Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: BcdJSV04v9dn55fNoMu2q82/Cp9zJdPd8Tor7sPycME=
Subject key identifier: 82:7A:28:31:D2:E2:28:9E:20:B7:18:FE:CA:F8:FD:5C:05:45:21:A0
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019A2D43E6B56920099B6E15A1DFF0ECB151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 17
Signing time: Wed 29 Oct 2025 00:00:15 +0000
Manifest this update: Wed 29 Oct 2025 00:00:15 +0000
Manifest next update: Thu 30 Oct 2025 00:00:15 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: wNoRXQTy0cD+lxjhb7nPFt+Xd5DcK9v0hyKWf6cFklY=)
2: PkscByip9HCjcCDlJO2uYujjYDg.roa (hash: edTZgmleKt6WCIy8Cw2+p9r62NxbuqSZiXd6FCg4ClY=)
3: y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa (hash: Bk60cLKzbGKlYVw0cTFXtgYaf3rDfp8I2gvBkNj7UQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:e6:b5:69:20:09:9b:6e:15:a1:df:f0:ec:b1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Oct 29 00:00:15 2025 GMT
Not After : Oct 30 00:00:15 2025 GMT
Subject: CN=827a2831d2e2289e20b718fecaf8fd5c054521a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:87:f1:5a:17:a1:67:f4:4d:90:25:48:cf:
08:05:42:39:a9:2d:9f:cb:a0:8e:be:97:c4:69:b9:
61:2e:69:56:fc:08:e4:42:ad:59:6b:e9:88:f9:62:
30:b7:59:38:75:e2:99:67:56:ad:4f:41:9b:4c:38:
01:ac:56:88:c8:65:0d:b7:8b:14:3f:2e:55:3c:12:
0a:e8:49:bc:d9:db:9f:b4:59:00:2d:64:89:f0:f8:
38:07:9b:d4:f4:63:bb:24:82:29:f6:ff:bb:22:8e:
97:60:a1:af:e5:00:f7:8d:e9:18:34:1f:42:bc:75:
1f:55:76:53:ac:91:12:fa:08:89:f9:7a:e0:dd:8b:
8c:24:d5:b9:9b:7b:af:80:31:d1:22:d5:df:be:5b:
f5:ba:31:c0:78:3c:df:f6:7c:3f:1a:fc:3d:c4:0b:
eb:24:33:ec:86:28:c8:a3:d5:51:69:52:67:93:8e:
55:de:bf:8d:a4:ea:1b:aa:24:18:c5:f1:92:28:0e:
89:7c:54:ca:7c:b0:55:d8:15:83:46:36:e0:43:14:
ce:d1:a6:78:8a:f2:54:2d:35:1e:79:c4:9c:f8:e3:
8b:b2:df:4a:78:7d:23:f6:9b:7c:e3:7d:be:b5:1b:
66:40:b0:c4:57:ce:4a:05:54:65:62:8f:6e:e4:d7:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:28:31:D2:E2:28:9E:20:B7:18:FE:CA:F8:FD:5C:05:45:21:A0
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:c0:5a:d1:9c:56:23:71:b2:82:b1:53:29:bc:f7:32:e4:
10:13:aa:60:66:35:32:72:9d:85:16:d2:27:2d:7b:e7:59:66:
d7:0e:51:bc:2d:bd:df:a8:eb:bd:b7:da:14:97:30:45:d4:48:
9b:f5:4d:b7:59:80:d1:ba:56:1e:f8:13:bd:0a:ca:48:5a:46:
db:ef:ad:84:ac:cd:85:f1:fd:80:e1:a8:17:a3:52:6e:90:28:
c2:cb:b8:03:bd:b5:61:26:43:3c:c8:94:aa:18:eb:fb:ac:d3:
1e:41:b9:bf:61:2d:8e:04:c4:74:38:1f:c5:a0:90:59:cc:42:
d3:9c:87:84:ef:15:bc:37:26:50:fd:54:df:b2:72:14:f6:6a:
b7:53:1e:c3:23:66:2d:9d:72:dd:b9:c4:d8:54:2c:81:0a:2b:
c8:ef:c7:e6:ad:16:2f:23:60:cb:7e:b1:a4:f0:d5:45:3e:5b:
8d:67:31:4a:5a:df:23:20:d2:3d:01:8f:f4:b3:ab:86:b8:df:
b1:51:14:8c:2b:74:b2:43:0b:20:e7:aa:e8:ba:75:30:c4:41:
a9:08:f0:1a:82:c5:c7:7a:a0:a9:e5:93:fc:b2:c1:45:cb:ea:
a6:d8:7d:3b:13:b0:08:90:de:06:f7:ec:ea:be:c5:fc:1d:92:
fc:bf:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:56 2025 by rpki-client