Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: 8V+xqaCm7hQBYTF8Cu08+XN6KRAhuj5iUzYmwUimO6M=
Subject key identifier: 21:A0:A7:39:E0:24:F4:10:C4:6F:BA:B4:E9:D5:34:71:2B:7B:40:22
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 01987450ABF542A443BC1E8883EE26CB8248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 0515
Signing time: Mon 04 Aug 2025 09:01:40 +0000
Manifest this update: Mon 04 Aug 2025 09:01:40 +0000
Manifest next update: Tue 05 Aug 2025 09:01:40 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: hAPr0PJsUyi9/OfN5HPlthwxOX++qy4ySz7jwpwDQLo=)
2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ab:f5:42:a4:43:bc:1e:88:83:ee:26:cb:82:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Aug 4 09:01:40 2025 GMT
Not After : Aug 5 09:01:40 2025 GMT
Subject: CN=21a0a739e024f410c46fbab4e9d534712b7b4022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:52:08:0c:d4:2f:b8:60:79:bf:e4:a5:32:
8c:f6:c4:15:41:4a:e0:6b:60:48:64:10:a6:7e:de:
65:c7:eb:4d:f1:c9:80:8d:fe:a2:66:8c:0a:50:6d:
3b:89:75:11:ac:f5:19:0d:db:20:81:7b:f6:04:8f:
d3:04:e1:9d:ef:f6:7c:c2:8a:8d:a8:a9:25:03:4d:
1c:e5:17:bf:72:66:a2:82:bb:de:35:84:de:88:87:
37:56:85:9f:b1:ac:02:de:25:0d:5a:29:a8:39:50:
38:7b:1c:91:01:ec:96:cb:0d:15:75:58:ba:2d:43:
34:44:e0:4e:a4:0b:b3:0b:ff:79:f7:a8:40:b0:29:
af:e0:68:80:d3:9f:97:c1:31:6a:fe:e6:b4:83:77:
41:ab:21:70:d9:3a:b2:78:e3:ff:95:50:29:aa:8d:
0f:62:09:c0:67:4e:1b:27:76:a2:2a:f0:72:8f:60:
90:fc:d0:71:2b:e5:8f:3d:ef:a9:b2:45:6c:01:3f:
be:72:be:5d:82:1e:6e:b4:2e:92:8c:bd:ca:f1:7c:
23:79:99:b3:8b:f8:91:7d:d9:23:0c:b9:ff:13:ef:
b4:f6:2e:16:11:2b:28:e3:b9:3f:4f:3f:6c:a8:01:
60:06:b3:5b:4b:8e:0c:79:f5:46:00:c3:b6:0e:8c:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:A7:39:E0:24:F4:10:C4:6F:BA:B4:E9:D5:34:71:2B:7B:40:22
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:32:24:f4:c0:f8:dd:05:56:eb:23:b7:6b:6b:f7:96:b7:
62:92:47:4e:de:ac:72:8b:98:08:10:f1:bd:4b:ff:43:69:4b:
cc:46:5f:b3:ed:4a:69:98:a5:7a:cb:65:35:2e:ca:6a:00:56:
04:0e:8e:c2:71:57:90:b7:aa:6a:fd:e1:33:a6:1c:34:86:b1:
4e:82:5b:6f:b5:cc:f7:08:16:36:6f:a8:92:f8:dd:69:02:4f:
e9:21:71:8a:5b:3b:1c:0f:1c:0a:80:6a:90:82:e5:af:e9:c5:
67:80:2d:77:9d:2b:86:f9:76:6d:06:fd:1f:e5:73:6c:af:5d:
13:2d:52:1c:55:c8:6b:76:02:4f:b3:b4:da:3f:1a:34:a2:36:
70:a4:ef:ef:63:44:c1:a1:fe:ce:7b:ba:6c:bb:dc:c6:71:dc:
0c:57:9c:fe:d3:54:16:0e:72:ec:bf:11:c2:bf:e8:3a:b4:53:
77:4e:94:6b:82:b6:84:20:6c:7d:22:5e:33:49:75:c3:db:d9:
01:85:1b:9c:f8:b9:9a:4b:e3:be:f6:67:0d:07:d1:43:c7:e2:
da:c4:e5:ae:94:0b:88:e6:2e:53:58:85:c8:a6:6b:f5:3e:a6:
0c:94:d9:60:50:0b:47:07:0d:9e:11:48:45:af:c3:e8:51:22:
6c:17:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:03 2025 by rpki-client