Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: PZ+zHuOkQtNpMaLmheRc/nl3DXEpPojiQUnTWNT3Iz0=
Subject key identifier: 84:68:B6:AB:58:39:84:30:B4:24:22:C9:EA:8E:58:37:35:53:3F:26
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 019A6D6D773B4E6C5A47A53DC89F4B3439E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 061B
Signing time: Mon 10 Nov 2025 11:01:21 +0000
Manifest this update: Mon 10 Nov 2025 11:01:21 +0000
Manifest next update: Tue 11 Nov 2025 11:01:21 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: gNEzif3Chl8WGTA+ekIWUlmwbwn7ojfYKvqhtwaQk1w=)
2: cP3ZObpESgmIwVeoeUilsXbe7dU.roa (hash: x1z5oGuQZIc9RbQHr2zNPztkI2YQUxkkGtsbysCQzFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:6d:77:3b:4e:6c:5a:47:a5:3d:c8:9f:4b:34:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Nov 10 11:01:21 2025 GMT
Not After : Nov 11 11:01:21 2025 GMT
Subject: CN=8468b6ab58398430b42422c9ea8e583735533f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:eb:88:26:d4:ca:70:41:eb:a0:58:c9:f2:
08:2d:d7:69:5e:38:5c:d8:6d:a7:e5:f5:d5:d5:2f:
d9:5b:8f:d6:33:74:4f:f2:08:da:7b:63:d0:91:03:
1d:45:bf:69:cc:d8:54:37:c9:02:09:a9:c4:7e:12:
78:31:fe:8a:84:6c:d7:8c:1f:8d:3d:61:48:be:cf:
69:73:e4:de:36:ff:df:15:d6:b5:28:95:8b:95:f6:
8c:5b:27:d1:41:cb:5f:d4:ea:35:10:9e:74:97:97:
c1:9a:d7:d7:99:2f:38:47:ed:ac:4f:7c:4e:71:8f:
fa:0c:dc:4d:15:f8:ee:a6:e1:e7:1a:68:07:12:db:
f8:14:91:4a:83:c4:a8:e2:7b:11:a5:15:0e:7b:b4:
c3:10:c3:4d:23:d4:63:ef:99:ba:72:8c:b5:a2:34:
a2:e0:f6:c9:66:d8:02:bb:43:44:6d:15:0e:6c:43:
d3:ed:bc:e4:1f:4b:52:5d:bb:aa:bd:b6:cb:c0:f2:
eb:9b:e7:92:9f:21:10:17:24:33:a0:17:aa:ad:a3:
e5:e5:f6:87:d3:8d:a5:49:b9:3e:86:08:4d:1b:7f:
15:5d:c2:6e:cc:0c:d0:4f:43:34:ec:ff:61:12:7e:
7b:ec:31:62:14:7e:1e:45:ca:09:d6:95:fa:80:8c:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:B6:AB:58:39:84:30:B4:24:22:C9:EA:8E:58:37:35:53:3F:26
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:58:ea:18:f4:b8:55:37:06:15:3d:8d:dc:83:64:d1:a6:
9c:2c:ea:ef:0e:fb:f1:92:5e:24:b3:30:3b:25:86:72:7a:b3:
6f:6c:a4:19:36:bc:42:ef:b0:53:be:a5:02:fb:e8:c5:67:e9:
19:25:9c:d8:86:9e:ba:50:4a:96:4d:25:29:1d:d4:9f:c1:70:
b9:0b:60:92:9b:3d:c9:24:05:ea:a3:e7:f0:63:97:6d:fe:95:
e7:6e:0d:fd:10:56:99:6d:f2:51:42:36:2c:c8:c4:cb:b8:06:
bc:93:a4:d0:5d:bd:28:46:5f:6e:ca:5d:54:6f:ab:6f:97:26:
d2:bd:e7:0c:d9:0d:ab:ea:c7:68:80:9b:29:fe:69:ab:b2:9e:
4f:f9:b2:0e:b4:5b:54:75:d0:ff:da:31:62:cf:06:09:36:f3:
c1:55:38:b5:17:d2:8a:0b:db:3b:af:d0:e4:42:28:93:4f:72:
7e:e1:a1:a3:15:8a:f2:df:34:e5:2b:64:8a:3b:0d:6c:79:53:
b2:28:98:f2:1c:be:56:b3:d7:09:71:aa:d9:71:5c:e5:ab:b9:
96:95:83:18:d3:2b:8a:ad:f8:08:e4:62:a5:90:fa:88:15:8b:
96:90:d4:29:24:cf:fc:4e:73:69:b1:a0:81:3f:ce:50:b1:d1:
a4:41:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 16:01:01 2025 by rpki-client