Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: AtWotMkSHCKAUiRjMnnccxnkd6+3LmiqTV2X9sIAtPI=
Subject key identifier: C0:EF:62:7D:6F:0B:F0:6C:4B:55:32:DE:12:1C:5B:A3:13:37:BC:85
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019A4D062ED841B8670F741E9FF88ABF91FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 04:00:42 +0000
Manifest this update: Tue 04 Nov 2025 04:00:42 +0000
Manifest next update: Wed 05 Nov 2025 04:00:42 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: 91RD/QNlkmC1jrSL2xvJAw42W0SXMiFmd9lPfV6KgoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:2e:d8:41:b8:67:0f:74:1e:9f:f8:8a:bf:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Nov 4 04:00:42 2025 GMT
Not After : Nov 5 04:00:42 2025 GMT
Subject: CN=c0ef627d6f0bf06c4b5532de121c5ba31337bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:bb:a3:2e:e4:d1:62:10:1f:5d:ba:05:7d:
4f:31:de:19:aa:b3:1a:05:6c:40:dd:f6:1d:10:45:
a2:16:10:34:f5:8a:ce:64:85:ff:79:7f:64:3a:83:
12:74:14:21:50:d4:39:02:9b:cc:20:25:62:4d:95:
f8:75:c5:ae:95:f8:69:1f:e0:2d:34:bc:3f:a9:7a:
20:3d:9a:6d:e4:58:8a:9b:73:65:31:f9:ca:da:3d:
d4:e9:6d:27:b3:4c:aa:66:17:43:ed:63:61:6c:aa:
52:69:22:42:df:71:83:39:2d:45:fe:f5:34:3b:e1:
00:9f:89:a0:00:66:a0:da:b6:3b:60:d4:b8:ac:3b:
cb:1a:c9:8a:d3:08:57:31:ed:55:ea:fc:ce:6b:d4:
4e:ab:34:c8:e0:df:9d:74:cc:f9:dc:1d:f3:2c:8c:
65:47:dc:ea:1a:f0:bf:e5:62:0d:d4:b3:de:0b:c4:
aa:a0:0a:6c:a6:e5:e2:cd:16:57:7b:70:b2:a0:27:
a4:70:b2:81:bd:12:39:75:10:99:3f:99:be:67:32:
c5:5c:5a:3e:de:cf:08:d0:2b:b8:f9:b8:64:1a:dc:
4c:46:a8:7d:54:8c:72:62:f3:c6:4a:89:f2:fa:8f:
1c:bb:9d:38:57:e6:21:fe:aa:6b:fa:4f:18:72:f8:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:62:7D:6F:0B:F0:6C:4B:55:32:DE:12:1C:5B:A3:13:37:BC:85
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:c5:4e:a1:62:a5:d2:5c:08:b6:68:ee:b6:ab:ff:d0:30:
08:47:32:a1:16:b3:3a:14:2d:61:5f:75:b6:c1:80:ee:74:c5:
e5:df:ac:54:52:be:30:a3:fe:ae:54:54:66:72:f3:36:c9:cf:
21:29:57:74:39:0f:61:2a:3a:79:1a:73:15:52:03:7e:c0:b8:
95:60:62:d5:f2:95:3b:3b:19:98:33:fb:0b:76:d7:ed:09:42:
b8:c0:e4:39:ef:48:11:3b:cb:31:f7:88:55:57:2e:e7:8b:16:
5c:68:ea:b8:6a:57:d4:16:96:c8:a8:64:53:23:e5:6a:c2:65:
e2:4d:7f:00:32:7c:70:c9:d6:b2:12:3f:a6:7a:9a:f1:8e:d5:
41:53:86:38:77:5b:2a:d6:c8:ad:47:f8:7f:e3:ee:bb:cf:d6:
b2:81:15:59:18:e2:29:e4:63:36:ea:ed:d8:fb:14:e3:59:73:
b5:52:ac:c2:35:bb:34:e1:5b:2b:8c:6d:9c:7b:fb:4b:f4:e8:
0b:de:27:84:b4:d0:2c:46:f1:92:4b:7d:53:e5:9d:7d:dd:d0:
2a:8d:54:7e:ac:50:49:1a:c1:71:76:35:c9:65:86:10:d5:db:
ba:91:1c:ee:82:a5:c9:98:cd:81:0b:63:29:0f:cd:66:a2:10:
e7:b5:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:26:55 2025 by rpki-client