Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: 3kkZ15I8DSUkWFsFLrTahd12VBuoDu61BzLMmEsFzcM=
Subject key identifier: 6C:1C:F6:E1:6E:D8:85:1D:6A:C8:42:EC:AA:DB:53:DB:B0:9A:50:66
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 0199FF224847B73758DC0A0F2E52CA9E1656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 08AA
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: /Qdys8KMfryKOWdu4kzNlfi47p6+3MIPeV10cFbg8R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:48:47:b7:37:58:dc:0a:0f:2e:52:ca:9e:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=6c1cf6e16ed8851d6ac842ecaadb53dbb09a5066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:3e:41:1f:7c:c4:cb:66:ce:f2:f5:41:bc:
b1:3e:cd:48:d6:88:e0:51:59:8c:c3:6a:bb:77:27:
00:07:aa:57:68:d3:b9:4d:58:93:e5:08:ec:68:7c:
a2:b7:02:68:6f:0a:d2:a6:4e:c9:59:a5:2a:c5:10:
40:da:9f:53:73:c0:c3:02:bb:e5:25:a2:a7:bf:aa:
67:7a:19:84:81:d6:1f:91:1d:4e:d9:4f:77:4f:04:
97:fb:2f:29:71:50:7c:9e:c0:a6:62:c9:a3:06:46:
f4:55:a2:38:b8:34:fd:2a:ad:b9:7b:ea:53:aa:77:
fa:ab:ca:a6:5e:72:5e:a3:71:9d:82:96:5a:d9:2b:
a8:6f:de:8a:bb:a9:f1:ae:75:06:c6:1c:fc:34:ff:
96:10:d3:71:73:db:fc:5e:86:8d:30:ee:4c:ab:01:
05:98:84:f8:11:dc:2c:5e:66:67:f1:92:2c:13:bd:
b7:d1:c5:c5:7d:d9:82:d0:82:56:e9:a7:22:b7:ac:
6a:b4:77:b2:d7:2b:c2:a1:d1:39:9b:23:5c:d3:06:
6b:23:79:60:84:9c:cf:d7:1f:3f:cc:8a:2d:cf:3c:
3a:23:ef:39:17:b7:2d:03:4f:65:d6:1e:af:2f:2a:
45:a1:c4:49:04:98:b8:ba:57:4c:f4:a0:33:36:bc:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1C:F6:E1:6E:D8:85:1D:6A:C8:42:EC:AA:DB:53:DB:B0:9A:50:66
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:3e:3b:39:07:9a:db:c5:85:11:fe:83:58:7f:a2:ff:57:
76:2d:eb:d5:e0:98:1b:6d:5f:8b:f2:35:da:2c:aa:81:7f:3a:
33:2e:df:f7:28:db:41:58:b8:be:63:dd:07:f3:e3:50:f2:26:
62:49:a2:a6:d7:7e:af:12:31:6a:5f:57:5b:4e:8e:94:87:ab:
2d:1c:f8:b5:79:ce:c2:6b:49:47:09:58:b5:9a:d7:01:69:fd:
ac:b0:09:d9:8b:f3:8b:c9:5d:cb:e2:0e:b0:0e:f2:7e:47:30:
e1:00:10:51:2f:b5:fb:60:41:6a:f7:97:94:4c:64:da:af:56:
dd:08:37:cf:f7:89:79:07:06:ee:47:0c:bd:f8:01:86:c0:9b:
4d:78:e9:68:75:b1:91:a2:41:96:bb:e1:8c:ce:5a:b8:83:7c:
a8:15:33:87:2e:c5:4e:fb:c1:9a:20:7c:b9:79:40:6f:0a:03:
d3:73:f7:59:ef:31:63:e7:10:74:cd:24:ab:7e:0b:e7:75:67:
84:41:cd:30:f9:1d:74:e9:19:78:03:df:a4:bd:8d:d7:f6:33:
51:45:79:d9:78:e7:5f:d6:8e:9b:8e:6c:04:19:e4:17:2c:51:
91:2f:a0:24:e0:3f:9b:59:ab:97:dd:73:79:de:15:ab:9b:b7:
e3:41:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:24 2025 by rpki-client