Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File: itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier: lZYCoonfvOFFu1DLx23zco9NtJJwPQZELZpto2CqNJw=
Subject key identifier: D2:0E:B3:6C:78:97:8F:C7:35:F0:55:25:28:2F:AD:CA:39:7F:BB:46
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 019A4D0670C4067C109FC81B702716A3ED79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:59 +0000
Manifest this update: Tue 04 Nov 2025 04:00:59 +0000
Manifest next update: Wed 05 Nov 2025 04:00:59 +0000
Files and hashes: 1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: vHjW79F//wgK0Q1XWnCGIYl/l4vg5wCluAl5Dzy3MLE=)
5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:70:c4:06:7c:10:9f:c8:1b:70:27:16:a3:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Nov 4 04:00:59 2025 GMT
Not After : Nov 5 04:00:59 2025 GMT
Subject: CN=d20eb36c78978fc735f05525282fadca397fbb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:85:8f:a2:67:02:38:36:24:fe:b1:9c:70:
f4:fc:6e:19:fa:19:10:4b:1f:fe:1e:78:fc:12:61:
fb:2b:0a:e7:48:38:8b:59:14:4c:76:4c:29:10:ae:
fb:54:52:32:e2:a9:3a:c6:22:79:9a:bc:c0:c7:66:
c1:5a:a0:d1:50:1a:b3:46:58:7f:fd:89:e9:76:c1:
9e:c1:cd:a9:8c:e8:b1:39:b4:ac:12:0a:45:12:ce:
da:51:c0:43:51:d6:4d:a2:05:47:4e:e2:ca:c7:83:
85:48:cc:86:d2:0d:8c:5f:23:61:85:7a:af:29:41:
06:97:99:5c:f3:73:5a:f1:d1:c7:b0:c6:09:4a:33:
0a:c4:6c:90:a6:b4:92:22:ff:2b:cf:a9:46:82:f0:
18:cf:59:01:a1:6a:89:95:bb:2b:42:7a:51:bc:e9:
e0:cf:3f:17:e7:39:f3:44:20:96:ff:60:c0:9b:0e:
d2:0f:f7:b3:d6:be:92:85:47:aa:5d:e1:40:62:43:
52:99:77:7b:94:95:f0:28:06:be:ce:73:d0:a2:74:
71:41:f1:5d:71:b3:db:39:c4:84:f6:73:d6:10:2b:
35:38:e9:71:a8:11:9c:d2:e6:8f:a8:df:9b:bc:ac:
02:58:56:1e:bf:78:c8:2b:24:66:96:79:30:89:cd:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:B3:6C:78:97:8F:C7:35:F0:55:25:28:2F:AD:CA:39:7F:BB:46
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6a:d3:44:28:80:52:86:04:1a:ce:99:50:99:41:34:df:01:
de:fd:88:89:fd:4e:3c:d6:83:91:76:3b:2a:6f:84:ad:6c:79:
fd:30:88:1d:8b:27:98:2c:4d:41:dc:2a:88:22:76:c8:50:b6:
4f:0a:5a:0c:13:e8:35:ac:a3:22:b3:24:86:ab:dc:fe:c2:50:
57:fe:16:55:f6:da:b2:d1:b3:14:7a:78:d5:7f:9e:3a:7d:44:
e4:d0:32:2d:9d:63:38:ac:01:6c:7b:f4:8a:1c:f3:8b:bf:a4:
6d:d4:0b:b7:2b:21:06:f6:c6:8e:f3:2e:42:f4:e7:07:3f:2b:
38:ac:9e:e0:89:a7:5d:4e:77:c9:cb:79:41:92:26:6a:2d:ec:
30:46:76:74:20:d3:6e:54:49:dd:15:37:1a:43:79:a4:bf:d2:
09:1e:f4:77:16:0c:df:5b:3b:51:d3:50:ac:86:6d:5b:ae:91:
0a:a8:f3:ad:39:4f:d3:5d:43:ab:e3:82:52:0b:40:50:40:75:
6a:bb:57:fd:a0:8d:92:c4:00:3a:b6:57:83:b4:ff:b4:14:77:
d6:a0:d6:96:99:9f:cc:a6:1b:54:be:46:9d:38:d5:4a:3d:52:
0c:d0:05:f6:95:83:3d:1e:49:08:77:df:80:91:16:c2:a4:d1:
a2:4d:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:07 2025 by rpki-client