Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: 15ieTkGar7Mnl5RSgeUrn9vg4fi4FBYvXRMxIgqYqaw=
Subject key identifier: 16:3A:41:D1:54:98:A5:E1:35:05:42:0A:51:9C:80:95:80:03:C2:62
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019A515144B82D73D93CE52D5112F3AC8071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1654
Signing time: Wed 05 Nov 2025 00:01:11 +0000
Manifest this update: Wed 05 Nov 2025 00:01:11 +0000
Manifest next update: Thu 06 Nov 2025 00:01:11 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: S4NpHgneMSpvgo4x4y5t+4hRZLfdAKE0nckAhqHDLa8=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:44:b8:2d:73:d9:3c:e5:2d:51:12:f3:ac:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Nov 5 00:01:11 2025 GMT
Not After : Nov 6 00:01:11 2025 GMT
Subject: CN=163a41d15498a5e13505420a519c80958003c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:15:45:c1:98:4d:65:a1:4e:6b:52:81:a2:
f2:d1:78:4b:85:7b:ec:cf:0d:1a:18:70:04:b3:93:
34:29:4a:6d:1a:78:55:96:4d:d9:b4:43:0c:0f:03:
f2:98:8e:64:bf:fb:0e:c1:c6:b9:a5:0c:1e:03:84:
06:fb:29:75:c5:31:7b:44:79:92:06:fc:64:73:48:
e3:ed:cc:95:12:81:fa:6d:da:2b:15:22:48:70:2a:
7b:d1:01:af:f2:1b:d7:bc:3e:b9:1c:7c:22:ac:ce:
05:24:ed:a2:73:3c:6e:07:f1:a9:b2:d9:1a:9a:d7:
b1:1b:9e:ce:ef:c4:1c:eb:54:65:6e:3e:f3:6a:0f:
43:d3:eb:44:c5:b6:49:2d:67:f5:6b:89:b8:89:af:
ca:ed:5e:8e:b1:01:a0:18:52:f8:33:0d:0b:1a:24:
1f:7c:3b:ad:35:42:86:cf:eb:60:79:c7:f1:9d:c6:
29:c8:18:50:c8:f7:f3:34:04:7b:a8:2f:dc:21:95:
1c:7e:d6:fe:2e:81:72:bc:3d:5f:9a:59:e5:71:06:
03:d3:d0:e2:c2:33:55:48:c6:b7:e1:6a:7c:24:fe:
8e:3b:c4:f8:4e:b5:c6:c5:dc:8d:14:a3:2b:3a:bf:
43:45:02:a3:9c:0b:e8:10:ce:11:c8:69:b9:54:50:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:41:D1:54:98:A5:E1:35:05:42:0A:51:9C:80:95:80:03:C2:62
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:d2:75:9e:30:c1:2b:e9:13:88:32:65:74:8f:1d:be:f2:
ae:e0:69:85:aa:9a:d8:50:32:ae:39:a8:7e:ca:c6:9a:c5:0f:
24:6a:ee:f1:b6:9d:17:49:9b:69:46:c5:d6:cb:6b:61:9d:0f:
34:04:c8:c5:dd:a2:62:03:a5:42:f5:ef:fb:21:3d:05:12:28:
46:52:23:92:0f:81:7e:c1:3f:80:a9:9b:cc:c3:82:6f:08:08:
f4:b5:6e:39:d5:4f:a7:4d:ad:4e:02:71:6f:87:88:8c:22:77:
9c:c7:42:a5:57:23:9b:33:1f:4e:76:85:b1:94:c1:4a:66:f5:
92:b0:7f:c6:e4:47:2f:6a:05:1c:06:98:a2:fd:5a:56:a3:aa:
19:9d:81:b7:8e:f2:44:d4:f8:2e:3f:28:8c:3e:24:2e:1e:d4:
5b:e1:e8:6a:e8:ce:1b:74:3b:a6:89:98:23:13:34:12:d7:9d:
28:ad:bc:1f:1d:3b:44:be:74:cb:83:ea:ef:83:e1:5d:24:78:
70:ad:21:ac:bc:6c:28:da:3a:e3:34:b8:06:50:21:ad:9b:46:
f5:94:21:e2:00:2d:e5:41:36:e2:2b:08:48:ed:ba:03:26:76:
90:c8:ca:1b:33:8e:0a:0e:1c:6f:7d:27:67:b0:dd:b0:ba:af:
9e:5a:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:59:15 2025 by rpki-client