Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: FCHfsFR6nRa9DXyZSNahj9P/CcijjLqE6WcfzlfVq/A=
Subject key identifier: 6D:8D:88:50:36:46:CF:16:8D:85:01:E7:C3:A4:89:DC:AD:AC:31:60
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019A72935EDCB9A60AE332166EC1A5ABE285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1491
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: XjIOWsJIKU5FLQUH1DT1MLUIOom3Mwi7O2aN/HmCY70=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:dc:b9:a6:0a:e3:32:16:6e:c1:a5:ab:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=6d8d88503646cf168d8501e7c3a489dcadac3160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:25:6e:a6:82:6c:a4:25:29:a0:3e:48:29:
57:38:ee:fc:98:e3:aa:3c:b6:84:31:5c:74:1b:ed:
36:90:2e:5e:22:32:98:7f:85:e8:a0:60:2b:76:60:
af:73:3f:5e:75:32:28:c2:d9:e4:68:a7:7b:de:46:
fa:b6:6b:89:87:d3:5d:84:c6:5f:2a:8c:42:a5:dd:
ce:44:e4:4c:8b:de:b2:aa:f2:33:74:de:af:e3:36:
c0:3c:d9:80:2f:5d:b1:fe:33:91:55:ed:83:34:a7:
3b:40:69:ed:d6:2c:db:b8:f9:45:4d:81:54:5f:b9:
e0:27:55:a4:da:ea:a2:23:e1:3f:1e:d4:fa:11:49:
74:22:23:cc:84:13:23:dd:fa:bb:d4:3a:e5:ba:c7:
77:25:1a:32:80:a6:e7:f2:61:51:ec:26:b8:bf:6d:
cc:ad:65:ac:a8:25:42:03:1c:98:40:63:5a:f4:37:
fd:32:54:95:2b:13:bc:c0:62:09:d1:59:a9:ed:4b:
e2:bd:44:4e:e6:8c:7b:26:3e:26:96:74:7a:01:de:
2d:3c:7e:7e:bd:ce:55:8e:6a:92:36:2a:95:6e:bb:
08:1f:28:05:89:ec:4b:70:a1:0a:cd:13:fa:b4:9b:
6a:e5:91:56:aa:78:c6:a8:7c:a3:34:30:70:3f:60:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:88:50:36:46:CF:16:8D:85:01:E7:C3:A4:89:DC:AD:AC:31:60
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:73:90:03:38:44:81:c1:2e:67:f6:2b:37:b3:de:02:80:
ef:58:8c:11:98:eb:6d:28:e0:62:01:99:90:ba:d8:64:ba:a7:
a2:4e:6e:ac:64:40:72:e0:4a:b7:6c:f7:80:68:28:21:31:bb:
cd:d5:81:3a:d1:66:e1:b1:17:39:53:a5:7a:71:3b:43:df:99:
50:70:7a:df:3c:9b:6e:93:db:47:77:b6:89:73:93:e5:fe:d4:
0a:0d:d0:b6:84:26:08:9f:74:21:30:07:d1:55:0f:68:1c:1c:
61:6e:90:87:ae:25:61:37:01:39:b0:28:b7:ad:46:7e:c5:06:
df:4a:01:89:f2:8a:09:8d:7d:71:f2:32:49:c8:0a:f9:ea:0e:
82:86:c1:f4:76:5e:86:85:11:46:23:2d:7c:54:2b:74:5c:b3:
fb:e2:db:0a:02:80:af:3a:b5:4b:cc:10:56:1c:b3:6e:ea:b4:
2a:05:a7:e4:2d:54:5b:b1:d7:b0:2f:76:6c:d0:9d:c2:fd:22:
0c:83:cb:de:f2:50:11:04:eb:ab:cc:9b:d0:3e:21:1f:af:b2:
ab:03:7f:01:f4:38:07:35:89:02:aa:bd:c1:34:15:61:22:8b:
f9:53:97:77:98:a9:a4:be:53:48:a6:52:23:93:87:60:ae:e6:
88:2b:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:01 2025 by rpki-client