Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: bd5aACyTueQRsZg1FsKi3WwJqaReNaWzpA3mYyD9tL0=
Subject key identifier: 0A:D6:01:DB:05:9C:C7:B0:FF:40:96:80:66:15:FE:F4:C9:A3:A5:E0
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019A50075634F80D697C928E52AC147CC298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1259
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 2qrpmova4O796zcCZJVnhtSFuiGYCMjR9ZI9bFUcYcE=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:56:34:f8:0d:69:7c:92:8e:52:ac:14:7c:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=0ad601db059cc7b0ff4096806615fef4c9a3a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:9f:7e:6f:5c:45:01:61:7f:a9:b2:d2:f9:
bd:96:c6:ec:b8:f8:7c:de:dd:ee:4c:ee:6f:ae:4e:
32:12:cd:e2:b0:63:96:eb:4a:c5:45:fe:69:f6:3a:
97:47:48:9f:f5:81:a8:20:01:6c:15:91:2d:49:9c:
07:1a:bb:66:04:07:00:ab:fd:31:5b:7b:96:d0:ce:
a2:a9:17:41:5f:69:d7:c6:b4:d0:04:8e:fe:d9:63:
05:bb:f7:d0:13:87:04:db:02:a7:3f:7a:bf:ae:02:
2b:f9:7b:86:01:c1:ff:1e:22:14:0b:62:08:c2:ce:
86:95:09:91:17:20:4b:99:41:4d:ab:8b:67:b0:45:
94:e0:24:70:1f:98:0c:e0:13:29:c0:2a:a2:03:3f:
e0:6d:a3:23:e1:1d:a1:15:23:a6:98:31:3b:d9:4e:
d9:8b:26:41:d3:a6:48:17:fe:c3:35:e9:b7:58:21:
e4:89:06:62:a3:b1:6b:1d:29:4a:2b:01:17:64:50:
66:54:f7:67:79:fd:42:9f:87:70:aa:1e:34:4c:bb:
ec:97:01:8e:12:8a:ae:0c:25:05:0f:86:f4:a1:6b:
d7:b1:08:c1:83:ad:a6:b6:52:a2:26:48:fe:c0:25:
91:c6:9c:0a:75:de:8b:a0:4f:b7:31:7e:7e:23:b9:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D6:01:DB:05:9C:C7:B0:FF:40:96:80:66:15:FE:F4:C9:A3:A5:E0
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:27:b6:9e:76:15:e4:f2:c6:ac:1d:50:57:09:49:f1:a8:cf:
a9:13:7b:12:72:54:be:64:51:fd:3b:16:92:40:d6:13:c9:5d:
32:0b:94:a0:e7:f7:59:1f:c0:3c:35:33:b2:34:f1:49:1f:35:
58:e7:f5:16:40:a6:d9:40:d2:36:b8:a8:fb:8b:8e:48:f4:4c:
9a:85:8c:00:74:c6:f7:3b:82:68:1d:20:45:48:5a:07:31:16:
28:c1:39:e5:ff:17:c3:b7:ee:0d:df:a6:0d:82:12:9c:48:07:
22:83:02:f0:1e:8e:36:cd:f0:ed:5c:fb:07:a5:cc:49:b2:c2:
aa:65:45:9d:81:26:e6:1f:4f:41:27:10:4c:2f:c2:87:ec:29:
3c:55:03:9e:84:99:13:79:23:ed:5e:88:10:40:f4:e5:fc:68:
15:a5:48:44:47:ac:39:0f:51:a5:fd:6c:d8:72:26:be:74:ed:
d8:e7:4a:2b:59:67:2c:b8:b4:ad:8c:a5:d8:65:e1:04:4a:7c:
be:a9:0b:be:da:0d:11:f5:77:71:8c:54:ea:42:d6:f5:33:af:
24:a8:5b:fe:3b:2a:e5:c7:ce:8d:74:3d:b0:ca:a0:54:9c:5c:
7c:63:a5:66:cb:14:cb:25:29:9e:88:9a:5d:8c:ee:99:bd:2e:
d4:10:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:47 2025 by rpki-client