Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: ULWiBU9iedbVopVl6dKXeKrGmTnIXDCLyrFRLO62hlc=
Subject key identifier: DD:37:3E:92:A5:33:A6:16:5F:BC:4F:98:74:E2:65:31:28:12:D9:55
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 019A221BC0D463453BE375F564EE5B798F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 12D3
Signing time: Sun 26 Oct 2025 20:00:35 +0000
Manifest this update: Sun 26 Oct 2025 20:00:35 +0000
Manifest next update: Mon 27 Oct 2025 20:00:35 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: caS38X7IhV5ZSNmdpqftk42g+xixmxYaHB7dq+EYnxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:c0:d4:63:45:3b:e3:75:f5:64:ee:5b:79:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Oct 26 20:00:35 2025 GMT
Not After : Oct 27 20:00:35 2025 GMT
Subject: CN=dd373e92a533a6165fbc4f9874e265312812d955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:8f:8e:2c:69:d8:d1:94:d3:93:44:02:a6:
1a:1c:8b:3a:90:a2:7d:bd:ac:2f:f0:08:27:b9:08:
f9:a2:82:75:da:a2:c3:21:10:ba:ee:69:f6:24:ff:
41:37:b5:ea:7c:eb:80:b2:e7:2f:54:39:77:95:60:
64:e0:6d:b6:b2:f6:1b:0e:c4:c9:0a:ee:95:53:a8:
47:7a:f7:79:02:b0:b0:03:7a:bb:b6:eb:ca:22:f3:
97:57:30:a3:50:6a:36:4c:bc:20:83:3b:1f:58:23:
b3:a3:75:93:10:32:a5:59:9e:ce:c7:86:c5:3b:a6:
8e:ed:11:01:50:71:ae:62:3d:85:8e:e0:50:9f:d0:
f7:57:e2:79:55:65:7a:db:30:9f:95:4d:73:e0:4b:
8c:22:33:f6:b0:4f:20:80:e3:d1:05:e3:e6:1a:75:
e4:85:63:e3:e9:78:c3:53:ba:db:49:ab:22:ca:2a:
65:c9:bd:5c:77:e3:19:94:52:c8:be:de:7d:0e:47:
df:d8:2f:a7:9f:3d:23:b1:e2:0c:46:f6:3b:6d:73:
d9:bd:31:90:99:2f:52:3a:1a:be:ed:a8:4d:2b:55:
92:13:e9:87:b4:3c:b8:1b:a0:8f:d1:b6:10:90:85:
75:c4:5e:95:e1:93:1c:dc:e6:54:37:b4:de:59:97:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:3E:92:A5:33:A6:16:5F:BC:4F:98:74:E2:65:31:28:12:D9:55
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:52:0b:e9:6e:f1:b8:6e:1a:19:25:32:82:be:24:31:a5:
d6:09:5f:05:a4:2e:7b:05:15:51:0e:f3:79:9f:0b:d0:cd:a5:
48:1d:91:2d:bd:c8:10:82:84:93:07:fb:ec:cf:32:d4:45:b1:
7a:95:3c:a5:5a:7b:14:3e:c4:d8:2b:81:f5:d6:52:b6:45:94:
33:4e:92:29:bd:f0:ac:70:57:54:2e:dc:ee:95:dd:c4:8d:e5:
41:69:c9:86:59:0b:f2:da:1f:67:4e:45:e5:37:08:0e:24:ca:
af:5b:68:1f:25:c3:88:38:15:34:17:60:f5:72:29:89:f0:4e:
e5:b0:98:c4:99:69:be:47:10:c6:9a:bc:80:98:55:ef:eb:0d:
3d:3a:b7:0f:b7:34:d5:98:30:81:cc:d0:ea:a9:8b:bc:4e:1d:
92:07:c3:a7:d2:9d:d9:72:17:c6:96:05:4e:54:5d:75:5e:db:
93:e2:9b:5d:da:b3:51:dd:22:d7:5f:8a:90:fa:99:b3:f5:78:
0f:20:69:2e:53:9a:03:9a:24:4f:70:cc:b4:3f:7f:db:9c:2a:
24:fe:9c:e5:3f:2c:ca:a7:99:be:5e:d5:6a:74:1f:ff:52:c6:
4a:64:33:a5:d2:a3:26:90:be:3d:e2:85:df:7e:17:62:cb:e4:
51:30:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:36:51 2025 by rpki-client