Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: SjPNmT+filGr+Am21yIddFllBf2NrLGCrrZDR71UOpE=
Subject key identifier: 3A:B3:71:3B:9A:39:79:E6:5F:30:68:AC:8D:69:E2:46:77:87:AA:F4
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 0197B890015C96E1DA39BEFC64A3BF6930BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: s5hwTQ+fbS7VrDtQf/jxBG5W90bWLvSdFOX34+o+NYE=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:01:5c:96:e1:da:39:be:fc:64:a3:bf:69:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=3ab3713b9a3979e65f3068ac8d69e2467787aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:dd:24:8e:0f:4e:1d:8e:e3:8e:8a:fd:6d:
f8:8b:ee:03:d0:65:78:a0:fc:f8:f8:40:f9:ff:09:
af:4d:4f:fd:bd:de:fb:6f:16:0f:50:05:2c:c2:1b:
b6:d2:ed:e3:1c:df:41:cc:d7:40:f8:de:10:ff:26:
87:ea:bf:e7:75:5e:c1:a3:ec:4c:f4:af:ab:a4:33:
fd:a0:c9:70:45:01:bc:f8:f1:e6:fe:d8:7c:60:4d:
c1:73:84:77:dc:2d:86:6a:6a:13:03:e9:a1:9a:b8:
dd:ac:04:a4:0e:50:bd:83:d9:04:2d:42:a7:d2:3a:
a3:48:a4:b5:3c:60:28:ba:4f:f4:01:83:9b:a1:89:
77:e0:7d:29:b8:f7:4f:73:39:eb:d9:52:fc:aa:ba:
2f:4c:05:65:0a:ef:5d:4e:36:d2:df:a9:85:0e:8d:
ad:66:09:b5:0c:5a:5f:0f:80:d9:13:20:1f:73:90:
fe:65:4e:5e:8f:b6:cb:d8:d6:3c:96:c3:1e:3e:29:
e2:69:ef:37:3a:46:71:d2:d2:15:1f:3b:3d:77:9b:
06:42:00:ee:d4:d4:ea:b3:46:d7:28:e5:2f:3b:c9:
11:ba:ce:bb:87:ab:49:7b:90:27:6b:e8:8b:2d:88:
53:10:14:ca:5c:9f:bd:6b:f1:30:31:d2:d9:ad:ee:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:71:3B:9A:39:79:E6:5F:30:68:AC:8D:69:E2:46:77:87:AA:F4
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:38:51:7f:94:1b:32:41:e6:d3:c7:d4:7b:4a:0c:b2:79:
a6:b3:42:c4:a4:f9:2c:e7:1b:a4:5b:41:9e:4d:8d:74:7a:21:
5a:db:a6:a4:78:e3:92:a2:b0:f0:19:82:2c:c0:da:86:2a:83:
8f:85:87:bc:34:ca:03:aa:c6:ae:25:62:50:c1:fa:12:97:0d:
2a:2e:35:0c:0a:1d:ff:5f:6f:fb:49:8b:4a:5c:e5:40:20:c6:
c4:4a:bf:03:ec:82:9e:40:3e:c4:87:2d:b5:9c:18:3a:df:f3:
4e:84:07:35:03:96:0f:48:84:ce:c8:ad:eb:e5:5d:34:89:a6:
09:32:d9:05:c8:d3:58:c5:45:9f:7e:a0:a1:69:c3:ba:17:c4:
a0:9e:1f:d0:5a:d1:e7:b0:16:0a:f2:72:e5:60:a0:5d:a3:38:
da:6a:94:ca:14:2c:15:a5:85:a1:98:ab:69:90:e8:0f:5c:8b:
3a:da:25:df:0d:cb:53:1f:9a:8a:6f:70:f7:79:15:41:cf:06:
21:b3:6d:a9:b2:a2:03:73:4f:81:e9:5e:36:41:62:b2:9c:db:
39:72:59:4f:89:d3:e2:6f:f7:02:8f:a1:71:33:59:e7:83:e9:
20:ba:42:03:54:a2:40:dd:58:7c:ad:6b:39:5c:ff:86:03:68:
31:d7:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:58 2025 by rpki-client