd:6e:52:41:64:a6:9b:e5:54:c3:ef:61:e0:84:ff:44:fa:ea:
77:ba:5d:6f:e0:f7:ce:70:1c:b8:e7:63:2c:9b:39:41:dc:50:
9e:14:9e:f5:cf:06:08:4c:e5:84:0c:d4:9d:53:21:94:ef:b0:
7c:df:41:f8:ad:2a:a3:ee:65:3b:48:91:bb:3e:66:00:a1:26:
24:a9:9d:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqfY33A1+zdEWDcmghdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDAyOGYxYmEzY2VmYjBkZWJkNTFiZTlkYWM2OGM5Y2U1
NmMzZDUwHhcNMjUwODIzMDUwMjM4WhcNMjUwODI0MDUwMjM4WjAzMTEwLwYDVQQD
EyhlMGI3N2IzODQzYmYzYWFlYzIwNDU0ZjdhNjU5ZDI2ODBmMjkyNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp/qzXNMeBdDXSUE5XaOiS5ipgFf
5B4HuJSMEue5XGo17AaM/lCET/KdhkeihtTgpDxmcUN2fcgnMvw20c0ks2XouuO0
+NBB1lPc+kNeUsszj1Sm2VUncYhwCYa5I7YldquUQaRXaJqTmzGS2wkGlApETnvb
RtF/8gIz21dkPQIDRhFdjQV4nb+dpSSmyA1dKorXdguLW7OptTTDF57pX5KPosOh
qcokIsAbdj0it+VRNVwhqMCmLZm+n9v+7h5ZB02sM2MgrTy5VauaejYyq/nlEbOg
kSTURHVMMpaCVLQ6SG1rvMHmp10FheQ4hvyck7SSBCX5qBTU6WR5Lt08YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC3ezhDvzquwgRU96ZZ0mgPKSbnMB8GA1UdIwQY
MBaAFCLQKPG6PO+w3r1Rvp2saMnOVsPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUt
OTQ2ODE3YjU5MTQ4LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUtOTQ2ODE3YjU5MTQ4
LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupin+BU6
VHrrgBG+q0PgUJTroqu/b4i1o3XIlxEhHe1PwVCeWyHPc29/63WdYut6XgqW5fQt
ct//1aYtIkwSq4aAtdxDvnXtX/CCxcaNlmzZ7if+4JTNyXE7wQ5J3M7sv6xi8+D9
oN7yzG7movBF4ovVmYRX1gEGUKJ9uRJpivjBoCxkU1K4sU9LPS+BG1U24QfZOZvq
zLvNqFIhOwn2i7CbWUKESip0G5/Z/HuatYPesNR+vW5SQWSmm+VUw+9h4IT/RPrq
d7pdb+D3znAcuOdjLJs5QdxQnhSe9c8GCEzlhAzUnVMhlO+wfN9B+K0qo+5lO0iR
uz5mAKEmJKmdaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:02 2025 by rpki-client