Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: TJO512UWyEBFn8f+Jj/lX1asoA5N6CAulYY3w7wGn14=
Subject key identifier: EF:99:34:D6:50:41:D5:10:B9:ED:AD:97:EB:AC:24:6F:97:E5:52:6C
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01988430ED5BB3F08B3269568C018A0A1F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 0F90
Signing time: Thu 07 Aug 2025 11:00:55 +0000
Manifest this update: Thu 07 Aug 2025 11:00:55 +0000
Manifest next update: Fri 08 Aug 2025 11:00:55 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: np7wkF2CILPNdn0HYCHQ7tdmolpPXQk/mhJ3pGjCRFA=)
2: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (hash: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:ed:5b:b3:f0:8b:32:69:56:8c:01:8a:0a:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Aug 7 11:00:55 2025 GMT
Not After : Aug 8 11:00:55 2025 GMT
Subject: CN=ef9934d65041d510b9edad97ebac246f97e5526c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:8e:d6:fc:ff:d7:a2:8a:12:5f:fb:cb:47:
ee:eb:52:8b:44:54:de:9d:5d:00:c6:6a:21:19:01:
f0:f9:7b:aa:35:49:69:ff:91:b7:8f:60:e8:73:c9:
53:06:9e:ae:33:49:7b:67:37:d0:c2:76:50:e6:a1:
60:70:57:11:5e:4d:35:ee:f7:1c:b5:7b:08:bf:66:
29:50:29:fe:4a:6b:de:b1:ea:19:f6:fa:a0:43:97:
8f:db:ff:44:d2:a0:8b:ea:e0:ad:f4:c8:ad:23:0f:
f0:7d:1e:58:fe:51:57:5c:dc:e3:5c:c7:00:e8:8e:
ab:77:6b:a9:29:46:8f:b5:a5:6d:54:6a:5a:82:48:
a0:e6:80:11:c7:7a:f4:f1:36:f6:26:42:8c:b2:b9:
1a:98:39:87:e8:6d:bf:5d:1f:d2:75:75:f3:a8:b8:
56:50:01:d0:c8:5c:7e:cd:15:20:8b:28:d4:62:19:
d2:1e:43:af:92:fa:73:7a:c9:0d:56:ea:37:aa:b4:
53:05:91:20:2e:d9:aa:71:ca:28:8c:9e:22:c6:9f:
44:53:fe:54:21:1b:be:9b:a7:5e:ab:98:8e:09:1f:
44:06:29:93:5f:02:91:7d:a9:6e:2d:76:b8:d2:38:
3d:b8:83:fa:0c:7b:51:34:f6:16:f7:ab:4f:a7:41:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:34:D6:50:41:D5:10:B9:ED:AD:97:EB:AC:24:6F:97:E5:52:6C
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4c:34:91:ea:7c:37:02:c9:a8:fb:af:4d:c2:71:86:1b:af:
82:d1:be:bb:23:d6:ac:b0:e1:ab:21:7f:e2:d4:23:2e:d5:e8:
c8:46:1f:f7:d7:a6:bd:7d:34:a3:0b:9d:dd:44:08:05:20:f9:
ec:91:a8:29:bc:6c:c9:b8:5d:0c:f3:49:e8:6b:b5:5c:2c:45:
4f:68:25:79:32:88:61:e2:05:8c:8c:40:a2:ef:90:63:ba:22:
55:40:1d:d8:0b:ac:2d:e7:bf:68:3d:b2:3c:ed:fb:70:d0:7e:
d8:a3:3a:69:97:6d:0d:ca:f6:95:58:ee:ca:46:dc:f4:dd:31:
ea:4b:97:52:07:10:bf:79:a8:4c:4b:95:de:b1:1b:03:f7:b9:
f0:d0:6c:06:c6:3a:4e:4b:1a:0a:45:0d:d3:46:c2:72:73:cd:
79:11:38:a8:02:37:17:3f:34:9d:7e:02:34:76:66:8f:06:4e:
c8:f0:30:07:ed:bf:3a:35:ac:a3:3d:b1:e9:d5:16:45:c2:95:
99:9e:38:b0:9b:97:14:8a:4b:fe:2b:f4:66:6a:a1:37:b2:77:
79:0b:95:28:c2:83:18:b2:f2:4c:cc:d7:7a:3a:02:25:54:a6:
72:b3:68:87:17:d1:6c:72:28:cb:5a:50:1c:02:f5:72:fd:5b:
de:53:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:39:45 2025 by rpki-client