Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: QECmtdTR+9rZZ3L3YVzdRzg3XGekFDNubcfB9pw1vio=
Subject key identifier: 3C:20:C6:8C:AD:3D:1E:56:64:15:31:08:D4:59:83:D2:08:5C:50:D7
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 0198733D515EE9717D907987790C646A624E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 1313
Signing time: Mon 04 Aug 2025 04:00:54 +0000
Manifest this update: Mon 04 Aug 2025 04:00:54 +0000
Manifest next update: Tue 05 Aug 2025 04:00:54 +0000
Files and hashes: 1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: r7lltFJfvIZMcXvQOlsMKvUtyZ9JFP67jvKYfz/LKJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:51:5e:e9:71:7d:90:79:87:79:0c:64:6a:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Aug 4 04:00:54 2025 GMT
Not After : Aug 5 04:00:54 2025 GMT
Subject: CN=3c20c68cad3d1e5664153108d45983d2085c50d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:cf:42:36:6e:21:b3:6b:9c:76:86:48:40:
6a:3f:9f:fc:82:1d:83:2f:d1:61:99:b4:93:36:2c:
b3:66:f8:4e:0a:0f:6c:84:ed:ae:63:0f:e2:91:64:
be:e1:b1:6f:07:26:51:78:f0:87:ba:99:40:f4:fb:
81:b3:5f:85:0c:92:3a:5a:3e:3b:18:37:96:d3:5c:
bf:90:f4:2b:bf:3b:95:f2:09:91:c1:f9:c8:bd:66:
d1:ac:e2:72:0a:41:76:10:0e:24:4d:2d:3d:68:7d:
9a:6b:bb:0f:0c:57:b8:ba:0b:3a:59:0e:83:25:79:
04:36:51:40:69:b5:28:8e:14:84:ed:36:84:f8:4d:
60:7c:a8:17:82:e0:4c:8b:18:4d:18:93:3b:b4:bc:
24:ad:38:c0:24:38:92:da:97:bc:b0:c2:a3:7c:54:
80:33:76:07:96:f5:88:52:3e:cd:f9:4e:31:9b:ae:
d9:27:3e:5a:27:e8:17:4d:86:91:ea:f5:a2:bc:01:
d3:8e:38:eb:a4:99:36:76:aa:0e:54:fd:b0:c9:43:
f4:94:ec:40:f9:7e:aa:ff:28:b0:8d:7b:e2:0a:ff:
20:33:0a:71:91:14:01:f7:cc:fb:35:29:1e:f6:32:
b2:d3:17:c2:c2:48:a8:4b:8f:bd:62:70:9e:5f:f1:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:C6:8C:AD:3D:1E:56:64:15:31:08:D4:59:83:D2:08:5C:50:D7
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:98:52:ef:62:32:56:15:24:1c:62:15:16:d2:89:09:37:56:
ab:02:df:f4:78:d1:8d:24:0f:27:93:57:4d:83:73:ae:44:b8:
aa:20:3c:be:31:49:c7:41:88:c2:36:a8:2e:ff:ce:ca:9a:ec:
a5:70:39:de:19:9c:c9:f5:04:84:98:0a:eb:ac:d2:03:2f:31:
35:15:35:e5:26:d5:3c:98:d5:90:35:d9:f4:b8:fc:85:35:91:
3f:ec:83:0c:81:f3:f8:bc:ed:db:54:12:c3:0a:38:4c:d4:11:
fe:de:9e:8f:24:c6:97:0e:47:e2:a0:14:61:6c:9c:9a:9b:6d:
e9:b5:d2:d7:c0:d2:34:73:e8:78:c7:66:0b:c7:26:7e:55:4d:
9e:b4:66:2a:83:81:3b:ba:ad:a2:d7:ef:d4:94:a4:8a:3c:c7:
88:2c:f2:ff:c8:ae:48:54:98:57:8c:fc:0b:eb:d3:ee:e7:1d:
e0:3b:4e:ae:a6:03:02:a5:1a:24:cb:44:d6:7b:8f:cd:72:75:
9b:0e:d7:97:70:26:b1:db:89:7b:93:6f:61:ef:21:c3:c9:62:
c9:91:c4:46:60:b2:11:61:6a:1a:75:cb:70:26:76:49:ab:ba:
ba:9d:95:e7:3b:28:f2:2e:04:0c:1d:2e:d6:b8:31:04:22:4f:
72:2b:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:31 2025 by rpki-client