Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: 2oX6PjgfLsJCE/DhJTbqkAUgRtAsnfGpadumg5BN3cA=
Subject key identifier: 55:78:55:F8:6B:A1:DA:7D:E2:DA:F6:46:BB:A8:46:6F:9B:36:47:0B
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019846D253526EFD096A7510BD5D9ABE26C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0B97
Signing time: Sat 26 Jul 2025 13:00:45 +0000
Manifest this update: Sat 26 Jul 2025 13:00:45 +0000
Manifest next update: Sun 27 Jul 2025 13:00:45 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: 8EdXsUccKeQcwtnuC0BmarllrXz1dopy6oKxg0vql2M=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:53:52:6e:fd:09:6a:75:10:bd:5d:9a:be:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jul 26 13:00:45 2025 GMT
Not After : Jul 27 13:00:45 2025 GMT
Subject: CN=557855f86ba1da7de2daf646bba8466f9b36470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:17:a7:3f:37:80:e0:b4:c0:14:9d:54:e8:
78:19:96:db:8d:ee:13:11:d5:0e:f2:08:e6:50:c7:
c1:8a:1e:86:8c:4a:9d:06:dc:ee:61:97:58:f2:41:
f8:80:2d:b5:d4:77:ae:84:ec:18:e7:dc:4d:4d:42:
ba:3b:c1:3f:ea:28:f5:47:f9:22:d8:26:b1:4d:d7:
40:09:0d:e3:ec:8a:a7:8c:d7:75:69:9a:b9:fb:76:
75:a5:62:86:2c:22:2e:3f:20:e2:b1:81:2c:a0:df:
08:c3:be:5f:f9:20:ae:45:2f:d8:48:2f:8f:d1:ee:
c7:2c:2e:af:26:8a:00:79:59:71:51:02:81:65:2e:
c4:92:de:68:02:a5:19:47:51:51:70:60:be:1b:db:
f2:65:3d:f6:7a:3c:16:66:12:55:da:80:d7:d6:e6:
4d:4a:61:0d:5c:08:50:c8:85:7d:5f:97:e4:45:82:
94:56:a2:2d:a5:66:ec:d6:b1:26:86:52:dd:a3:14:
a8:1b:60:f9:bb:e4:f8:80:e6:cc:01:96:01:a5:0a:
f7:59:09:d2:0e:24:5e:da:7e:9e:e7:ae:f5:07:8f:
c6:32:88:d7:a4:a4:8b:d1:36:f5:ab:21:ee:4c:6a:
fa:0f:14:ac:5e:78:53:6b:f7:47:f3:bf:fb:ca:91:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:55:F8:6B:A1:DA:7D:E2:DA:F6:46:BB:A8:46:6F:9B:36:47:0B
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:61:06:10:b1:87:11:68:0f:7e:9b:a5:da:5b:61:a4:72:
9a:7a:3c:fb:39:ed:51:1d:35:aa:63:3b:22:8d:ab:4e:72:b4:
c2:d2:56:a1:80:f3:cb:1f:9b:42:e9:13:32:93:b1:9a:9b:00:
78:9c:70:3c:9d:12:9e:c0:5f:d1:88:d7:9e:99:4e:93:22:fa:
bd:87:05:98:3f:a0:a0:62:85:45:15:c6:5d:00:0c:1d:e1:d9:
b2:2c:b5:cf:e7:13:82:4e:ce:d0:00:76:36:9a:50:d2:0e:57:
8b:2a:8a:ec:fa:34:82:fb:c2:11:d3:87:a5:49:d2:aa:28:9a:
52:4e:29:9a:d0:dc:1e:8b:5b:82:c7:80:d3:20:cf:dd:a7:54:
08:cb:99:e3:61:a9:03:c0:ef:9d:59:e1:cd:dd:43:67:fb:2e:
73:29:c6:dc:cf:c8:f1:4d:53:35:bb:6d:27:41:62:8c:c6:ad:
09:85:8c:e7:00:8a:f4:34:c8:a6:c6:52:df:9d:ca:94:79:f0:
df:17:3f:fe:5d:54:12:0a:29:2d:98:92:9e:8b:fa:c2:24:1e:
b9:c8:b6:6e:15:4a:ea:51:4c:8f:7d:59:90:88:c0:23:0d:ed:
70:23:a7:74:3f:98:06:54:bc:5c:80:a2:8d:7b:0b:de:2c:4e:
b0:b8:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:35 2025 by rpki-client