Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: A5UCvnfR9ou0m7CFmZ7wI2xHqtHn8DaWP5XQqP2LIzY=
Subject key identifier: 38:C3:27:9D:47:C7:1E:F9:1F:DE:E8:C9:0A:85:58:16:CD:04:59:C6
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 01974968668A10791FB4E7F1F81AADDC5D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 12EE
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: Z6C/5bUfI8a9MdcW8SFkvdqNQ48aYGgEwC5XfDQtcfQ=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:66:8a:10:79:1f:b4:e7:f1:f8:1a:ad:dc:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=38c3279d47c71ef91fdee8c90a855816cd0459c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:e4:c0:87:54:b5:81:bb:4c:7a:c6:de:70:
51:d8:f5:6b:a7:07:bd:db:c4:c2:12:14:96:28:4e:
a3:9b:4f:6c:46:02:04:35:3a:bf:b5:fc:e1:4f:ae:
45:41:bd:51:c1:e9:1e:23:d1:82:93:fc:8e:3d:1e:
0a:27:f6:11:22:8c:7b:7b:d4:56:c9:bc:9a:89:28:
1a:95:20:db:6e:90:2c:23:57:c5:ec:29:7d:fe:b2:
66:94:76:35:18:9f:00:e3:2b:f7:9f:c1:ca:c7:13:
8a:4e:65:44:77:fc:30:57:c3:af:f3:44:f8:1f:77:
fa:dc:84:6d:bf:92:16:32:16:74:3d:88:6e:67:63:
d3:bb:8b:aa:43:c4:ec:a0:a6:00:d4:b8:33:8a:a1:
82:d2:92:0f:03:5e:bd:88:1a:ba:a9:e3:a8:de:27:
c7:17:4f:99:68:8e:43:a6:15:eb:b2:2e:6a:e8:93:
00:b4:88:fa:f3:4b:38:37:7b:8d:bb:40:38:27:9a:
26:17:df:43:2f:36:20:f8:9b:b4:e2:5e:d9:64:da:
0a:a6:68:93:e1:92:cb:e8:a9:d8:c0:61:63:d8:33:
df:4b:f0:df:b9:d4:bf:28:d3:fa:98:3c:47:2d:11:
5f:6e:c9:d1:ff:4e:06:de:4f:f0:ab:ba:1e:3a:b0:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:27:9D:47:C7:1E:F9:1F:DE:E8:C9:0A:85:58:16:CD:04:59:C6
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ce:f5:6c:e3:8c:32:a3:a7:c4:4b:36:05:cb:f7:18:27:84:
1a:ef:51:fe:7e:fa:4a:18:8a:9d:23:06:5a:f5:dd:e2:7a:39:
79:3d:a7:37:62:61:25:0a:96:f0:57:95:38:dc:40:1f:67:2e:
ab:e7:82:d0:30:90:24:38:aa:0e:bb:c7:e1:66:92:f1:f3:ed:
9c:fb:0b:be:4e:fd:1d:fe:76:38:f7:98:6a:97:d2:92:22:46:
22:03:94:f8:af:dc:4e:62:6f:bb:ed:bf:62:d8:0a:bc:e4:cb:
33:b3:76:8f:6a:37:b1:0a:6b:49:94:26:53:d6:51:8e:ff:b6:
78:fd:28:c7:ab:55:fd:7b:6f:1f:26:e9:b3:c3:ae:65:9d:2f:
96:08:a1:98:16:a2:dc:dd:f5:20:38:5b:fb:d2:5e:69:f8:10:
3f:92:4d:aa:b4:77:1e:8e:6f:76:91:8b:29:93:52:eb:01:c2:
94:ac:09:26:1d:fd:b7:3e:44:45:4d:74:85:3f:a9:c2:ee:aa:
f7:9a:e7:c6:82:1f:c0:c9:cc:61:08:e9:b7:17:94:87:ea:97:
e6:be:e9:33:61:6b:b9:92:e4:f5:54:26:b9:78:e6:88:a4:a5:
69:f0:1d:2c:cf:8f:20:36:44:1a:a3:88:23:ca:6a:72:62:16:
2a:83:10:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaGaKEHkftOfx+Bqt3F1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDAyOGYxYmEzY2VmYjBkZWJkNTFiZTlkYWM2OGM5Y2U1
NmMzZDUwHhcNMjUwNjA3MDgwMTA4WhcNMjUwNjA4MDgwMTA4WjAzMTEwLwYDVQQD
EygzOGMzMjc5ZDQ3YzcxZWY5MWZkZWU4YzkwYTg1NTgxNmNkMDQ1OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tbkwIdUtYG7THrG3nBR2PVrpwe9
28TCEhSWKE6jm09sRgIENTq/tfzhT65FQb1RwekeI9GCk/yOPR4KJ/YRIox7e9RW
ybyaiSgalSDbbpAsI1fF7Cl9/rJmlHY1GJ8A4yv3n8HKxxOKTmVEd/wwV8Ov80T4
H3f63IRtv5IWMhZ0PYhuZ2PTu4uqQ8TsoKYA1LgziqGC0pIPA169iBq6qeOo3ifH
F0+ZaI5DphXrsi5q6JMAtIj680s4N3uNu0A4J5omF99DLzYg+Ju04l7ZZNoKpmiT
4ZLL6KnYwGFj2DPfS/DfudS/KNP6mDxHLRFfbsnR/04G3k/wq7oeOrBQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjDJ51Hxx75H97oyQqFWBbNBFnGMB8GA1UdIwQY
MBaAFCLQKPG6PO+w3r1Rvp2saMnOVsPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUt
OTQ2ODE3YjU5MTQ4LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUtOTQ2ODE3YjU5MTQ4
LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzs71bOOM
MqOnxEs2Bcv3GCeEGu9R/n76ShiKnSMGWvXd4no5eT2nN2JhJQqW8FeVONxAH2cu
q+eC0DCQJDiqDrvH4WaS8fPtnPsLvk79Hf52OPeYapfSkiJGIgOU+K/cTmJvu+2/
YtgKvOTLM7N2j2o3sQprSZQmU9ZRjv+2eP0ox6tV/XtvHybps8OuZZ0vlgihmBai
3N31IDhb+9JeafgQP5JNqrR3Ho5vdpGLKZNS6wHClKwJJh39tz5ERU10hT+pwu6q
95rnxoIfwMnMYQjptxeUh+qX5r7pM2FruZLk9VQmuXjmiKSlafAdLM+PIDZEGqOI
I8pqcmIWKoMQpw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:52 2025 by rpki-client