Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: 0kl1p8xKWxHVh1M6fzdYB47Z4CDNVEmzDt8ubbbM2pA=
Subject key identifier: A5:0F:10:D7:69:01:72:C3:CA:05:FC:32:0B:73:25:2B:03:B0:CB:58
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0199307F583F482ECA2445D519EC5DF94B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0C10
Signing time: Tue 09 Sep 2025 22:01:15 +0000
Manifest this update: Tue 09 Sep 2025 22:01:15 +0000
Manifest next update: Wed 10 Sep 2025 22:01:15 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: 1GwWrFaurWk8swT5/mmjWXQXgahoblHukkNMF13nANc=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:58:3f:48:2e:ca:24:45:d5:19:ec:5d:f9:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Sep 9 22:01:15 2025 GMT
Not After : Sep 10 22:01:15 2025 GMT
Subject: CN=a50f10d7690172c3ca05fc320b73252b03b0cb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:bc:19:18:fb:3f:ea:15:10:ed:ff:88:ad:
26:94:0a:00:f7:d4:d6:d4:de:2d:20:0e:34:e4:70:
f6:9b:b2:2c:ba:f9:ea:20:16:4d:55:65:55:11:ea:
d4:43:bf:02:45:22:61:05:04:6b:bd:e2:0e:5f:53:
16:4c:2e:e8:25:7d:19:e9:0a:9c:62:79:4e:33:4b:
5e:6f:07:8a:da:87:34:86:97:4a:7e:0a:97:86:54:
87:4d:02:a7:0f:12:c0:9b:0f:b3:cc:64:73:52:92:
da:f5:44:43:77:83:fc:40:91:03:6e:d6:cb:4c:7c:
ff:6c:81:2b:1c:81:88:00:e8:81:fc:c3:6e:46:c7:
d2:6f:9d:40:a4:e0:c0:c8:a4:6a:18:07:08:d7:8c:
1e:ff:3e:a8:12:7a:21:81:9c:09:b1:40:3a:49:2b:
45:f7:21:bf:a0:62:ff:39:88:a8:ee:a0:90:1a:40:
9d:57:b7:a3:15:61:8c:64:14:72:b3:75:ac:b6:5d:
e8:60:ea:6a:25:78:79:21:c6:5d:00:f5:e6:e2:b9:
00:a0:0c:3a:66:19:15:38:31:bf:00:55:e1:76:32:
b4:1d:b3:47:7a:94:c4:ac:3b:f3:c0:6f:98:a4:94:
92:07:6b:87:b7:aa:a6:7c:9d:06:4c:18:f5:05:ad:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:10:D7:69:01:72:C3:CA:05:FC:32:0B:73:25:2B:03:B0:CB:58
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8d:15:b6:dd:7b:8e:9a:a6:53:cd:38:ef:6e:66:74:55:0c:
98:41:5f:3a:50:e4:5c:ad:00:7b:aa:eb:6e:0e:60:17:72:45:
e2:4a:2a:bf:64:44:aa:01:57:93:e6:18:85:23:4b:4b:79:f4:
92:67:e9:10:e0:2e:cb:d5:ce:3d:84:4a:56:6b:39:ab:f6:fe:
54:57:ac:e3:36:c7:02:2e:ce:ec:70:bb:08:d8:43:e8:6e:d6:
7d:22:d0:ee:74:06:e7:ca:63:d1:25:c1:0b:20:65:d9:d3:aa:
f5:27:1c:a1:c1:b0:7a:7f:30:9d:d4:de:2b:3a:fe:bd:cd:d8:
c6:d4:3d:f6:0b:d9:ed:f1:8a:a5:0a:11:a8:d3:c9:52:48:ea:
29:2e:e8:32:d4:8c:17:ae:3e:eb:cb:3d:c4:54:79:9e:57:cc:
d0:e3:98:d4:9d:24:65:28:2e:74:63:dd:fa:39:1c:5e:19:08:
7e:58:1e:9b:4c:50:e1:c8:5f:df:8b:28:5b:af:c9:d0:a6:49:
01:69:00:28:6d:8e:a8:9d:c4:d8:ee:09:38:47:29:29:11:21:
43:1a:8f:15:14:18:80:0f:5d:eb:b3:fe:4e:64:72:6c:35:3b:
09:ab:5d:4f:a1:d2:e0:0b:3d:39:bd:5d:73:e5:40:a8:5b:a2:
90:f8:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:00:49 2025 by rpki-client