Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: c0ghFhtMl/OPgMj+QHBm1plif2dcvKVT4U59Cna+3tY=
Subject key identifier: AD:8C:D6:DB:AD:72:B1:D0:1D:2A:B1:F6:41:3B:5C:2F:23:63:57:6F
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 01984965FE31E27335549B2D795FBFB2552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:17 +0000
Manifest this update: Sun 27 Jul 2025 01:01:17 +0000
Manifest next update: Mon 28 Jul 2025 01:01:17 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: QwxHMuhiAPN54rIZAsHydpOlqa2PczIT53c7Qv3hPt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:fe:31:e2:73:35:54:9b:2d:79:5f:bf:b2:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Jul 27 01:01:17 2025 GMT
Not After : Jul 28 01:01:17 2025 GMT
Subject: CN=ad8cd6dbad72b1d01d2ab1f6413b5c2f2363576f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:65:8a:77:ab:e7:58:15:a6:a5:2b:8f:0d:
30:10:d7:72:d3:51:b7:1f:b6:a1:bd:c9:02:20:e8:
50:93:69:04:2b:b1:83:ec:d5:4e:a7:29:67:27:d2:
a7:66:37:16:e1:b0:7e:95:70:5a:a8:44:73:25:9f:
7a:b8:06:e8:de:d1:9b:fe:e0:cd:5a:6e:a2:ca:25:
0b:3c:e6:de:63:91:66:1e:0e:9d:86:92:fa:53:a1:
15:6d:82:0b:ba:b3:0a:c2:a2:bc:ca:1c:a9:b9:a7:
1b:2c:b7:ad:61:f7:43:23:fe:28:72:21:bf:42:68:
4a:c4:81:b2:79:36:b8:79:72:18:97:10:2c:e9:29:
e0:98:b3:60:d4:26:a2:cd:83:08:be:c9:7c:ff:81:
7f:c2:3f:b8:55:6f:5c:0f:f0:24:a7:51:13:1c:de:
b4:b8:cf:85:ac:11:45:99:0c:ad:f7:34:ac:33:86:
21:52:b8:11:01:b0:3a:8c:71:fa:c5:05:f6:f2:10:
a0:5c:86:28:31:5c:d6:8a:c9:35:97:04:ca:50:e7:
bf:f7:b7:30:54:3c:42:12:48:9d:6e:ad:d7:69:24:
1e:c0:74:93:32:43:1d:c1:bc:bc:e5:64:11:1c:dd:
0d:b4:e3:71:0d:69:30:75:c8:45:32:79:8b:ff:31:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:D6:DB:AD:72:B1:D0:1D:2A:B1:F6:41:3B:5C:2F:23:63:57:6F
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:36:99:f3:83:d3:98:ca:6a:58:89:36:12:13:79:b3:44:
08:d3:f5:8c:23:99:72:13:5b:98:dd:bd:16:8e:0f:ae:b7:8e:
8f:3e:f4:d6:39:95:de:b2:2c:a3:56:26:03:e3:72:ad:a8:a4:
8d:d4:63:cb:1c:54:12:2c:e1:78:34:dd:c9:0a:65:38:3a:68:
01:ed:7e:c4:eb:cf:ab:2c:1b:8c:ec:31:75:01:36:c0:2f:af:
fc:12:9e:a8:1c:f9:52:9b:25:75:85:38:eb:ac:ab:49:8c:b6:
73:51:6e:d0:37:49:17:74:69:08:33:73:38:f2:ea:a0:4c:40:
62:14:ec:9f:3a:ca:6c:32:8f:07:d3:9c:59:e5:eb:a5:5b:ff:
db:4f:12:73:99:ea:fe:5c:3f:4b:3d:e2:56:4a:f5:77:9f:44:
a0:b0:e8:5a:b0:db:4e:8f:6e:a9:6b:3c:3e:85:ac:f6:70:eb:
80:48:32:66:5c:98:6b:88:11:31:ac:89:9d:12:db:9f:56:2e:
a3:7c:c2:27:42:38:f3:30:b3:d2:e0:e6:05:28:ee:e8:50:83:
f5:c0:95:85:5d:52:a9:51:8a:7d:42:ae:94:a6:30:b4:51:0e:
73:5c:31:d3:36:24:e9:29:71:dc:5a:c3:15:80:6c:66:05:d9:
bb:97:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:59 2025 by rpki-client