Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: s3LMHHB9N+4T7WtKGchm2cg0JaD9kXYIvI+47VQB/ok=
Subject key identifier: EB:A9:E8:CC:2E:B5:A8:43:D0:0E:1C:27:86:CB:6D:7C:39:E2:98:BE
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 019A4C60F1D9B308544342F3AD6A289622BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 1408
Signing time: Tue 04 Nov 2025 01:00:13 +0000
Manifest this update: Tue 04 Nov 2025 01:00:13 +0000
Manifest next update: Wed 05 Nov 2025 01:00:13 +0000
Files and hashes: 1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: /IMVVOrxewx3SxZM3H0E9qknfwmQwnPE9JKWShDwylc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f1:d9:b3:08:54:43:42:f3:ad:6a:28:96:22:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Nov 4 01:00:13 2025 GMT
Not After : Nov 5 01:00:13 2025 GMT
Subject: CN=eba9e8cc2eb5a843d00e1c2786cb6d7c39e298be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:f7:6d:3e:06:5d:4b:da:58:80:70:35:0d:
d1:12:34:06:d1:c7:7f:1f:e2:c9:b0:17:8d:ae:52:
bf:27:53:9f:2b:b9:58:e6:ce:c0:32:fe:85:b1:85:
98:21:c1:4d:43:b4:27:25:4f:02:e3:42:d9:ff:62:
11:c3:f4:4c:dc:ef:d0:cd:53:36:b1:9e:55:5b:b4:
c0:56:2b:5f:85:19:c7:73:2b:a5:1c:7c:2e:30:14:
4a:8f:09:48:68:05:6e:05:5c:63:7d:3a:60:fc:d6:
dc:3d:20:8b:e0:0e:4e:dc:60:f7:63:ca:9f:c6:84:
77:4a:9b:29:00:ad:35:80:4a:c6:8c:e3:3c:fb:af:
02:c7:fe:a4:cb:fd:46:a8:7b:73:13:84:b9:2f:32:
6f:73:2a:0d:30:ae:fd:1a:e8:66:db:58:f3:13:41:
3d:12:77:41:12:b6:db:27:b5:27:f8:bc:c5:8f:f5:
65:61:d0:ee:79:e7:79:5b:27:50:2f:fc:59:ac:09:
bb:c0:cb:08:83:8f:46:84:59:68:b0:1b:91:f4:8f:
5a:8f:e4:fe:43:e2:7f:a5:1c:31:1f:90:a3:4a:5e:
41:9f:94:43:71:61:ee:fe:29:cb:9d:a3:db:6b:03:
3a:3f:02:e1:70:ce:be:4d:39:5a:07:42:d0:b5:5f:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:E8:CC:2E:B5:A8:43:D0:0E:1C:27:86:CB:6D:7C:39:E2:98:BE
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:aa:f7:9d:fa:06:24:07:5d:f1:ed:94:7e:9c:cf:ae:55:
3f:47:cb:e5:ab:5b:2e:32:be:a4:1c:2b:3d:c3:9b:6b:2b:c0:
67:3c:fb:81:6d:78:97:c8:11:2b:0b:9d:0a:a2:a5:ab:7e:2e:
02:96:32:e9:68:da:ae:bd:1e:29:67:fb:64:dd:ea:b1:79:6d:
77:a5:2d:7c:e3:d9:49:74:f3:45:9d:bb:7e:2a:e7:83:60:90:
b8:8b:ef:b1:08:fd:ba:1b:af:b3:46:e3:79:cf:db:c7:b6:5f:
f6:f9:15:a4:bf:b2:ff:b9:42:7a:c6:6b:a8:1d:d1:68:ab:8e:
7e:c3:a6:65:7d:43:4e:a4:2c:b4:10:a8:ca:b0:7d:b2:1e:b8:
7a:a4:c6:46:75:d6:61:e9:ce:cd:20:1a:e6:37:92:f7:96:8c:
25:46:05:8e:74:49:a1:ed:8b:1b:2e:fb:b7:17:90:3d:51:9c:
8c:3b:40:ce:f0:63:e1:ae:13:af:0f:8a:62:4c:3c:26:d6:bf:
b7:b8:b1:4c:3b:5d:f0:ab:78:c0:26:ed:9a:00:96:1d:9a:25:
1c:3b:92:5f:2d:f6:6b:da:13:ef:28:6e:8e:4a:26:a9:33:f6:
1f:db:6a:c3:a5:f1:71:eb:3c:92:69:7b:d8:8c:57:79:f3:94:
77:0e:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client