Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: mTza5NOkSJncDGfA+Ep/ZhgYeZyR4rLgQbRj1m11BX4=
Subject key identifier: 13:4D:9A:BE:AB:DB:8A:D5:68:CD:19:D1:4D:94:DD:4D:45:CA:F5:FF
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 0197B7EA9852813CC25ED259B109A2742C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 077C
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: gwY+14xaj/ZCB0ymk4Tf0ADiK/RCLynbhlacSgEr8cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:98:52:81:3c:c2:5e:d2:59:b1:09:a2:74:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=134d9abeabdb8ad568cd19d14d94dd4d45caf5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:ca:17:ca:1f:d8:8b:20:2c:75:43:5c:15:
de:40:13:48:46:8e:16:ec:1a:b5:14:d7:b8:ac:ab:
1e:e3:90:8a:ba:79:29:62:3f:48:f0:a6:d7:c7:54:
e6:7b:8f:03:e4:5c:c5:b3:f4:25:ab:f3:16:45:93:
c6:a2:c0:4c:26:8e:b1:22:17:b8:e3:9d:34:f7:36:
bb:16:c7:c1:dd:c5:3c:d2:ce:bf:1d:d9:71:f8:a1:
fa:91:17:47:47:10:0e:3e:d3:b0:da:0d:fb:e4:7c:
d2:cb:98:62:12:d9:cb:9b:0b:a5:80:9e:5a:d8:fd:
b7:00:0c:cd:aa:19:aa:ba:61:85:8b:7d:b4:63:3b:
95:28:a6:3b:49:d2:39:9f:51:23:93:52:40:3e:2a:
06:55:80:22:16:e2:94:0f:92:79:26:3b:78:d2:7a:
37:df:6b:ce:58:26:58:dd:dd:9b:b2:a4:4d:2a:4d:
ed:62:42:29:0c:1a:a9:23:af:f3:15:b2:69:af:14:
3a:94:36:4a:51:69:52:db:8d:ea:0b:b8:95:88:0d:
cc:6c:e9:80:97:2c:80:f1:ed:75:79:c2:1b:48:a0:
c2:c1:a9:d2:3b:0c:83:68:6e:fd:6d:ff:35:b7:07:
34:d8:8e:9b:29:0a:76:83:69:9f:8c:0d:06:cb:d0:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:9A:BE:AB:DB:8A:D5:68:CD:19:D1:4D:94:DD:4D:45:CA:F5:FF
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:aa:22:72:b4:4c:c0:7d:b4:f4:3c:b3:78:f6:50:a2:f4:04:
16:47:a0:e5:7d:d8:f1:10:23:d3:77:3c:cf:64:d0:d7:d9:06:
b9:c4:38:2f:ce:ef:0a:95:ec:e4:1b:b2:cf:34:7e:f9:b2:38:
45:1a:21:5f:ff:3c:00:a4:e2:93:d1:d5:58:cc:de:09:ab:8a:
a8:d8:e5:4c:96:c4:ba:79:be:37:76:cd:cb:eb:5a:a3:e5:00:
e0:6b:e1:72:71:4c:20:88:dc:54:f6:84:18:66:be:13:2f:55:
2f:dc:65:1e:b9:3e:ed:3d:b0:be:aa:e4:86:ea:2a:8b:3f:29:
3c:e9:13:f6:de:4e:0a:3f:56:b8:6c:73:bf:37:6e:a6:5a:c3:
dd:78:67:5c:6b:57:d9:f6:0d:07:6f:c8:de:26:ea:e2:9a:0f:
38:60:a9:c4:29:92:a8:65:ab:6c:cb:65:6d:54:61:9f:86:e9:
2d:2d:5c:64:fe:32:98:a0:00:35:42:6d:38:60:d7:5e:81:00:
93:8e:f0:72:70:ec:86:15:98:bf:36:c9:45:a7:b1:3d:fa:9a:
d4:9e:50:51:9a:c3:84:37:3b:69:1d:a5:62:e9:b6:25:af:51:
b9:de:08:dc:12:67:e0:f0:b2:cd:c6:fd:9d:6e:12:88:65:a1:
9e:ef:c5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36phSgTzCXtJZsQmidCwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDYwNjc2NDMyZjY4NzIzNjYyYzkzMjU3OWE4NDkzNTIw
MTRiOTUwHhcNMjUwNjI4MTkwMTM0WhcNMjUwNjI5MTkwMTM0WjAzMTEwLwYDVQQD
EygxMzRkOWFiZWFiZGI4YWQ1NjhjZDE5ZDE0ZDk0ZGQ0ZDQ1Y2FmNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7KF8of2IsgLHVDXBXeQBNIRo4W
7Bq1FNe4rKse45CKunkpYj9I8KbXx1Tme48D5FzFs/Qlq/MWRZPGosBMJo6xIhe4
45009za7FsfB3cU80s6/Hdlx+KH6kRdHRxAOPtOw2g375HzSy5hiEtnLmwulgJ5a
2P23AAzNqhmqumGFi320YzuVKKY7SdI5n1Ejk1JAPioGVYAiFuKUD5J5Jjt40no3
32vOWCZY3d2bsqRNKk3tYkIpDBqpI6/zFbJprxQ6lDZKUWlS243qC7iViA3MbOmA
lyyA8e11ecIbSKDCwanSOwyDaG79bf81twc02I6bKQp2g2mfjA0Gy9AbZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNNmr6r24rVaM0Z0U2U3U1FyvX/MB8GA1UdIwQY
MBaAFIrWBnZDL2hyNmLJMleahJNSAUuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUt
Mjg0MDM2YTgxZDkwLzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUtMjg0MDM2YTgxZDkw
LzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKoicrRM
wH209DyzePZQovQEFkeg5X3Y8RAj03c8z2TQ19kGucQ4L87vCpXs5BuyzzR++bI4
RRohX/88AKTik9HVWMzeCauKqNjlTJbEunm+N3bNy+tao+UA4GvhcnFMIIjcVPaE
GGa+Ey9VL9xlHrk+7T2wvqrkhuoqiz8pPOkT9t5OCj9WuGxzvzduplrD3XhnXGtX
2fYNB2/I3ibq4poPOGCpxCmSqGWrbMtlbVRhn4bpLS1cZP4ymKAANUJtOGDXXoEA
k47wcnDshhWYvzbJRaexPfqa1J5QUZrDhDc7aR2lYum2Ja9Rud4I3BJn4PCyzcb9
nW4SiGWhnu/Fwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:13 2025 by rpki-client