Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: x4qnCHYiSw/Lpx27JUs0dvxELyy6BVE78jocW3WvNg8=
Subject key identifier: 3F:E1:0C:24:4B:FC:90:73:38:B9:45:FA:A5:BB:93:CB:CF:0A:F0:6A
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 019874871EE347A70D2AEA512C5C5B14ED4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0C1B
Signing time: Mon 04 Aug 2025 10:01:08 +0000
Manifest this update: Mon 04 Aug 2025 10:01:08 +0000
Manifest next update: Tue 05 Aug 2025 10:01:08 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: NCSpuBh4Ot5d3wVJBB846UR0dnD5zoJZSpI//NzM4QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:1e:e3:47:a7:0d:2a:ea:51:2c:5c:5b:14:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Aug 4 10:01:08 2025 GMT
Not After : Aug 5 10:01:08 2025 GMT
Subject: CN=3fe10c244bfc907338b945faa5bb93cbcf0af06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:f9:c4:1d:55:7d:07:32:de:d5:0c:41:7e:
55:4c:50:92:ca:14:ef:2b:6a:a9:3c:47:7e:c3:28:
b1:f3:22:94:04:98:9e:61:64:01:2b:89:de:e4:57:
3a:51:79:ee:43:7b:b3:73:3c:25:9a:7b:cc:39:3d:
d9:f8:25:5f:ec:94:71:b5:c4:26:21:7b:72:eb:46:
1d:87:7a:e7:0d:f2:be:92:aa:3a:97:e4:8a:ec:73:
a0:94:5d:5b:5b:db:48:a6:57:94:a3:c1:05:78:9a:
46:80:d8:3d:ab:4e:5f:e6:fc:24:18:88:28:81:cc:
d5:39:76:79:e2:9d:df:78:56:cf:b9:37:35:89:0e:
c4:84:9c:46:39:9d:8b:f7:4b:8c:2f:c3:dd:50:b8:
08:27:c7:8f:de:58:86:0b:09:e2:cd:99:e5:cb:00:
2a:2e:e3:02:33:bd:9a:65:40:b7:dd:21:64:71:78:
03:33:77:8e:fa:a8:d7:c4:5a:c2:4d:5e:26:2b:6f:
28:9a:fc:d2:14:05:a6:07:c3:0a:eb:ba:a3:14:c1:
8b:28:6b:f3:52:d2:ac:27:83:2a:a3:70:0b:0e:60:
f5:7f:40:fd:d4:f5:37:c1:ee:a2:24:7a:fc:88:ec:
bc:91:ec:54:1a:73:92:e5:29:e6:ae:71:35:63:d4:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:0C:24:4B:FC:90:73:38:B9:45:FA:A5:BB:93:CB:CF:0A:F0:6A
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:1f:4a:fb:62:5a:29:51:8a:30:5d:55:f4:19:74:3e:ed:
16:74:4a:0c:73:1a:8d:bc:f2:a1:49:03:02:c3:5e:d4:08:cd:
d9:87:97:b8:c1:75:8e:7b:92:f8:44:2b:6e:43:70:cf:a0:16:
cb:d9:c9:2e:39:10:e2:ba:e2:2f:f1:1b:06:bb:0d:f2:d3:c3:
e4:95:68:f2:5f:83:9e:41:85:d7:06:0a:93:4e:2f:a5:56:f5:
88:b5:d3:dc:c1:62:38:b8:0f:cf:20:1e:44:3c:4e:73:0b:32:
be:61:66:df:94:58:0b:d6:ed:53:2b:a5:57:0e:76:fd:ff:61:
b0:a9:a2:d4:53:79:09:80:bf:d6:4f:80:1e:f4:3e:3b:8c:3c:
63:78:cd:18:6d:d9:e6:76:82:a6:a2:30:80:b0:e4:09:ae:d4:
30:27:82:5b:5e:a8:92:2b:bc:19:1b:cd:f0:eb:b9:fd:05:2c:
4f:a5:49:fe:c7:da:4c:43:07:6e:47:66:0d:ed:a2:55:82:05:
c6:60:36:ec:b1:88:c9:67:5a:63:df:cf:12:9f:5c:d5:b3:a6:
98:f7:6d:39:26:b5:f5:ae:51:93:a3:7b:d0:38:1e:bd:c3:9e:
b3:a6:2c:4a:2c:65:0d:7d:1d:9c:0c:5f:84:da:4a:7a:51:57:
67:d5:ac:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hx7jR6cNKupRLFxbFO1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZGM2ZTQ3NDNlZDVjYzg0MzAzMjg1Mjg5NmVmMTVmNDg5
MmVkYjAwHhcNMjUwODA0MTAwMTA4WhcNMjUwODA1MTAwMTA4WjAzMTEwLwYDVQQD
EygzZmUxMGMyNDRiZmM5MDczMzhiOTQ1ZmFhNWJiOTNjYmNmMGFmMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaf5xB1VfQcy3tUMQX5VTFCSyhTv
K2qpPEd+wyix8yKUBJieYWQBK4ne5Fc6UXnuQ3uzczwlmnvMOT3Z+CVf7JRxtcQm
IXty60Ydh3rnDfK+kqo6l+SK7HOglF1bW9tIpleUo8EFeJpGgNg9q05f5vwkGIgo
gczVOXZ54p3feFbPuTc1iQ7EhJxGOZ2L90uML8PdULgIJ8eP3liGCwnizZnlywAq
LuMCM72aZUC33SFkcXgDM3eO+qjXxFrCTV4mK28omvzSFAWmB8MK67qjFMGLKGvz
UtKsJ4Mqo3ALDmD1f0D91PU3we6iJHr8iOy8kexUGnOS5SnmrnE1Y9SJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/hDCRL/JBzOLlF+qW7k8vPCvBqMB8GA1UdIwQY
MBaAFCLcbkdD7VzIQwMoUolu8V9Iku2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXR4dVIwUHRYTWhEQXloU2lXN3hYMGlTN2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYWY4NTAtZjU4Ny00NGIyLThkZTQt
YTg1ODVmZjkzNTQ2LzEvSXR4dVIwUHRYTWhEQXloU2lXN3hYMGlTN2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kYWY4NTAtZjU4Ny00NGIyLThkZTQtYTg1ODVmZjkzNTQ2
LzEvSXR4dVIwUHRYTWhEQXloU2lXN3hYMGlTN2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvcfSvti
WilRijBdVfQZdD7tFnRKDHMajbzyoUkDAsNe1AjN2YeXuMF1jnuS+EQrbkNwz6AW
y9nJLjkQ4rriL/EbBrsN8tPD5JVo8l+DnkGF1wYKk04vpVb1iLXT3MFiOLgPzyAe
RDxOcwsyvmFm35RYC9btUyulVw52/f9hsKmi1FN5CYC/1k+AHvQ+O4w8Y3jNGG3Z
5naCpqIwgLDkCa7UMCeCW16okiu8GRvN8Ou5/QUsT6VJ/sfaTEMHbkdmDe2iVYIF
xmA27LGIyWdaY9/PEp9c1bOmmPdtOSa19a5Rk6N70DgevcOes6YsSixlDX0dnAxf
hNpKelFXZ9WsjQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:15 2025 by rpki-client