Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: IdzfrpocPJZZGaiPkAil+C1vR1AvDsRWqsjUeBPmXPs=
Subject key identifier: 19:DF:07:0F:7B:92:7A:E5:CC:FD:80:E4:FA:AC:2F:D9:A2:62:4A:EB
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019951F98E3517044F9D129CFACC250CFF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 10:02:13 +0000
Manifest this update: Tue 16 Sep 2025 10:02:13 +0000
Manifest next update: Wed 17 Sep 2025 10:02:13 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: eRsdPWpaDmME4hz3zOf6wbCSiDTdHwRBXobphR1zaEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:8e:35:17:04:4f:9d:12:9c:fa:cc:25:0c:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Sep 16 10:02:13 2025 GMT
Not After : Sep 17 10:02:13 2025 GMT
Subject: CN=19df070f7b927ae5ccfd80e4faac2fd9a2624aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:96:59:f8:9b:e9:d6:6f:96:3d:b7:66:13:
fc:09:eb:28:f6:fb:bf:b9:fc:f4:da:b5:7b:03:d4:
a7:4a:49:27:a7:f3:a6:e8:36:cc:b9:b9:79:9b:4e:
dd:c6:85:f5:fc:19:fe:18:dd:fc:4f:b5:41:4c:02:
65:8d:9b:ec:d2:d0:d0:85:e4:5b:d7:8d:0e:1f:25:
8b:bf:88:20:cf:58:b2:9d:f9:a9:6c:d5:ff:f5:43:
b9:08:37:9d:59:88:13:e9:7f:81:4e:5d:a9:c1:90:
e2:e7:a6:2d:e4:4c:aa:81:38:e1:c1:45:01:88:43:
cf:fb:de:b5:cd:1b:a2:6a:8c:84:3d:4b:14:a8:92:
f1:7f:dc:ca:7d:8e:89:aa:ad:89:72:f3:67:6e:27:
47:8a:9a:7a:e0:1f:e9:ae:9c:6b:14:ea:10:69:8d:
25:53:5b:fb:75:f0:c5:a0:9a:80:aa:6f:b3:4f:61:
a8:4b:4f:9d:55:5b:9b:34:52:10:1a:ad:a0:d1:bb:
66:91:56:24:8e:f2:e1:4a:70:fc:cf:2b:41:48:54:
cf:a2:2f:09:a8:7d:2a:45:44:49:c6:a4:aa:11:40:
8a:96:46:d5:4a:34:17:59:5f:96:de:79:a7:9f:b2:
c1:56:56:b4:5f:d7:58:56:ae:49:a7:64:fb:fa:65:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:07:0F:7B:92:7A:E5:CC:FD:80:E4:FA:AC:2F:D9:A2:62:4A:EB
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:61:3e:bc:b4:b1:fd:00:9e:9d:0c:2a:c1:1a:be:bb:f2:
9b:90:ff:66:74:4e:1c:e4:2a:48:b7:9e:56:2e:17:e7:c5:e8:
64:8d:84:94:6c:9f:eb:9c:82:5e:32:a6:a8:a4:89:2c:88:70:
c0:d5:a8:9c:3d:04:c4:1d:4d:03:a0:d3:44:25:8b:bc:87:7d:
30:5c:95:9a:ed:a0:a2:e9:ef:d2:52:42:b8:6d:ed:45:4d:4f:
15:b8:d6:d2:d3:8a:6e:08:29:0f:1b:df:e6:73:25:13:b4:54:
35:d2:21:d1:39:c5:45:20:e2:eb:c4:16:ca:ab:14:b2:44:d4:
26:31:4c:9c:50:f6:1b:9a:f2:0c:c4:5b:f6:f2:56:75:ba:e7:
c1:61:06:fb:e2:15:23:46:7f:ce:ba:3b:70:ee:20:c9:b0:c4:
0e:b0:c4:4a:c3:41:bd:01:bf:d6:52:53:c8:c3:3c:ae:6c:a2:
82:57:7f:3e:76:8a:4d:de:ef:07:cb:d0:ef:dd:56:42:e4:83:
4a:ad:ae:fd:72:65:f4:a2:ae:4a:da:c1:d9:04:a3:5a:cb:56:
93:cc:40:6b:1d:49:63:6a:fd:a8:c9:a1:ec:a6:c7:e3:e2:98:
e3:8a:a7:c8:20:b3:40:7b:04:79:22:44:a6:fa:ff:24:6b:b5:
1d:74:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 14:14:34 2025 by rpki-client