Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: HKAX58oFMijTdVb+wJPXNtP7iUbNANz7YgeOoQ54OwA=
Subject key identifier: CE:98:0C:95:A9:70:92:AB:E2:6B:52:EF:D5:6F:64:3C:66:F6:14:2D
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019A4DE201AC0A52D62BDFF8D8F37B8E53B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: HPXjkmErvO990JRnWla990Kv9Q2BFkoSKeB9CQXA+lI=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:ac:0a:52:d6:2b:df:f8:d8:f3:7b:8e:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=ce980c95a97092abe26b52efd56f643c66f6142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:76:70:ee:7d:e2:a6:4c:f8:eb:6b:e5:99:
09:12:05:98:93:85:1e:d9:15:ed:c0:e4:7f:c2:98:
fd:45:9e:2e:05:57:14:2d:4a:3f:6c:b0:7d:71:da:
dd:be:4f:9c:83:65:cc:3e:c4:5f:c2:2e:ef:c2:2e:
a9:70:e2:b7:04:0c:0d:7c:18:bd:78:16:f8:f6:88:
6c:ac:36:7d:75:bc:3a:1a:27:95:1e:a8:32:15:a6:
14:da:f0:34:a4:26:95:9d:a5:5d:03:2c:aa:31:59:
a1:70:5d:a5:50:c5:9e:64:04:cb:f9:40:81:3d:f6:
99:c2:c9:84:34:42:2a:d8:6c:f5:18:f5:85:d5:8f:
f1:81:11:80:58:47:e2:93:77:d1:aa:45:21:5d:c3:
b9:a8:04:2e:89:f7:d7:a1:9c:c5:dc:3a:18:ff:85:
c6:31:3e:d2:3c:ed:d2:bd:81:ed:bd:ab:c6:a4:6f:
58:71:c8:ef:4a:4e:18:af:4e:4a:fa:5e:5f:51:e9:
ce:92:65:7f:38:af:94:f6:3a:39:a9:67:5e:13:77:
c8:48:a0:6b:6a:4a:23:b5:30:52:ac:73:9c:bd:18:
a4:34:81:5a:87:57:48:10:f0:c0:e2:09:e6:f6:8d:
94:a1:76:7f:c7:b5:89:a6:a6:c2:5a:cf:48:d8:b1:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:0C:95:A9:70:92:AB:E2:6B:52:EF:D5:6F:64:3C:66:F6:14:2D
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b7:0a:1d:25:77:29:8d:15:d8:5f:ed:d4:b9:80:33:b1:54:
90:39:84:16:49:25:15:d6:50:e5:c2:5b:5b:95:06:43:35:f9:
b2:cd:10:b5:27:e8:21:a2:d9:5c:cc:bb:ac:b9:49:e9:a0:a9:
84:4d:9f:18:92:c2:35:82:a1:1e:4c:b4:6d:94:46:0a:db:6d:
82:0b:bb:da:c2:6c:84:ad:d0:e6:7f:06:d7:9c:31:4d:34:bc:
b7:89:49:8f:4d:80:f5:3d:73:f6:76:64:27:59:93:98:a5:fd:
5a:99:bc:c9:fe:e9:1b:80:f6:cf:fe:55:0b:66:d4:3d:b0:ed:
26:cb:1d:6a:dd:c5:ca:ab:12:ba:03:cf:31:ab:60:3a:ae:5a:
26:40:5e:68:36:f0:68:d8:c4:a9:a4:ef:67:d6:28:d3:6b:43:
f4:f2:55:77:1e:66:9c:7f:8a:86:fb:4e:8e:90:ca:ab:79:dd:
3d:12:6b:7e:27:d7:16:ce:0a:a2:49:05:06:77:16:81:d2:11:
98:97:f7:3b:8a:62:c5:d7:d3:2e:5b:d3:81:e2:79:eb:16:0b:
0b:92:a4:b7:b6:cc:d0:78:ee:6c:f5:18:7b:af:60:75:d2:fa:
e8:6a:7f:28:92:d4:7e:68:bc:c6:c3:be:dd:f7:3c:9d:a6:d5:
6a:ca:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:20 2025 by rpki-client