Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: 02jN6//HTT3B5YlKy1qAPkkppjY7fqjOVDA8fheb4t8=
Subject key identifier: 7C:8B:AC:BD:1B:06:A2:68:D6:22:3D:EE:9A:2E:6F:C3:8D:3F:10:29
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 019A7112AC254A23CFBFE6E1C60A077A3A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 08E5
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: JnPXdvy6aG7SU0D5qPSK3nJXa4FmUWzvnBRWWl+hshg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ac:25:4a:23:cf:bf:e6:e1:c6:0a:07:7a:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=7c8bacbd1b06a268d6223dee9a2e6fc38d3f1029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:9a:b5:90:d4:8a:24:ca:3a:ce:27:52:76:
8f:f6:6e:5b:e7:4f:04:fd:53:22:1d:5e:52:83:8c:
87:e6:6d:72:88:9a:70:2b:f3:07:f7:d4:f6:a6:86:
1b:08:9f:79:cd:f5:64:ad:f0:a1:ea:80:c3:78:d9:
94:aa:ab:9c:f7:12:9d:e0:e1:4c:bc:85:44:01:80:
5a:b4:33:57:29:a2:2f:21:20:60:f4:b7:9c:66:72:
90:81:a5:a9:54:d9:8b:17:d9:29:89:12:c3:61:b4:
4a:d8:8e:85:7b:b4:9a:78:b4:4e:f9:97:0e:27:03:
34:53:4c:0b:ae:54:24:c0:c8:b8:47:0a:ab:76:99:
90:79:d2:07:65:c0:f2:a1:d4:3d:e9:44:45:45:ff:
2f:52:28:26:04:be:e2:2c:b6:13:37:5f:eb:28:56:
81:cf:b8:5f:13:65:e3:6d:18:da:7e:a2:c6:72:fb:
f0:ff:54:22:64:1e:50:35:26:1c:78:5a:5c:4a:55:
8e:9c:a0:56:d9:0c:fe:15:eb:cb:d7:20:cc:63:e5:
07:85:c8:0e:c6:f3:0d:34:e7:82:22:33:43:f1:29:
fc:85:79:48:a1:64:d7:69:69:0b:5a:6c:95:aa:c8:
e9:7d:7a:7f:33:b1:55:cc:e5:d5:57:f9:37:3e:b1:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:AC:BD:1B:06:A2:68:D6:22:3D:EE:9A:2E:6F:C3:8D:3F:10:29
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:f0:fb:dd:61:be:0f:cc:d0:fb:8c:b3:d5:f7:4a:5e:c5:
2e:17:d4:cd:fa:61:18:37:3f:6a:d5:64:ff:62:9a:ca:33:3e:
36:63:fd:b7:eb:68:4e:d1:ca:02:44:c5:19:ef:ae:cd:0c:54:
50:9d:86:85:68:55:d8:2d:6d:f2:b6:7d:64:c0:47:46:35:48:
e0:bf:f9:51:30:a5:de:6a:43:12:f3:d1:68:bd:4e:bd:6b:98:
c9:9d:2c:67:7c:9f:23:3e:d9:27:23:c5:22:91:6c:3e:f5:eb:
1e:55:18:55:88:8b:bd:f6:1e:d0:bd:8f:19:cf:ef:9b:ac:c3:
c7:33:31:df:5a:5a:55:08:54:3b:02:82:c9:d7:78:88:db:9e:
06:1c:bb:ee:6a:7a:75:eb:3b:d1:48:b0:9d:40:d6:a6:48:94:
cf:54:e3:1e:74:63:4a:7d:69:c3:32:70:93:0b:c8:a6:e0:1c:
ac:2e:41:5c:71:1f:af:91:ee:14:5e:68:de:ae:ee:55:39:3b:
3c:6d:1b:45:2c:4a:3a:57:fa:11:da:6d:ed:00:d8:18:fa:6e:
94:03:57:90:05:14:49:83:b1:af:7f:1c:7b:cd:a1:27:21:3b:
c1:89:ac:4d:f9:79:9c:c3:ca:c9:86:19:b0:bb:19:ad:50:61:
f7:08:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client