Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: Tyz6egFEUEe9u57cxhMD+03MovwyLHCkIUmOv6FyDrU=
Subject key identifier: 97:11:B3:76:29:59:0A:55:3D:01:FA:41:84:93:9A:A3:98:EC:2C:D1
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01984287404B4701B9B3F4B5503E0EC63C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1606
Signing time: Fri 25 Jul 2025 17:00:16 +0000
Manifest this update: Fri 25 Jul 2025 17:00:16 +0000
Manifest next update: Sat 26 Jul 2025 17:00:16 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: mUmC74i3UwqDjrJz/k9iaMN46vFfaWIj+mVCJS/qxVk=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:40:4b:47:01:b9:b3:f4:b5:50:3e:0e:c6:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jul 25 17:00:16 2025 GMT
Not After : Jul 26 17:00:16 2025 GMT
Subject: CN=9711b37629590a553d01fa4184939aa398ec2cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:8e:ad:2e:a9:a1:91:a8:10:7b:08:62:7e:
e2:ad:bd:ff:a3:81:b6:11:8d:10:d6:82:ac:94:b6:
d8:9d:d1:1e:bb:f5:31:aa:b3:87:c1:d6:16:0e:f0:
6d:a0:fa:d8:ed:11:cc:d1:a1:d3:99:76:64:7c:28:
23:39:8a:b6:d2:53:a7:de:16:1c:a1:f1:c1:5b:d5:
a9:bf:1c:c7:02:37:af:10:ca:7b:6e:6a:66:64:1f:
11:9e:c9:21:58:21:97:8a:c8:ef:3b:a0:65:80:52:
ff:53:23:44:fb:4b:e1:22:7c:9d:fb:5a:28:42:b0:
63:13:d1:43:23:21:f3:4f:77:0a:4e:f4:6d:f5:87:
a0:ad:20:e8:60:0c:e5:0b:07:f4:95:de:24:d5:d4:
17:0c:57:86:09:9c:24:44:3c:b3:d7:a9:11:1b:6f:
69:21:c8:f2:53:87:87:95:85:17:2d:5b:84:68:d6:
32:aa:3a:61:92:13:37:2a:0a:b8:af:36:a4:c3:c6:
11:15:fe:90:3d:8a:83:a2:9e:ef:9d:cf:7a:11:e7:
1d:38:90:c6:f4:71:ea:5a:01:49:79:be:62:bb:ef:
c3:24:d0:42:c7:cd:61:1f:90:54:21:4a:ed:ca:71:
75:1a:20:fa:41:e2:25:bd:9b:56:22:ef:16:4c:36:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:B3:76:29:59:0A:55:3D:01:FA:41:84:93:9A:A3:98:EC:2C:D1
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:0f:68:f3:99:78:f0:81:02:79:26:97:41:a0:60:d5:cf:
48:60:e2:57:fd:db:3a:3b:d0:c5:6c:a5:20:0c:43:76:39:ad:
73:77:17:c3:9a:89:62:3a:99:f5:ae:43:c1:41:b9:0e:ed:8b:
bf:3a:e1:97:a8:36:b5:75:ba:f8:13:bf:7a:a7:fe:3c:0b:59:
1f:d4:14:3a:16:57:76:39:85:76:64:01:bf:b1:42:c3:f1:dc:
f2:2f:4f:b7:80:96:ea:dd:58:ae:c1:20:3f:b7:f0:86:a2:e0:
cd:b6:01:81:4a:8c:89:78:ec:f2:22:17:30:97:d3:4d:e0:cd:
c7:c2:96:0c:a1:94:c4:76:a8:35:b8:a2:1a:51:ac:a3:ca:9f:
2c:37:16:6f:11:3b:f2:b3:e9:e9:68:fa:c2:a6:31:c1:3c:a5:
e5:a6:38:ed:e0:5e:48:77:6d:d4:3f:0c:81:40:0b:ee:5c:b6:
23:36:36:86:2d:f5:f9:3e:c1:8e:1c:bd:91:57:fe:83:c9:fa:
e3:21:bc:11:60:d0:de:57:3d:09:06:97:17:7d:85:92:a1:a8:
47:0c:44:e8:5a:a9:19:73:4c:7e:92:73:b9:19:fc:92:5f:79:
cd:d8:53:6a:dd:51:ac:8b:b9:14:a9:d6:c4:f4:82:7a:9f:b3:
e7:20:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:49 2025 by rpki-client