Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: tha6JQweFpm7A4cdergFE3jLsB4TBCNeWEAz1ad9iWA=
Subject key identifier: 5D:BE:68:CD:93:83:24:A6:92:7B:D9:89:7C:F3:55:2A:81:DC:ED:73
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 019922FA2BB22C643BAE34A050F49F47DDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 0838
Signing time: Sun 07 Sep 2025 07:00:44 +0000
Manifest this update: Sun 07 Sep 2025 07:00:44 +0000
Manifest next update: Mon 08 Sep 2025 07:00:44 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: d+6FHjfJfhKgo7D8GeqE+zqqUeBLiy0ndGKQ2XKm3Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2b:b2:2c:64:3b:ae:34:a0:50:f4:9f:47:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Sep 7 07:00:44 2025 GMT
Not After : Sep 8 07:00:44 2025 GMT
Subject: CN=5dbe68cd938324a6927bd9897cf3552a81dced73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:41:41:29:7e:2c:1e:44:44:ab:b6:0d:3d:
d2:92:e8:f3:60:a9:48:80:38:2a:17:44:bd:8e:85:
5e:9e:b5:cf:e6:a2:43:f8:52:bc:fe:d0:af:3c:5f:
01:c7:bf:d4:b3:9a:3e:b5:bc:ae:f2:86:6a:59:8b:
65:b8:f6:03:3b:1c:df:71:fc:39:ed:34:1f:98:e7:
51:e6:fa:3f:37:09:0e:04:db:6b:4e:ed:54:17:c6:
fd:06:ad:73:76:25:d7:bf:b3:7b:a7:69:fe:e6:9c:
a3:8e:f0:a9:69:9f:fe:23:59:8a:1a:26:7c:17:02:
34:79:e1:87:a2:8f:5c:3e:18:ea:e9:c4:a2:6b:53:
8c:9b:4d:6a:70:0a:00:6a:28:8d:ea:3e:f0:00:0c:
0b:4a:c0:df:d6:00:14:ca:f7:13:e8:40:35:54:4d:
6c:4e:b6:06:e6:b0:4e:46:0f:f4:b8:5e:a6:6f:00:
35:3e:f1:24:d0:65:98:3c:88:ac:7a:18:90:4c:56:
ff:e2:09:f9:f9:ac:87:be:bc:47:48:bd:0f:7d:36:
68:7d:ef:91:e6:d3:d4:1b:d6:1c:79:ac:cb:c5:0a:
9e:74:d6:7b:38:c1:34:30:71:e1:09:22:96:fa:9d:
21:be:33:38:9e:8c:dd:52:da:a7:96:fa:a4:31:66:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:68:CD:93:83:24:A6:92:7B:D9:89:7C:F3:55:2A:81:DC:ED:73
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:57:78:47:e4:36:4b:cc:07:f0:37:fc:c4:2f:cf:54:45:
08:96:bd:1a:97:58:84:94:a7:df:24:c5:dd:d4:f2:6c:be:af:
3e:4b:15:fb:91:ff:71:47:d1:0c:3e:c7:72:9c:e8:02:4d:9a:
38:3e:cd:3e:40:39:5a:4e:1c:18:f3:88:88:2f:da:c7:9c:3a:
1c:fb:8b:14:01:3b:0b:f8:39:f2:ce:3b:4a:cd:c7:9c:93:e9:
45:2e:f5:34:3a:49:d2:96:8e:89:8b:59:28:47:bc:11:4e:97:
71:34:bf:81:64:3b:51:d1:fc:a2:c0:40:38:bc:51:39:c4:2b:
2e:c1:91:9a:74:cd:9e:1f:47:e1:8a:69:96:65:32:e9:8f:e9:
18:12:6a:99:fd:31:59:50:dd:a7:8b:66:c2:ad:b6:6d:c1:78:
77:c8:48:8e:80:07:c1:56:85:77:ca:44:b0:09:f7:6a:84:bc:
e3:39:b5:56:d4:9e:1c:a0:77:54:26:7e:83:c7:c2:c3:92:d6:
30:d8:fa:47:f3:4a:1c:66:fe:e1:eb:3c:bb:8d:25:11:b4:3a:
62:a4:c3:41:0b:66:ed:2a:86:9e:b4:11:62:23:a0:88:0c:87:
99:65:2a:e8:f7:24:04:a5:f0:b9:05:9d:58:d2:6a:16:1f:a3:
88:ba:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:50 2025 by rpki-client