Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: fEJaqc6AAAWTfMZfhN0YDp+1imD7HlDrYDdMO9bFegY=
Subject key identifier: C1:EB:EE:17:16:77:40:A4:48:79:65:68:7F:D7:08:E3:31:80:97:75
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 0198485281FCF86168DE780A8C6EE50D6F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1372
Signing time: Sat 26 Jul 2025 20:00:23 +0000
Manifest this update: Sat 26 Jul 2025 20:00:23 +0000
Manifest next update: Sun 27 Jul 2025 20:00:23 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: AtqGEXfk1ws0v2w9pw+uHZtgiTxskLX203qaZ/OzRiM=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:81:fc:f8:61:68:de:78:0a:8c:6e:e5:0d:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Jul 26 20:00:23 2025 GMT
Not After : Jul 27 20:00:23 2025 GMT
Subject: CN=c1ebee17167740a4487965687fd708e331809775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:1e:f7:dc:69:ac:53:1c:6d:2e:74:40:4c:
5e:cb:f7:3d:e5:8c:3b:14:a6:14:e6:fa:1d:78:b8:
90:56:10:00:1f:ee:10:a3:e4:f0:c9:70:60:f5:59:
aa:91:2e:33:c0:6f:49:27:82:6e:0f:a2:13:e4:4b:
8b:cd:8a:a3:94:d5:c4:93:89:b4:0a:f1:6e:21:8c:
45:f4:05:0c:2d:3b:9c:99:91:ab:94:63:37:dc:ac:
73:33:af:26:84:60:f1:bd:23:36:9d:88:94:c4:13:
4e:26:44:cc:82:00:4a:cc:89:8b:b4:cc:23:58:4d:
30:d0:f8:a7:94:28:c6:d0:82:cd:5e:69:64:4f:0f:
9d:ef:41:4f:05:99:f1:cf:1a:67:59:30:48:b1:10:
cd:01:8a:99:57:85:c1:5f:06:ff:bf:90:66:82:15:
26:00:31:fe:a8:96:30:1e:6b:be:6a:46:a4:36:c3:
08:f4:43:02:6a:4f:59:8a:39:93:0d:26:2a:81:76:
17:11:c0:8c:d0:f3:d9:60:f1:93:0d:8c:00:e5:8b:
08:45:de:90:7c:33:22:f8:46:aa:7a:d7:3a:37:88:
82:b8:9a:b9:01:21:7d:ff:c6:53:82:b9:5b:27:ec:
fd:40:d9:9c:45:7d:78:95:b6:ea:71:86:f5:a1:6d:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:EE:17:16:77:40:A4:48:79:65:68:7F:D7:08:E3:31:80:97:75
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:e2:5c:7e:7d:c6:c0:21:17:81:09:00:ea:a2:3e:ab:17:
95:0f:34:a5:bf:40:0e:38:a1:b7:83:b9:57:bb:64:5a:1c:41:
74:23:4f:9e:8b:ac:6d:cb:5f:9b:61:7c:03:8b:88:93:c1:6f:
c5:f3:5d:21:d3:08:e5:e3:d1:f5:2c:a1:e5:f8:11:c8:c3:79:
aa:39:63:f8:97:96:d9:3a:a3:c8:73:a3:37:33:77:b5:eb:36:
d6:29:51:74:66:83:b0:83:62:d1:8d:64:e3:4f:ee:d4:a0:dc:
23:85:f8:c5:1b:8f:5c:9c:ae:b5:5e:93:b5:6b:b5:08:f0:f8:
28:de:18:c2:85:a9:39:7f:40:51:25:e6:d5:66:7a:f8:65:80:
9a:09:43:2c:2b:0e:9a:9e:51:8a:e1:18:18:6f:ca:30:3e:9f:
15:c0:5e:db:9a:86:01:3c:cf:a5:b2:1e:48:70:20:34:a7:a4:
96:31:0d:bc:8a:35:c0:9d:e6:c8:29:8f:1d:ac:5a:0b:a7:fd:
4a:0f:55:c3:9a:4c:a1:3e:14:ab:34:17:46:63:0b:b9:9e:33:
a4:43:51:f0:02:58:03:24:04:20:00:e2:b0:5a:6d:9e:a4:f6:
f6:62:53:40:35:00:9a:26:76:e0:78:f1:1b:2d:06:f0:93:84:
87:46:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:07 2025 by rpki-client