Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: SQ5+O3owa5iIxTNYEx+u3h2B4i6+3c0el9jePjP03uc=
Subject key identifier: 2B:1A:A7:C4:14:61:CE:32:A1:0C:51:F7:93:6D:63:D7:17:12:7E:FA
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 01983804C32A5EDB9F91F5FB103DAB9F0CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 15FD
Signing time: Wed 23 Jul 2025 16:01:32 +0000
Manifest this update: Wed 23 Jul 2025 16:01:32 +0000
Manifest next update: Thu 24 Jul 2025 16:01:32 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: n7+cnZTLaCZo76PhmnnT7UoF8zgqu8HgQFst0n+S1Mg=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:c3:2a:5e:db:9f:91:f5:fb:10:3d:ab:9f:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jul 23 16:01:32 2025 GMT
Not After : Jul 24 16:01:32 2025 GMT
Subject: CN=2b1aa7c41461ce32a10c51f7936d63d717127efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:6e:4b:e1:ce:07:3c:26:ee:97:6a:8b:5a:
5d:67:20:8b:85:53:75:7e:e0:eb:4c:f5:df:aa:78:
b8:8f:66:bd:98:fe:48:db:d4:26:4e:ed:a1:99:6c:
ea:33:e3:1d:a0:2a:f2:be:a0:d2:ea:52:13:20:e4:
cf:e0:e0:a1:f6:c8:37:bd:51:7b:2f:14:8f:3b:ca:
a3:87:72:4c:ba:3f:63:3e:55:c5:33:04:ce:d2:7d:
da:92:39:32:c9:0e:7d:6d:19:22:14:66:5f:b1:3e:
1f:d8:ee:89:3b:67:8e:87:a0:33:2b:ed:29:45:a4:
46:cf:ae:6b:d9:1b:9e:37:9c:02:c1:3d:45:ff:48:
cb:ff:a2:9d:3e:86:50:8a:3b:be:51:e3:81:b5:8b:
10:80:a9:47:f2:4b:96:10:d9:dc:1d:51:ed:7b:82:
cd:c2:57:09:63:ab:13:21:f2:0c:45:53:15:71:40:
bd:98:5b:82:5c:e3:4e:3e:f1:26:e6:a5:84:12:46:
0a:2d:a2:03:92:4d:51:59:b9:e1:b4:40:af:c2:a8:
43:dc:2f:f0:77:5d:a0:c1:e4:4d:e4:4b:54:ad:f7:
da:12:5e:4d:f4:39:af:04:8c:84:90:0c:ad:8d:3b:
a9:42:04:db:7d:19:37:99:21:17:ef:cf:5f:ae:19:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:A7:C4:14:61:CE:32:A1:0C:51:F7:93:6D:63:D7:17:12:7E:FA
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:a2:f2:28:b3:ba:28:17:cf:85:0e:41:82:d5:3d:25:f6:
0f:0f:42:4d:e7:42:26:38:93:8b:d7:c4:1e:ca:c6:fb:29:cd:
61:94:56:f0:5d:8b:06:c0:c0:5b:bc:87:8b:1e:da:23:2a:1f:
92:83:fe:c8:ab:bd:91:4d:bc:cb:20:51:d5:6f:f4:ce:7f:cd:
ea:4c:5b:50:80:3e:04:6f:ea:68:8e:67:4c:69:b3:3b:d7:ea:
f7:92:b5:f0:12:14:8e:e6:92:34:a6:c9:38:0c:83:6a:08:2b:
51:88:ee:02:c1:a3:4a:7a:d5:fc:56:c3:a4:8d:18:40:e7:27:
e8:d8:9d:bc:e2:ad:0c:79:44:33:3f:17:d9:a5:49:38:f5:85:
1a:8f:39:8c:89:05:fa:ed:8a:f8:c5:7b:93:3d:ab:32:cd:ec:
06:e4:55:b0:73:66:18:dc:57:b7:f2:d1:91:a3:e2:01:46:5f:
33:91:df:a7:28:da:0b:40:5f:a8:bc:74:db:a3:81:08:31:2a:
8c:64:1e:26:00:7c:f9:b8:47:07:c0:bc:3e:e6:d0:ba:6c:b5:
75:d3:af:33:16:83:31:30:1d:f5:ed:17:ba:06:2e:af:a4:6c:
54:57:f7:3c:86:d1:a9:15:a3:f7:e4:99:cd:7b:58:04:2a:b0:
03:23:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:03 2025 by rpki-client