Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: 7crizF9QZNhr5UbwPcyVxL7GRfTSH7QjzkQNSVIoEw8=
Subject key identifier: 80:EE:24:EB:90:51:77:CF:34:16:B2:8B:32:91:69:A2:32:97:77:83
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019A4D743BE9351AEA399EB0FFC388E7AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0F75
Signing time: Tue 04 Nov 2025 06:00:54 +0000
Manifest this update: Tue 04 Nov 2025 06:00:54 +0000
Manifest next update: Wed 05 Nov 2025 06:00:54 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: Lv5GSFcOYzGyb7vnsmDebfJea5SyCAB4GevMcma8d6w=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3b:e9:35:1a:ea:39:9e:b0:ff:c3:88:e7:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Nov 4 06:00:54 2025 GMT
Not After : Nov 5 06:00:54 2025 GMT
Subject: CN=80ee24eb905177cf3416b28b329169a232977783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:63:7d:ab:01:3f:f3:0e:6e:2b:f1:9a:61:
4f:f7:a6:17:cb:f3:c5:32:80:7f:9f:73:b6:1e:59:
29:9d:43:97:68:b3:e1:ff:a4:49:26:85:ac:22:3f:
83:15:56:ae:88:39:3d:92:d8:ef:7f:3c:cb:fe:6a:
46:64:9f:f5:69:12:96:ce:f2:06:cc:f3:9e:f4:97:
b2:5b:9b:26:7a:fd:52:53:b4:c8:45:24:43:56:3c:
10:a0:47:26:72:02:ee:b3:d6:20:95:80:8f:59:dd:
fb:b9:3a:17:0d:ea:de:d5:83:00:6d:74:b7:b9:e9:
1b:27:65:07:f3:fa:da:a2:6b:33:4b:a7:ef:d3:63:
2b:eb:fc:08:a8:33:9b:1a:be:02:86:de:84:b3:d4:
21:bd:64:f0:a4:e1:30:72:e9:b1:64:ca:7f:63:77:
ff:8d:d2:f2:94:d9:3e:af:51:2a:62:a1:54:80:d5:
cc:08:7a:31:e6:69:bd:91:d0:15:68:42:6f:e0:42:
19:6f:31:7f:c8:4d:64:38:ab:91:f8:e8:22:6b:83:
e9:d0:81:ca:6e:fc:7b:96:31:4d:af:92:93:58:d0:
ca:b3:cf:66:ed:86:7c:50:45:91:20:0e:5a:a4:94:
c9:a0:40:24:31:64:e8:11:89:62:43:8e:d7:35:42:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:24:EB:90:51:77:CF:34:16:B2:8B:32:91:69:A2:32:97:77:83
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:48:48:c5:04:32:43:b9:23:4f:f1:00:bc:fc:b0:b1:fa:
87:2a:08:2a:13:50:d1:94:dc:de:8c:a0:6d:ee:27:fb:4c:60:
5f:32:8c:62:4f:51:5d:de:ab:6b:f0:a0:5e:db:2d:45:80:d4:
73:21:a1:5f:72:a8:03:eb:87:01:c9:16:b9:84:9a:62:70:8f:
9b:db:8a:02:9d:48:14:41:7b:e9:bd:4f:95:aa:77:19:dc:1f:
06:cf:50:35:48:97:fd:61:b0:ec:ec:fe:11:9c:71:ba:50:07:
5a:a7:ac:87:c5:37:8f:44:4d:e7:ae:b9:7e:f3:ca:61:cb:86:
8b:a4:6a:fa:b8:a0:1f:3e:bc:33:c9:81:5d:a9:36:6e:51:8c:
5a:45:c3:74:36:d7:3d:35:51:61:4e:d3:2e:0c:39:ae:e9:ab:
7d:e7:0f:e5:15:6e:c1:fd:34:6c:37:57:50:d2:9a:08:0b:00:
0e:3b:0c:93:c0:37:7a:86:93:33:5e:54:ba:ef:9f:e0:96:8d:
fd:3d:22:c3:64:53:a9:99:2e:3f:76:54:9b:c5:b6:7d:5d:81:
6d:a8:ca:bf:7c:97:80:63:ba:ac:c4:06:3c:db:50:28:65:c9:
2b:73:f2:19:e3:1a:5b:d9:cd:21:1d:0b:e4:5d:b5:1d:e3:c1:
37:73:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:56 2025 by rpki-client