Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: fJKVH8J7CpFXmCrexTAUXKtZq/hpQzB2j/UVS2627Zw=
Subject key identifier: 96:E6:F9:A3:BF:69:AB:08:F6:53:A1:95:49:EC:C4:DE:52:61:8B:4E
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01984B5359BD70B03C3111C3ED26AED6F311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:00:10 +0000
Manifest this update: Sun 27 Jul 2025 10:00:10 +0000
Manifest next update: Mon 28 Jul 2025 10:00:10 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: 4gGs/HTlV2siaBCCXXM2ZGlCyuAMKwKmwggvDMLQAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:59:bd:70:b0:3c:31:11:c3:ed:26:ae:d6:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jul 27 10:00:10 2025 GMT
Not After : Jul 28 10:00:10 2025 GMT
Subject: CN=96e6f9a3bf69ab08f653a19549ecc4de52618b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:81:06:82:57:96:1a:3b:80:12:2b:93:b5:
67:81:46:fb:38:07:70:b5:ad:7d:38:5d:c3:01:90:
7a:68:66:8b:c2:30:1c:11:7e:30:82:58:12:30:56:
d2:df:7f:f2:11:5c:e1:14:e7:a0:70:00:b1:1c:2b:
85:21:fd:01:87:89:b7:11:7f:ce:23:0b:58:99:60:
50:64:64:b8:d3:cb:93:71:c3:4f:cf:42:cc:58:57:
46:16:89:71:df:e3:e3:58:60:54:67:e8:c4:6d:b6:
20:f3:18:45:84:62:73:df:70:25:8c:27:52:ea:06:
30:4e:63:e9:cc:b3:4f:7b:14:b4:e4:80:9c:f4:e5:
68:d5:3f:d7:2c:71:07:40:2e:3d:e2:e9:a1:c8:49:
2c:26:1c:94:d9:66:77:d3:b1:4f:ee:19:c3:8c:a1:
85:6a:ba:6a:b5:cb:71:2e:68:78:e9:ae:b3:ce:a2:
cb:fd:96:49:71:28:71:78:97:2a:55:46:26:7a:37:
26:ad:b2:0e:8d:fb:8f:7a:12:32:c3:af:0b:34:86:
00:b0:53:96:fd:6d:f5:de:b6:33:7f:90:2f:15:d1:
19:60:a0:89:bb:a3:2e:9a:31:23:60:ba:59:cf:55:
bd:fc:6d:fe:fe:e3:80:06:26:2d:a0:df:ad:f7:47:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:F9:A3:BF:69:AB:08:F6:53:A1:95:49:EC:C4:DE:52:61:8B:4E
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f0:49:f7:15:39:b4:e4:0c:a3:fc:ac:ae:cb:85:af:41:78:
00:26:93:ca:a1:f5:16:21:27:10:d5:57:fa:c6:28:c9:de:45:
de:34:0f:17:db:b6:ea:5d:bf:4c:95:84:89:99:b6:ab:73:99:
bd:ff:11:24:cd:a2:4a:28:18:3f:ee:4d:8d:24:5d:87:45:08:
ee:95:99:d7:78:8b:36:e7:0e:b2:50:5c:c3:d8:5f:05:b7:2a:
ef:dd:58:fa:16:0b:ee:d6:ad:12:5d:dd:66:f7:b1:d3:de:c8:
89:c1:c6:8f:7f:4a:89:ed:45:65:9b:ea:cd:7e:fd:64:70:64:
a2:c3:52:cd:64:15:fd:ab:4e:61:9e:5c:ae:e7:4b:52:e3:e1:
c2:de:c6:4f:6a:3f:3c:84:50:97:17:dd:8a:e2:b6:7b:dc:6d:
54:11:81:2e:1f:64:0c:a7:c0:09:5c:b1:0e:b9:ae:60:09:c0:
6c:d9:dc:2d:ad:dd:2a:11:e4:45:2c:62:e7:21:4b:de:1a:2e:
cb:63:75:03:67:6f:d3:a8:8b:55:74:15:d1:f3:0b:a4:db:b6:
7b:9b:35:ae:ec:ec:2f:b7:e2:ed:cc:1a:d7:17:e2:b5:6e:23:
41:d1:ac:19:f4:64:e0:c4:ab:88:4e:f0:28:ab:27:93:1f:1c:
8f:11:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:04 2025 by rpki-client