Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: A6gvcqGIlTPS6UaNkYQ2Dj5LSuWwI9PoBfblyRnvASo=
Subject key identifier: E1:60:34:38:8D:6C:5C:63:1E:A0:04:B1:00:F1:47:31:E1:8E:8F:FC
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019A0C6FB4CD3BF2CBC33761F936383C23E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1236
Signing time: Wed 22 Oct 2025 15:00:38 +0000
Manifest this update: Wed 22 Oct 2025 15:00:38 +0000
Manifest next update: Thu 23 Oct 2025 15:00:38 +0000
Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: +/seWJlPzT6XiwWpdcrf9SBd1b1T5AsnQxylLRMborw=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:b4:cd:3b:f2:cb:c3:37:61:f9:36:38:3c:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Oct 22 15:00:38 2025 GMT
Not After : Oct 23 15:00:38 2025 GMT
Subject: CN=e16034388d6c5c631ea004b100f14731e18e8ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:9f:68:33:6a:19:6f:ab:06:ea:3b:33:16:
b7:85:fd:ae:7c:5f:3f:59:e4:4b:9c:c3:a5:f6:4b:
67:d7:b0:a3:11:a1:ae:cf:7e:fd:a7:a0:45:04:11:
fe:c7:07:ec:31:0b:6c:44:04:29:d8:51:fb:93:41:
74:74:53:c0:e3:a1:e6:eb:8a:51:f6:da:72:e2:7b:
df:3e:50:a4:e4:90:89:c9:b7:c4:b2:65:ce:60:98:
cd:b1:1b:50:e4:3b:6d:86:0b:9b:1f:e4:02:c6:63:
7d:6f:d0:d5:99:8b:c4:4f:fe:66:d6:86:db:34:0e:
51:11:a4:b4:83:83:44:3d:32:8e:e5:4d:3c:36:0e:
6c:9f:83:7b:7e:02:be:7d:40:23:4a:1c:b1:52:52:
d9:c8:31:b0:2a:e0:4a:c2:97:44:68:34:58:1d:90:
4d:b9:7f:11:45:2f:89:23:e4:c9:c8:16:2f:2a:d6:
d2:21:4b:24:d0:b5:e6:d5:9f:e1:94:da:c7:27:8b:
12:cd:03:1f:30:8f:70:83:51:74:9d:36:7d:3d:40:
44:13:73:c0:fa:2a:66:01:b3:b6:d0:2f:dd:4c:22:
83:21:73:6e:86:14:d7:47:3d:a8:ef:97:5a:3e:6b:
43:21:fa:4d:9c:c8:ec:27:3c:9d:0b:04:27:72:e2:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:60:34:38:8D:6C:5C:63:1E:A0:04:B1:00:F1:47:31:E1:8E:8F:FC
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:a7:fa:10:35:60:55:06:40:e9:d9:0e:ea:d5:25:4f:96:
cd:99:cd:10:81:37:cb:8a:93:39:1c:ae:49:00:08:ae:a4:d1:
01:4e:6b:0d:2f:85:e9:bc:02:cb:0f:2b:63:3b:c8:29:03:a6:
62:68:65:44:0e:aa:6e:38:a1:55:77:89:0d:66:f6:76:64:2f:
c9:60:e1:40:44:bf:46:af:c7:41:ec:e7:44:7d:27:32:93:93:
3a:59:dc:b9:e1:a8:bc:27:3e:b4:c1:99:0f:05:ae:91:8e:74:
b5:0e:30:9b:93:0e:d0:9d:f0:4e:b0:2b:9d:18:ca:ab:51:11:
90:ab:7f:e2:77:d6:b9:24:76:e0:b9:a5:90:d5:7b:7f:23:a3:
42:c3:77:15:56:ce:21:59:72:e1:86:13:b5:81:2a:b8:86:ce:
fe:d1:88:7e:6a:12:1e:f4:b7:25:ff:b4:25:fd:b2:e0:d8:ad:
6d:e8:aa:42:13:15:c2:d2:15:3b:b4:b5:17:13:d3:ce:50:29:
94:be:95:d8:dd:58:46:64:87:bb:d3:98:82:12:63:9a:e0:15:
82:1b:8b:f2:50:e4:50:da:b9:4d:0f:10:64:04:e6:81:4d:33:
8f:68:89:b3:b2:5d:1c:95:64:d1:c1:a5:c8:c4:1c:b1:e4:56:
37:df:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:04:38 2025 by rpki-client