Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: 3PTU36JOG8jr71QBpb2CfQ8Vl3FQD00OVXinYpeBwSI=
Subject key identifier: 2A:0B:98:0F:90:26:0C:97:AE:44:BC:C3:9E:4A:0B:F6:72:40:F2:5E
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 0199FBEBAC662579B3D256B3B771AB231627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: r0ggSj5hVgoH05L/ZGTvXHrIoEEP46w6QrJxPtqWFm8=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ac:66:25:79:b3:d2:56:b3:b7:71:ab:23:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=2a0b980f90260c97ae44bcc39e4a0bf67240f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:eb:ab:3f:eb:c3:4e:ac:8f:0f:3c:05:20:
e2:b9:8a:75:e9:fa:55:15:f5:07:de:90:5b:a0:52:
e1:a6:0b:09:db:a6:9a:26:4b:63:d6:b0:f6:d7:ed:
7c:ee:48:66:52:0f:a5:3f:ea:72:bc:9b:3c:d0:c8:
02:02:c7:19:a7:8c:0b:68:e6:05:5f:6d:92:92:60:
25:df:95:6d:9d:5f:8a:a5:e5:d1:98:6c:01:90:6d:
ce:86:7e:4a:11:1d:05:c2:3b:f7:1e:3d:de:12:31:
d7:4f:fe:7e:ab:33:9b:3d:89:ae:92:af:c1:4d:c4:
e1:dd:c9:f8:8f:df:59:1e:b5:21:5d:1a:e3:36:39:
be:79:d9:39:c7:3a:03:c7:cb:e3:72:b5:bc:78:42:
9d:5b:74:0b:84:f9:06:18:ab:a7:39:24:b6:09:6e:
d1:39:e1:18:7a:96:46:62:cb:99:12:d6:d8:c6:ea:
4b:1a:08:86:35:14:a4:f8:c8:36:b4:a1:14:bf:c5:
8b:9f:b6:d2:1f:74:74:3f:f1:4c:3b:66:bc:38:04:
5c:dc:2f:5b:9b:83:7d:f2:3d:73:bb:de:8d:90:dc:
6b:68:01:1a:65:dc:c6:0e:25:cf:1a:ba:6f:39:e5:
e0:f5:38:fb:7d:0f:47:80:25:b0:79:15:b5:28:21:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:98:0F:90:26:0C:97:AE:44:BC:C3:9E:4A:0B:F6:72:40:F2:5E
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:6d:88:7d:d7:da:04:47:26:e1:2e:bb:fe:2b:cc:04:9e:
65:c8:0f:7d:84:ac:37:2c:26:52:55:d1:77:a9:c5:5b:30:39:
a8:26:90:41:c1:d6:a7:0b:a8:7f:db:76:48:c4:6e:8f:f9:b0:
d2:74:ef:4d:a2:dc:be:79:b6:44:a3:48:6a:df:9e:7c:0f:ce:
7b:bb:28:e7:39:30:8e:da:23:68:4e:e8:32:a6:d5:d6:5c:68:
bf:26:59:4a:e2:72:1c:49:be:4a:ee:29:9a:38:60:32:14:57:
8c:56:42:c3:95:3f:19:be:fb:9f:e9:6d:40:1c:de:68:a3:b2:
ae:95:7a:b9:3c:4d:63:81:e9:d6:1b:68:2d:89:93:0c:eb:a2:
b4:0d:ce:fe:ab:47:d2:6a:6c:db:13:61:04:57:b8:43:f8:ee:
d7:37:cb:61:5d:07:c3:65:33:62:1d:04:0a:45:f8:93:51:de:
81:d8:11:8e:74:62:ff:e6:af:d5:cd:53:a3:f9:f1:e0:3d:5f:
70:79:75:d9:33:79:cb:7a:23:ef:31:08:23:05:2c:e3:8d:9d:
b4:1e:2a:f6:5a:4d:c4:be:16:c7:10:1d:ae:7f:92:87:ab:6b:
60:b9:80:93:25:d9:82:e3:67:b1:18:ef:16:0f:5d:20:4d:63:
3d:f0:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:50 2025 by rpki-client