Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: BwwktOyzBPKWa3QqvNpB/MbwZl+8Z5NUmRs9MDnMORE=
Subject key identifier: 96:C2:58:FE:F4:FC:F6:BD:50:4D:0F:C7:A8:B5:C2:03:1D:BB:27:0E
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019A4DAAFF0028D406E06B4DFB40B17F37F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 107D
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: HauD7usftafJkPFSfezspmb6ghbCiRGQNOSaLAYRXDA=)
2: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (hash: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ff:00:28:d4:06:e0:6b:4d:fb:40:b1:7f:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=96c258fef4fcf6bd504d0fc7a8b5c2031dbb270e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:07:2d:98:ce:d0:45:90:aa:a2:c3:94:94:
fb:13:8e:ec:62:04:47:ec:7f:60:b4:27:6d:e1:a7:
c4:a2:64:9f:c9:2f:7b:74:bb:d1:4f:7d:29:ac:bc:
d4:79:70:02:a9:c5:6f:ee:93:65:72:57:25:ca:10:
62:d1:41:da:e0:8d:c7:24:e3:85:04:42:21:aa:50:
b4:6f:69:67:c8:ba:b3:7f:82:ff:b1:92:cf:dd:45:
96:59:f7:84:89:33:ac:32:4f:0b:b9:33:56:81:a9:
77:ed:18:a5:36:d6:8c:6d:bb:2c:b6:15:1c:fc:e1:
67:80:00:ed:f8:ca:7c:04:7b:dc:e2:0a:f5:c7:25:
eb:2b:21:74:06:e8:e6:25:fd:dd:a1:38:e3:34:2f:
d9:ad:d0:ac:1d:03:00:63:c3:24:b1:0e:86:25:cb:
ce:41:a2:f1:41:01:23:0a:2d:02:29:1a:4f:1c:45:
3c:6b:c3:22:50:c2:75:1f:15:a0:2b:1d:e2:ea:5c:
46:88:18:10:81:a6:94:f9:3f:8d:02:c6:16:d1:af:
be:97:f4:e4:87:55:01:bb:7d:63:54:2c:aa:12:fd:
43:d5:07:f5:97:99:ec:ea:42:74:39:bc:5f:b0:34:
29:eb:f3:d7:dc:9a:37:3b:2b:66:56:2c:cc:ee:50:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:58:FE:F4:FC:F6:BD:50:4D:0F:C7:A8:B5:C2:03:1D:BB:27:0E
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:e1:25:09:bc:6e:bb:7f:50:c1:6f:21:11:44:5a:b4:6d:
3e:0b:1f:e9:29:09:f1:84:5d:4b:6e:6d:ad:6b:ca:4b:24:c9:
65:84:f3:4a:86:1e:5b:55:17:05:4e:c0:ab:ec:d0:6a:64:48:
ac:3e:12:65:92:16:9f:1f:49:63:79:df:ec:d0:46:f1:1c:ee:
22:54:c0:49:a1:c6:f3:d4:40:14:8d:d0:81:ed:2a:31:7c:9b:
e6:8e:45:c5:55:80:3a:d2:52:40:99:e9:fd:f4:7e:75:5a:9d:
87:b1:28:dd:5f:b7:78:02:e6:28:70:db:8e:c6:13:47:0c:65:
57:51:a8:e8:de:77:ad:f8:b4:e6:7b:f8:b0:10:e6:84:95:7b:
21:c2:17:49:38:22:1b:86:77:01:5d:08:3f:ec:b2:5d:47:d1:
d8:11:c1:6c:2b:47:ea:82:f5:2d:a8:f5:02:bb:b1:95:e8:f1:
84:fb:d5:30:9f:56:aa:46:32:49:6a:04:a9:05:d4:ae:18:39:
9a:98:62:9a:13:50:27:76:05:1f:a1:e6:a5:2d:9a:74:48:c1:
b4:a8:fd:cc:bd:19:f4:df:a1:97:99:ce:90:c2:85:04:06:cb:
7e:b9:97:62:cf:86:e7:20:a3:df:11:00:5b:1d:a1:d3:7e:c1:
42:d9:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:13 2025 by rpki-client