Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: cmxG8xvUD1pOgbi6E8iw/Gg/ygB8L3cHjoILghdCL9Y=
Subject key identifier: A9:DC:2E:C8:03:18:45:69:5A:7A:C4:F7:DD:71:10:A5:BC:0E:F2:C1
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01992C341A2A153AF2A6FB4F700FEDFEE88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 167F
Signing time: Tue 09 Sep 2025 02:00:36 +0000
Manifest this update: Tue 09 Sep 2025 02:00:36 +0000
Manifest next update: Wed 10 Sep 2025 02:00:36 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: BoyHosOszC3HLFXolz5WxJ48rPN02f5yipvDm14sik4=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:1a:2a:15:3a:f2:a6:fb:4f:70:0f:ed:fe:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Sep 9 02:00:36 2025 GMT
Not After : Sep 10 02:00:36 2025 GMT
Subject: CN=a9dc2ec8031845695a7ac4f7dd7110a5bc0ef2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:06:ec:78:7f:7a:44:6e:24:99:cd:c0:a1:
ab:66:ea:70:a6:45:18:e4:62:7d:e3:37:4c:58:0d:
18:09:a9:ac:98:db:73:22:46:3f:ff:87:99:61:86:
9f:9d:51:e7:3f:bb:95:4e:71:e7:2e:2a:20:52:91:
8b:9c:f7:86:a1:f5:c5:cc:9f:05:f7:e9:65:72:58:
d8:5e:c4:03:b4:1e:56:74:58:6b:69:66:33:68:43:
4f:b6:78:5c:de:bb:cc:6e:13:bf:f8:67:99:06:9b:
4d:9f:7b:45:25:7d:17:6e:f1:e9:d9:c6:88:4f:b9:
59:c8:23:03:7e:14:2b:fa:48:47:a7:29:08:f8:70:
08:8e:44:3c:71:11:af:32:0e:6a:b4:92:1a:2e:31:
43:35:6c:ee:f3:e9:cc:2e:a1:e5:07:34:62:5b:1b:
48:55:24:3e:1b:bc:6a:a9:c2:8f:f5:8f:ef:c8:1c:
86:98:09:45:bf:81:99:5f:e5:59:46:34:61:19:81:
50:65:f2:5c:65:5d:ef:ec:bc:b6:d3:f4:d7:a2:7d:
98:42:45:05:0d:0c:61:4d:a9:e8:68:aa:c4:b1:1b:
8d:08:60:c5:e0:f3:13:e7:5e:38:87:74:e5:1e:2d:
92:87:22:10:00:6c:b4:6a:5f:eb:1d:51:8b:57:bf:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DC:2E:C8:03:18:45:69:5A:7A:C4:F7:DD:71:10:A5:BC:0E:F2:C1
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:de:89:77:f0:6c:d1:6f:27:44:27:e8:5b:7b:98:39:6e:
3e:85:ca:d0:0c:8d:c3:27:51:82:5a:12:31:fb:6c:4c:c7:02:
f0:43:16:e1:68:f2:ff:05:79:47:d7:e4:aa:9f:55:90:e0:49:
02:b2:f1:b3:f2:31:d3:e4:2c:1d:7f:7e:fe:90:4e:24:cf:b2:
3a:f8:47:47:59:5f:c4:b8:df:8e:ea:d0:7e:f5:c2:e1:7a:1a:
a6:1d:d0:97:a8:a0:f3:fe:04:c9:a4:4c:86:6e:2e:e0:f0:a7:
4c:02:41:3d:df:86:6a:3a:84:62:9c:92:d8:0b:41:ed:fd:d1:
4b:33:8a:80:44:d1:a3:ae:12:e4:98:04:93:59:72:a0:34:f5:
78:e7:bf:80:73:bd:82:48:a5:29:17:98:f5:b4:c3:20:2b:59:
c9:bd:7d:31:4c:78:27:f4:29:39:cf:63:15:01:b1:9d:72:58:
12:33:f3:60:a0:cc:16:91:b8:ad:3c:90:a9:da:76:03:c3:38:
f1:e9:19:ce:be:13:cc:8c:4d:72:39:45:2f:48:c6:ba:2b:a3:
d4:b6:23:ca:3b:59:29:e4:26:ec:52:79:78:32:a4:ab:ce:c5:
a1:19:9a:a1:6f:b8:cb:94:42:d1:df:5e:0f:9a:e1:f0:21:4f:
01:bc:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:29:14 2025 by rpki-client