Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 7aZ6VBkd/1oEo9PC22DEjIxZZFwMxzFvKh3KMd39t+s=
Subject key identifier: E4:3E:1A:ED:15:64:4A:73:E6:83:1C:89:5C:9F:94:DC:4C:89:3D:46
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019A4EF4CBBBDB5CC3B149EB7E6CD0F0BB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: M/LXXR3uVJ7oiifrNGKdaPdRfzGsDC1U3Hhl0B+uUBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cb:bb:db:5c:c3:b1:49:eb:7e:6c:d0:f0:bb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=e43e1aed15644a73e6831c895c9f94dc4c893d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:cb:8d:e0:6c:fa:45:96:31:17:e6:22:dd:
23:e9:61:88:7d:fb:7e:f9:1e:11:ae:5f:98:a7:37:
c8:88:dd:9b:65:ca:3b:05:a1:ae:ad:20:ea:84:3b:
f3:c8:dc:58:d6:82:6f:4c:00:9a:41:dd:41:e5:57:
6e:51:e7:de:41:b6:3e:3a:4f:51:e2:c8:e9:cd:c4:
dc:59:73:d5:b7:0b:ba:2b:87:06:81:e8:7c:03:bb:
b8:87:7e:a5:d0:d5:70:aa:32:2c:dc:e2:8d:df:37:
94:33:e2:ef:91:b6:58:84:f3:b5:ec:a4:04:ec:af:
3b:a1:b0:34:df:10:39:e8:b0:16:55:a7:19:53:46:
f4:c4:8c:41:c4:93:2b:4d:ee:e6:6d:bf:8c:cb:83:
35:fb:df:c4:9f:bb:05:85:62:ac:11:05:50:f0:f3:
5e:af:33:b6:98:30:49:e8:6c:a1:4f:09:f5:e3:c4:
5d:b4:c7:e0:ba:55:55:d0:88:b6:54:19:21:ae:5d:
12:ef:06:9d:36:b2:bb:d1:83:e7:09:5d:5c:23:d2:
6b:ad:62:92:e3:a4:cd:91:40:14:20:48:18:1d:43:
40:18:8a:e1:1d:a4:78:2f:b5:f2:90:0a:48:25:fa:
05:c1:94:44:c6:d6:a9:82:71:a3:cd:04:06:f6:0b:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:1A:ED:15:64:4A:73:E6:83:1C:89:5C:9F:94:DC:4C:89:3D:46
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:92:b0:f7:b9:1a:ae:8b:1a:2c:ef:85:84:12:5a:00:21:e1:
2f:c1:62:6c:71:da:b1:e6:a1:2c:25:76:b3:55:4f:ef:bd:25:
a8:79:52:6f:a1:3a:1c:72:01:a3:7d:30:da:bc:6f:43:2b:f8:
75:39:5b:0a:a6:b3:97:c6:5b:4b:97:88:01:38:3d:9f:dc:09:
24:60:85:56:ae:fb:36:7a:a0:82:96:00:da:00:df:d1:16:91:
b4:20:e3:26:b9:8b:04:10:cf:ec:89:a7:94:d1:97:d0:79:a3:
0f:95:bf:2c:2b:28:22:3e:60:41:2f:c1:47:f3:21:d8:cb:25:
71:24:5a:55:58:ae:e9:b3:ea:9b:09:f1:15:19:5e:05:7e:1e:
87:ec:fd:c2:17:16:e9:ae:79:76:2c:34:3f:99:cc:cd:8c:df:
7e:03:59:9a:18:11:aa:58:44:df:66:36:2b:f8:2c:f1:4e:74:
48:d4:c2:b6:e8:88:8f:43:2d:7e:15:8d:bd:d6:82:a7:b7:e0:
30:70:e8:dd:a0:0e:df:d2:8a:90:b2:89:6d:3a:70:6e:9a:5b:
23:66:32:54:93:c3:11:c9:0e:66:1b:d9:64:d0:8f:3b:95:97:
4c:15:12:c7:91:09:ac:a4:19:f5:ea:14:96:cf:e9:71:6d:8e:
c4:2d:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:02 2025 by rpki-client