Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: 23fu/EBtrk7xQFFQxqaKriC6qXus0OkUXUgVHIzBC7o=
Subject key identifier: 33:E9:F6:1B:7C:56:74:4F:FE:7F:B6:D6:1D:A4:3C:FF:6D:14:DD:52
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019A53E3F6125237790A2F915CD1DADD98CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 2B
Signing time: Wed 05 Nov 2025 12:00:39 +0000
Manifest this update: Wed 05 Nov 2025 12:00:39 +0000
Manifest next update: Thu 06 Nov 2025 12:00:39 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: lHkTipoJSal/q4GolbPGW6Iij0Rtvjvc99S88rEEOT8=)
2: PkscByip9HCjcCDlJO2uYujjYDg.roa (hash: edTZgmleKt6WCIy8Cw2+p9r62NxbuqSZiXd6FCg4ClY=)
3: y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa (hash: Bk60cLKzbGKlYVw0cTFXtgYaf3rDfp8I2gvBkNj7UQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f6:12:52:37:79:0a:2f:91:5c:d1:da:dd:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Nov 5 12:00:39 2025 GMT
Not After : Nov 6 12:00:39 2025 GMT
Subject: CN=33e9f61b7c56744ffe7fb6d61da43cff6d14dd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:70:96:a8:2d:f7:fc:4a:7d:13:4f:27:3b:
39:5b:d2:08:75:f5:8a:54:3d:f7:56:29:23:40:c9:
7c:e5:45:b5:d1:a3:b8:c7:6b:b0:09:d5:eb:a0:77:
de:26:ea:5e:84:bf:19:c9:c7:a9:00:b6:8d:d8:d9:
39:09:df:b5:90:de:ce:34:24:0a:8f:82:7f:8e:88:
fd:9d:89:01:c4:04:8e:74:e6:55:c2:47:40:c4:cd:
99:de:a3:0c:78:02:48:5e:cf:55:2f:9f:40:2d:b0:
55:e3:56:31:5a:ca:a9:30:06:dd:e3:93:04:52:3e:
85:a9:c5:eb:fc:72:5e:8b:fe:c5:b0:84:80:37:d7:
e5:bf:8e:4f:c7:ae:fb:e3:88:38:ac:0a:f7:2b:2f:
e5:ab:d2:45:3b:b0:bb:2e:cf:92:04:86:da:39:2b:
c2:fb:47:af:66:14:2e:66:a4:c6:5c:15:f6:b1:51:
ce:d1:31:e5:58:28:cb:4b:d7:c2:1a:e3:cb:97:0b:
23:8b:63:bd:c8:c8:37:86:8a:26:82:ab:9b:f5:2d:
bd:7c:61:b6:3f:00:46:59:c6:39:56:13:f8:0a:4b:
7c:ff:4f:07:ab:c0:66:4c:c4:4d:25:26:ff:2d:fd:
f4:d1:af:5f:23:cc:1d:15:0e:c7:68:c3:27:eb:9d:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:F6:1B:7C:56:74:4F:FE:7F:B6:D6:1D:A4:3C:FF:6D:14:DD:52
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:28:8a:b5:6c:60:87:d2:6a:d1:27:dc:a9:1d:02:03:f2:
54:2a:3d:2a:80:77:a4:87:07:ef:bb:70:38:ff:d3:35:3b:e1:
89:f6:1d:f5:a2:a9:5a:a8:7d:9a:44:90:8a:83:b4:8b:05:80:
ec:ca:87:e8:ab:18:61:31:09:83:e2:6b:14:39:24:da:e2:ef:
c2:cc:21:61:92:b4:66:63:73:79:50:8f:1f:52:a1:37:6c:7b:
51:96:e9:5a:66:48:06:d0:78:90:65:8e:cc:97:cf:65:b3:ef:
10:56:72:2d:14:0d:af:78:26:89:b2:d2:4b:d9:e4:e6:67:38:
3e:6c:8e:54:e4:dd:2c:b8:0d:d6:7d:d7:6d:90:46:3a:9c:94:
a9:72:fe:93:c4:e9:ff:d1:31:6e:35:93:03:25:76:8e:0d:e3:
13:0a:ff:00:70:7d:24:ee:26:9a:8a:fb:a1:20:4e:3c:c3:61:
e6:03:da:b8:8b:76:7d:7e:8c:a4:63:4c:84:9a:06:1c:9e:f2:
0b:66:4e:28:4f:34:64:ad:f6:70:65:9a:99:e6:b0:59:fa:4e:
f3:61:ed:bb:0e:ec:2a:fd:d0:38:f6:a2:2e:0f:fe:d1:12:b4:
1d:02:ba:9a:36:16:4e:4f:69:5c:19:9f:03:6d:b2:19:01:7f:
83:91:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:28 2025 by rpki-client