Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: ac5OGuIVZmh7lrlb3o9foTzLxpvUT3jqxujpqmuy4a8=
Subject key identifier: C5:EC:D2:EE:21:13:26:80:34:81:4E:C3:89:9A:7F:43:60:E1:F0:6F
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 0198D7A98278FD27F587A61B26E27D3EE72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 0811
Signing time: Sat 23 Aug 2025 16:01:07 +0000
Manifest this update: Sat 23 Aug 2025 16:01:07 +0000
Manifest next update: Sun 24 Aug 2025 16:01:07 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: g4RowJJtO1B3zUpKMqdP1dnLZjcqPwWnjE4jfKBrUgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:82:78:fd:27:f5:87:a6:1b:26:e2:7d:3e:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Aug 23 16:01:07 2025 GMT
Not After : Aug 24 16:01:07 2025 GMT
Subject: CN=c5ecd2ee2113268034814ec3899a7f4360e1f06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:ee:b5:29:39:4d:36:1e:91:2a:d5:bc:e3:
d9:db:92:ce:1b:a3:dd:78:7f:82:24:fb:7f:f9:63:
f0:71:6b:ec:34:1d:e7:e9:44:97:c6:b4:68:7a:fb:
49:35:ba:f4:d2:6c:20:de:86:00:b8:bf:15:fd:af:
cc:16:40:10:4b:82:b6:40:0b:35:02:7c:30:fe:31:
05:db:ea:3e:6e:73:dc:c5:f9:b3:d8:6e:d5:41:65:
7b:b9:cb:d2:5b:22:db:4f:79:ac:45:83:8e:8b:0a:
b9:93:59:94:0a:55:3f:ea:ea:82:4a:03:e8:70:49:
59:68:fe:91:4a:47:a7:22:bf:d6:86:25:1d:51:60:
0f:e3:9f:0c:1e:c3:dc:93:ce:a4:86:de:4e:65:8d:
ec:17:26:67:68:85:87:5d:89:92:37:74:30:dd:49:
fc:86:7f:82:4b:a3:da:b7:53:e4:2a:4a:a6:9e:f3:
a9:64:f4:e8:ad:67:cb:76:28:98:c8:bf:49:e2:0d:
96:f1:0d:67:ae:cd:fe:a7:b1:10:1f:36:54:9b:1c:
46:75:5c:12:01:54:a9:e8:ab:ba:58:94:5d:e0:e3:
1e:2f:0c:01:79:1d:d2:df:3e:4a:e3:87:92:28:bb:
46:08:e0:af:ce:e8:68:a1:e9:59:4e:15:ea:6e:b0:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:D2:EE:21:13:26:80:34:81:4E:C3:89:9A:7F:43:60:E1:F0:6F
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:35:75:54:ac:83:38:c9:6e:aa:0f:f3:1c:95:c4:a9:d2:02:
27:3a:c2:33:20:d8:5e:0b:f3:c9:93:02:49:85:71:c3:c7:57:
63:5c:46:79:af:03:8e:57:a4:69:71:88:54:24:09:2c:81:85:
92:e8:2a:db:98:ef:b4:8c:ae:ba:fb:d7:d0:20:a9:bb:11:7c:
20:83:d8:f0:a6:7d:f9:38:38:3a:f3:b3:69:80:89:4b:b8:d1:
ad:02:ae:3c:91:70:16:1c:43:7d:b3:35:1e:64:3d:89:5f:c1:
95:12:b2:a8:72:2f:67:4e:28:cb:de:40:de:43:2f:dd:32:e3:
25:23:77:fe:a1:63:91:f9:ba:86:b1:bc:88:4b:c4:b0:24:1a:
44:65:00:82:c0:04:4e:24:99:62:ec:33:d8:20:0d:b3:e7:0a:
43:3c:80:bf:ea:83:1d:dd:68:30:a7:ab:07:21:78:fc:7d:58:
eb:37:a9:04:c0:9e:f9:a0:cd:83:9a:77:d7:27:f3:df:0d:07:
fa:84:7b:c9:e8:1d:d5:34:35:82:e3:74:9a:03:e0:c9:63:d2:
14:7e:c8:dd:4e:06:73:01:eb:52:88:4f:15:22:5d:69:97:71:
0d:f1:a7:6c:9b:4d:5a:e1:2b:50:8b:b1:d4:99:bc:03:12:d7:
a8:62:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:51 2025 by rpki-client