Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: MQgENOxBC4uIQGNy/hvDg6Aro9tJ5F617w7YlUccKbM=
Subject key identifier: 64:87:C7:66:61:35:FF:E3:03:59:3A:35:9A:1C:55:B4:F8:EB:DD:75
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 01992D47A90F7163685B0B41D7AF5D61E8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 07:01:34 +0000
Manifest this update: Tue 09 Sep 2025 07:01:34 +0000
Manifest next update: Wed 10 Sep 2025 07:01:34 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: b13Jk1yD3JtfKTD6R8F/hb4zZmv19yGuBqv+eZUOAzI=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:a9:0f:71:63:68:5b:0b:41:d7:af:5d:61:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Sep 9 07:01:34 2025 GMT
Not After : Sep 10 07:01:34 2025 GMT
Subject: CN=6487c7666135ffe303593a359a1c55b4f8ebdd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:c0:dc:d1:39:c0:8e:84:c5:53:99:e4:ec:
23:96:89:e2:57:18:49:c2:3e:cc:69:2f:69:a3:9e:
3d:91:c0:34:7f:0b:31:2b:68:a8:52:b9:c7:92:ed:
ce:9f:a4:e2:0d:66:38:16:d7:f8:bb:4f:69:22:d4:
3b:fc:88:aa:d0:28:cd:af:02:82:c2:9f:c2:1c:ab:
c7:61:9c:26:d7:53:3f:11:91:c0:21:53:d9:0f:2c:
12:f1:fd:5c:88:6d:f3:69:83:82:25:aa:88:c6:f2:
7f:ce:4f:3d:44:5c:60:c0:0a:7f:ac:c4:98:8d:6f:
5c:22:26:28:6f:d5:e5:55:a7:52:68:57:b8:2b:1c:
35:b9:18:05:6a:21:c0:65:55:05:f7:a1:e4:55:44:
1c:57:00:9c:d9:5d:e3:61:64:1a:d6:83:67:d1:9d:
35:7f:89:95:2b:23:b6:37:ef:54:d6:93:6d:f6:bc:
19:b3:2b:ec:40:5e:3e:81:60:28:56:ab:b6:05:a0:
14:10:80:52:68:2a:c9:04:92:5f:ac:ea:4b:c9:2a:
56:4c:c9:06:e3:c6:3e:d6:7c:29:cc:94:41:15:a6:
7e:7f:11:4a:0f:ec:25:b6:97:77:62:09:6c:f7:26:
d5:dc:ea:3e:b6:e5:b1:de:de:4f:67:40:5d:35:82:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:C7:66:61:35:FF:E3:03:59:3A:35:9A:1C:55:B4:F8:EB:DD:75
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:46:80:39:66:59:f0:68:65:3c:1c:b7:47:19:04:74:f8:
9f:8a:39:e6:d2:0b:a5:43:b6:92:3f:5b:00:46:f0:ea:ed:a8:
e9:f9:b0:ae:6b:c3:30:3b:d9:bd:ef:0d:39:6b:20:c9:fa:39:
2d:e6:04:75:c8:b7:8b:20:36:c8:30:a2:a0:02:40:c0:38:56:
b4:25:16:2d:f6:39:3e:eb:ed:03:92:0b:d2:27:0a:2c:83:00:
0b:b0:00:f8:9f:6a:0b:80:e3:11:15:1e:3b:d2:2f:9b:b6:6d:
4d:70:ac:c2:28:aa:65:f4:8c:d8:1e:f8:d5:37:f4:22:37:37:
a7:6a:08:e5:d0:a7:4f:14:cf:0b:f1:d9:99:80:02:c6:b3:73:
98:56:41:59:76:b6:d0:1c:3b:00:12:7d:91:fa:5d:9b:0a:c7:
43:8a:97:26:89:c6:db:9c:c0:35:42:75:20:32:09:d8:27:b8:
9d:cc:bc:48:a9:73:9f:3d:cd:c5:c7:f2:16:d1:6c:c7:81:96:
e7:49:67:eb:5c:a6:29:7d:c3:7a:d2:49:56:d7:fb:e2:1b:32:
ff:b7:12:eb:5c:de:f8:5c:54:61:89:32:08:19:c8:82:6d:27:
b8:0d:3b:27:16:ae:58:e5:19:c0:18:8b:db:b5:57:5f:43:3a:
bc:08:56:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktR6kPcWNoWwtB169dYeizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux
ZjBiMmUwHhcNMjUwOTA5MDcwMTM0WhcNMjUwOTEwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg2NDg3Yzc2NjYxMzVmZmUzMDM1OTNhMzU5YTFjNTViNGY4ZWJkZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/rA3NE5wI6ExVOZ5OwjloniVxhJ
wj7MaS9po549kcA0fwsxK2ioUrnHku3On6TiDWY4Ftf4u09pItQ7/Iiq0CjNrwKC
wp/CHKvHYZwm11M/EZHAIVPZDywS8f1ciG3zaYOCJaqIxvJ/zk89RFxgwAp/rMSY
jW9cIiYob9XlVadSaFe4Kxw1uRgFaiHAZVUF96HkVUQcVwCc2V3jYWQa1oNn0Z01
f4mVKyO2N+9U1pNt9rwZsyvsQF4+gWAoVqu2BaAUEIBSaCrJBJJfrOpLySpWTMkG
48Y+1nwpzJRBFaZ+fxFKD+wltpd3Ygls9ybV3Oo+tuWx3t5PZ0BdNYLxAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSHx2ZhNf/jA1k6NZocVbT46911MB8GA1UdIwQY
MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt
ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx
LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ1GgDlm
WfBoZTwct0cZBHT4n4o55tILpUO2kj9bAEbw6u2o6fmwrmvDMDvZve8NOWsgyfo5
LeYEdci3iyA2yDCioAJAwDhWtCUWLfY5PuvtA5IL0icKLIMAC7AA+J9qC4DjERUe
O9Ivm7ZtTXCswiiqZfSM2B741Tf0Ijc3p2oI5dCnTxTPC/HZmYACxrNzmFZBWXa2
0Bw7ABJ9kfpdmwrHQ4qXJonG25zANUJ1IDIJ2Ce4ncy8SKlznz3NxcfyFtFsx4GW
50ln61ymKX3DetJJVtf74hsy/7cS61ze+FxUYYkyCBnIgm0nuA07JxauWOUZwBiL
27VXX0M6vAhWMg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:09:57 2025 by rpki-client