
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: g06zIOUgYvb3ku7yyGbhBj/77sp8xgAJJkRuLWoZDOE=
Subject key identifier: B6:6D:6B:41:4E:DD:7E:E7:FF:0A:86:57:F7:25:16:F6:CA:61:8B:81
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 0198537B076062FF5346DA5B6026A6E4D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 0504
Signing time: Tue 29 Jul 2025 00:00:28 +0000
Manifest this update: Tue 29 Jul 2025 00:00:28 +0000
Manifest next update: Wed 30 Jul 2025 00:00:28 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: Z5e4IU1TwO3mCwErL/I5Owax1pZ8D3mUrSYttfP7pmU=)
2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:07:60:62:ff:53:46:da:5b:60:26:a6:e4:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Jul 29 00:00:28 2025 GMT
Not After : Jul 30 00:00:28 2025 GMT
Subject: CN=b66d6b414edd7ee7ff0a8657f72516f6ca618b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:4f:b9:61:98:d4:f0:40:98:a4:e0:60:10:
b1:4c:75:78:9d:8f:df:a9:eb:be:42:7a:3b:06:b4:
08:bc:da:c2:86:99:32:aa:ef:f7:a5:b8:7a:54:52:
80:e5:88:89:f0:45:5d:4b:04:b1:e0:cd:13:33:9c:
98:ff:06:09:65:4f:48:4a:4f:87:33:41:e4:cd:2f:
bd:7b:c6:2d:24:8b:12:f8:90:ce:64:c0:90:1a:82:
8a:b4:d2:ea:31:f6:e4:38:9b:9a:e6:99:85:39:54:
72:17:65:df:d8:0e:3d:6b:6a:8c:12:ef:82:8b:cb:
67:40:18:cd:ca:ea:6e:29:a2:2e:27:67:b1:82:6b:
71:1d:7a:42:08:87:e8:e3:1d:11:de:2e:e5:54:5f:
56:d1:0a:f0:07:50:56:cf:1a:06:69:93:2f:a0:4f:
ae:8a:e1:85:1b:6f:c4:5c:a7:7a:d7:34:42:63:8e:
17:de:96:87:b0:d0:97:85:78:a5:5c:53:cf:9c:06:
48:8c:da:33:c8:5b:4d:bb:60:ad:41:a6:90:99:a7:
c1:ee:48:5a:b3:3d:fa:88:14:70:13:b1:06:82:8b:
e8:bb:1f:4c:f3:e3:71:e8:d2:15:24:8d:07:f7:69:
fb:2a:76:e8:2c:9e:f5:58:0a:de:3e:bb:e6:3d:c1:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:6B:41:4E:DD:7E:E7:FF:0A:86:57:F7:25:16:F6:CA:61:8B:81
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f3:10:03:95:c5:f7:6d:49:26:86:64:a9:65:f7:68:7f:3b:
e4:17:89:93:85:8a:4b:fc:76:c6:4d:c4:d5:93:5a:6b:35:c4:
43:70:d1:e5:37:a7:73:81:d4:c3:cf:c6:25:07:20:d8:4a:55:
75:e8:5e:4a:df:16:c3:59:43:40:e7:09:98:7e:bd:65:a4:25:
5a:cb:59:6b:27:f5:34:04:56:bb:e1:85:ac:58:f0:eb:60:44:
eb:a5:ef:3b:b9:49:5d:7e:a2:05:1b:17:a5:e1:97:86:18:5e:
eb:7b:9c:0a:f2:ba:8a:3a:53:6c:54:d6:e8:b6:da:4a:0c:fd:
43:b7:f6:ef:88:81:97:d7:a0:f4:23:e2:95:9b:f2:8d:e3:60:
c6:c2:51:cc:d9:30:87:7f:af:8d:85:82:54:7d:b8:99:c9:06:
73:68:55:09:5c:30:da:0c:9f:91:d5:3e:f1:03:d8:36:9e:36:
29:4a:1a:4a:34:3b:6d:9c:79:98:5f:68:10:7b:dd:30:74:1a:
6a:54:eb:6d:7d:d0:50:89:8d:0c:c8:09:9f:69:76:1c:4a:ac:
04:8b:74:56:b0:35:e7:8c:dc:f0:9e:5c:3f:a2:1f:43:e2:a9:
41:29:74:6a:e8:2a:d0:eb:02:4f:07:f0:86:8b:df:49:4b:09:
0f:25:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:07 2025 by rpki-client