
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: /IXNkwUO7lJAx43XmHM24kRMUB1QN6flRhqRdH8ccV0=
Subject key identifier: 11:99:14:FB:AB:AF:78:E7:B7:BA:1D:25:D1:9F:93:63:73:FB:C0:56
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019873E3497C5F09703AE98FC6419D78EACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: uP/JMa/UQes51ZzHhQy5K10MYm7bBpOOnO+2vnviTOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:49:7c:5f:09:70:3a:e9:8f:c6:41:9d:78:ea:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=119914fbabaf78e7b7ba1d25d19f936373fbc056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:61:cb:7b:c1:5e:3c:74:bf:e2:8b:4c:53:
56:51:9c:35:d6:c0:b8:70:2b:09:54:49:92:59:aa:
e8:56:02:76:95:aa:8b:eb:07:88:40:48:d8:ec:df:
f9:9d:67:8e:43:cb:8d:4d:05:bc:0b:d3:31:f4:6c:
9a:ba:18:e1:10:91:be:13:f9:ad:8e:cd:f7:49:ef:
a6:a6:11:c2:d7:91:ce:f8:74:9c:75:e6:50:d8:cc:
e5:e9:15:27:76:f1:4b:12:27:5c:0e:6a:5d:d4:23:
dc:72:39:70:44:44:63:a8:c0:56:cc:d7:7a:b0:eb:
66:39:e7:7f:35:24:60:af:11:7f:72:2c:57:13:39:
8a:39:17:f2:1b:fa:7c:0e:ba:8f:54:2d:8e:4f:d1:
af:aa:20:dd:9c:67:16:72:ae:d2:aa:c6:df:7a:91:
b2:28:cb:15:b5:e1:83:3e:50:67:06:45:4b:ac:22:
80:12:e3:12:96:29:ed:53:0d:26:bd:1e:3f:05:25:
af:0b:8f:76:79:33:f7:55:31:7f:b7:99:aa:1d:d9:
df:06:ba:2a:f2:9d:c8:7c:03:e1:8a:41:f8:9c:db:
59:57:16:95:71:78:07:bf:41:32:d3:5e:9e:9d:2e:
cd:6f:1f:74:57:36:1c:44:be:6b:06:0f:f4:ac:12:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:14:FB:AB:AF:78:E7:B7:BA:1D:25:D1:9F:93:63:73:FB:C0:56
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:32:bd:d8:7a:b4:fe:24:71:ab:15:1e:d0:68:86:62:58:
65:43:d8:4e:cf:f3:26:b8:10:de:b7:89:91:26:46:c0:60:e5:
95:76:20:46:30:0f:af:de:86:3d:53:38:6f:8a:75:be:a0:09:
fa:cb:9d:70:0d:d6:e7:6a:09:24:b8:83:c0:be:5f:f8:a5:57:
63:fc:c0:f2:c5:8b:b8:fb:eb:ae:93:53:67:aa:d4:db:f2:ac:
64:f8:d5:49:7a:10:11:35:0c:f8:8d:cb:ca:5f:1a:81:40:7c:
ea:a3:6e:ed:85:05:67:ed:49:e5:2f:7e:56:d4:26:8c:6e:5c:
ea:ae:01:6a:75:d9:c5:c2:52:72:5e:55:7b:d9:6c:9e:f0:92:
1e:c5:07:5b:52:63:09:fc:d3:5e:ba:c4:c6:20:e3:53:6d:1b:
67:ac:db:e2:c5:c3:86:c0:b5:d3:bd:31:05:3e:e4:f3:73:b4:
82:4e:1d:49:46:2d:d9:a1:8d:e4:cd:61:a3:f5:dd:87:74:ee:
01:ba:b8:b1:41:08:76:84:78:de:e9:e7:6a:2f:70:0f:d5:89:
e7:8e:11:41:a8:d4:d2:54:c7:87:4a:79:93:f0:41:22:1d:be:
a7:35:2b:53:0d:13:9c:c2:dd:62:c7:36:f1:7a:65:b4:a4:c6:
83:d5:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:06 2025 by rpki-client