Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: SRuo3KQ+QEs1fNBoODOLmf3g5GwKlzIlqJLjhHT5XIk=
Subject key identifier: FF:02:26:8B:87:F1:7F:51:CC:63:2D:BB:51:24:DB:4B:71:E5:BB:D3
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 019A7293A788728425F6CBD6689152DDD1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 080C
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: zQW55z7TmV5vGP2e7UXxBvpk37vI0GP9kwGvz914lwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a7:88:72:84:25:f6:cb:d6:68:91:52:dd:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=ff02268b87f17f51cc632dbb5124db4b71e5bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:a2:23:c0:8f:b4:de:b1:1c:b6:1d:c5:d3:
ba:85:54:fd:d1:24:97:3b:a0:3a:a7:08:35:3c:23:
d0:39:8d:3d:8f:08:63:5f:c9:30:1d:ff:79:a9:93:
b5:1b:f3:d6:ec:fd:ad:d6:7b:c6:eb:da:0b:b7:e5:
f8:eb:0f:04:60:06:a8:cd:1f:fc:01:0a:4b:e6:24:
1b:1d:ff:ec:64:75:7a:03:6d:5f:ac:04:cb:a1:1a:
28:46:2b:4b:6a:7d:ec:b5:9a:a9:a4:f1:70:bb:c1:
cd:1b:90:bd:22:a3:32:a2:f2:e5:06:fd:bb:0b:02:
7f:10:99:5a:52:f3:9a:41:f5:70:ec:89:29:f1:f4:
1e:59:39:0b:97:51:75:de:ab:8d:8c:51:5d:11:46:
10:2d:8b:f7:16:2e:73:16:8d:8f:1a:77:26:58:8f:
47:27:ad:d8:ab:63:66:bc:b3:09:f7:1a:2b:c0:27:
6e:8a:c9:bd:0e:9f:60:bf:22:b0:85:3f:f6:bb:f7:
7f:13:d0:1a:51:f6:c0:c1:a2:43:7c:ff:c9:18:b4:
00:cc:ea:15:da:7c:53:47:ed:65:5b:d9:22:20:98:
df:58:7e:f3:ad:6b:82:85:d5:38:b1:25:ae:30:a4:
bb:5f:6d:f8:4a:67:ae:55:a9:b6:ae:91:65:9b:2b:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:26:8B:87:F1:7F:51:CC:63:2D:BB:51:24:DB:4B:71:E5:BB:D3
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:ed:42:97:83:66:cb:96:ba:45:08:d5:9b:20:b1:76:b9:
ea:21:d1:63:49:be:48:cd:9b:b2:a9:6d:ed:e0:2f:f4:67:af:
95:c2:15:0f:26:39:d6:c0:7c:b9:42:c4:f2:1b:bf:e0:42:bc:
c1:e7:3b:73:41:e1:d6:fb:71:43:58:f2:7e:d5:a2:4b:e7:75:
e3:8a:64:de:e5:7b:be:a6:42:27:1a:91:ed:09:76:88:5f:0e:
28:70:7c:9d:25:56:4f:13:ba:5e:47:b1:cb:67:55:c8:4b:00:
dc:ce:86:39:59:4d:e2:cd:08:a0:e5:49:44:63:11:c5:df:0d:
da:2f:57:0e:eb:7e:60:34:54:9a:7e:a7:22:65:ce:ce:4e:72:
da:14:48:2b:33:69:0b:45:60:d6:dc:46:b8:30:de:4a:88:8a:
d1:a9:47:9c:a5:82:21:9e:3f:9f:d7:62:d6:be:54:0a:61:7f:
bc:16:d5:dc:21:65:86:b5:c1:14:ad:84:1c:14:08:96:7b:8c:
96:fc:1c:ba:d7:f4:78:9f:ce:91:4f:cc:bc:0c:ce:0a:9a:d3:
3b:43:94:47:f5:e0:09:a1:e6:48:56:9a:3c:41:a4:02:a8:5a:
11:0c:5c:4a:10:e8:2e:4b:7d:fb:4e:a5:d5:7c:80:59:b0:40:
49:a9:0b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:13 2025 by rpki-client