Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: UxomnH2vgiMfcdB3i8u89slHyPDuRKaUZqUfpc4aIh8=
Subject key identifier: F2:86:3A:E7:FB:A6:6A:77:69:1A:8F:60:3E:D4:8F:C1:6A:9B:A7:3B
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019A1F1AA2E6511CA6D938BF90520E2A51F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 163A
Signing time: Sun 26 Oct 2025 06:00:30 +0000
Manifest this update: Sun 26 Oct 2025 06:00:30 +0000
Manifest next update: Mon 27 Oct 2025 06:00:30 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: f5EiZsSj6B6AewLWjjzu22TV1XK58SGMCDaZO6fE/2w=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:a2:e6:51:1c:a6:d9:38:bf:90:52:0e:2a:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Oct 26 06:00:30 2025 GMT
Not After : Oct 27 06:00:30 2025 GMT
Subject: CN=f2863ae7fba66a77691a8f603ed48fc16a9ba73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:9e:cf:54:0a:2d:55:d8:57:50:7e:31:9b:
b0:36:4f:eb:9b:33:82:38:19:62:10:a9:2f:9d:f5:
35:c4:e8:0f:02:9a:10:52:a5:dd:b3:d5:1e:9e:4f:
74:f5:42:43:d3:68:99:ee:c5:20:d9:27:c3:62:43:
b5:5a:c9:ab:26:0a:1d:fd:93:c1:8a:f7:d7:4b:86:
e0:b7:50:af:70:8d:13:a5:54:b8:7e:5e:64:7a:47:
18:67:a6:a7:98:c4:1a:d1:37:4b:e0:5f:c2:a1:22:
16:3e:51:72:c7:1a:f2:c5:7d:f2:94:19:f4:26:97:
bd:6d:5c:cb:a9:0a:b8:ab:46:e2:ce:f8:5b:92:dd:
35:14:69:d4:cf:a6:48:46:7f:b4:9a:e5:ca:b7:d2:
89:cb:df:f9:35:a3:b2:6e:3b:25:ab:74:fd:e8:2e:
61:52:8f:4c:74:24:7f:a8:58:5c:6b:3b:55:07:49:
4d:cf:a6:53:d5:d9:57:9d:1f:4a:b1:ff:c8:6c:4a:
2a:0b:00:52:24:b5:2e:db:62:45:01:9a:14:3d:9b:
8e:d1:e5:c7:a5:d4:a9:7b:cf:5e:d9:c5:b1:56:1b:
10:0f:82:f3:84:d9:7e:e2:15:37:5a:ae:71:86:25:
8b:ba:57:c9:4f:29:15:b1:a0:43:fd:e9:d1:23:5a:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:3A:E7:FB:A6:6A:77:69:1A:8F:60:3E:D4:8F:C1:6A:9B:A7:3B
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d8:29:c0:1f:86:1a:d7:d4:1f:cd:b6:8f:63:f8:bd:33:67:
1b:bc:7f:2a:7f:02:65:9d:7d:bf:a3:2d:0d:14:9b:af:d7:84:
ee:74:47:46:de:ab:62:bb:bd:0d:54:9a:d9:5b:9a:68:32:eb:
82:dd:e0:6c:f3:2b:ca:f8:4b:7a:b0:43:18:e8:ac:70:b2:2d:
5b:9d:63:2e:e6:e1:d4:7a:d9:27:be:1a:d0:d0:0f:e7:fd:61:
54:de:01:12:da:52:36:ba:7f:fa:7f:3b:09:52:cf:5d:e2:25:
a3:63:bf:a8:85:7e:c2:e1:5c:f4:75:09:c2:fe:f3:93:1c:63:
57:50:3e:e2:73:27:08:19:20:66:be:82:86:7f:88:3e:ab:d4:
47:70:d3:30:a1:6e:2b:c3:ed:6d:c0:bc:f4:eb:78:3a:10:d8:
66:8f:22:fc:30:df:bd:1f:93:de:93:68:5c:40:a9:9d:ab:3b:
cd:4e:00:87:eb:07:dc:79:66:f8:1f:e6:d6:c1:9a:69:8c:d7:
6e:e9:24:52:0e:1d:f0:ea:f8:90:65:5f:8e:ff:17:c6:63:ce:
4f:d2:c8:37:46:16:87:55:18:af:2b:82:75:b6:63:21:ba:ec:
0d:47:f0:7f:e9:ac:27:ed:7d:dd:57:8d:f3:67:e3:a3:47:3d:
c2:ed:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:34 2025 by rpki-client