Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: /hk+60QlrRc5xYMKoKwpNbGj8A6oUVbeD85Q/hrW2CY=
Subject key identifier: 5E:1B:E5:3E:2C:DC:D5:8D:13:2C:74:55:F5:9A:00:61:B4:AC:80:1B
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019A4EBD3D583276A67A328B4E8123F94038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=)
3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: 2vSUhmSTiWIfb6Sxv7/AMeAex9tyrSmgzd2KEamdEa8=)
4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3d:58:32:76:a6:7a:32:8b:4e:81:23:f9:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=5e1be53e2cdcd58d132c7455f59a0061b4ac801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:13:6a:eb:01:b2:8e:26:53:6e:f7:c2:ba:
22:f9:03:f6:c0:af:2f:da:17:0c:f9:40:aa:67:47:
a7:9e:69:67:aa:f0:98:9e:e4:c3:50:c0:34:ea:1d:
a1:42:1c:de:e6:e5:a6:f5:a8:df:37:80:79:6a:84:
22:b4:d1:33:5e:8d:09:1f:f7:bb:95:c5:5b:49:6f:
41:a9:f6:98:d0:53:81:a6:db:bc:a9:a9:5d:dd:32:
d8:a0:f1:1b:f0:1f:f5:c3:3d:5e:6e:b9:73:26:32:
18:64:74:c8:ad:fd:7f:5c:a7:1d:bb:ef:9c:da:02:
72:5c:a4:79:13:1d:f8:cd:d7:22:ea:fb:75:94:47:
6a:19:b4:00:b7:bc:82:dc:9f:ff:3e:56:61:43:11:
eb:c4:61:ef:c2:8b:32:f8:97:4b:29:47:4a:06:24:
76:22:73:97:9f:88:7a:19:f5:1e:d3:df:8f:f5:65:
39:89:a8:e4:f0:11:5b:41:73:05:89:96:4e:d2:11:
d6:b3:71:4d:4f:6c:29:8c:90:d1:f6:7e:c2:d6:2c:
21:a5:81:93:44:6a:42:47:68:26:a4:c7:5b:a7:ee:
ba:41:6e:f9:a7:6c:ae:ea:55:67:8b:27:f0:8d:98:
8e:80:9b:ef:49:f5:24:c3:a4:40:95:31:a7:a4:73:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:E5:3E:2C:DC:D5:8D:13:2C:74:55:F5:9A:00:61:B4:AC:80:1B
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:f8:fb:92:62:4e:e5:a7:1c:98:15:5f:7d:c1:91:fc:ed:
04:c8:d3:32:fc:72:c1:7a:2f:59:b4:a5:b8:95:ec:04:56:9c:
07:fe:f9:fa:6e:0f:3b:da:a0:78:1e:da:98:cf:dd:c9:43:83:
51:e8:69:5f:9c:25:7b:39:24:60:0f:1d:0b:f0:8e:fa:4d:68:
2a:01:a8:86:83:c2:77:0e:6c:fb:ae:af:7a:6f:f7:26:99:e0:
b2:1e:e1:73:5d:12:63:23:a7:4b:41:27:52:24:f5:76:18:e6:
90:ac:28:8a:e4:7e:3c:8a:5b:25:4b:2f:67:17:35:33:d4:1d:
f3:be:c6:c0:49:fb:a8:18:56:a0:d6:12:19:0d:91:7d:c1:b2:
8b:98:6f:27:a6:68:6c:70:1b:7c:af:56:ac:06:8b:f6:a0:b7:
25:d4:ff:c0:20:36:5a:7c:3a:26:4d:99:1f:c0:b7:70:cc:81:
bf:92:9d:26:db:ca:83:b3:33:11:22:c5:7b:ca:a5:4b:5e:b7:
bd:da:41:c7:0b:f5:1d:ab:95:f8:eb:11:ff:00:59:8d:aa:4c:
48:72:fe:fb:fb:77:3e:63:1e:d5:ca:dd:5c:5d:a3:d4:f7:e5:
14:95:69:c0:16:3e:b3:dd:01:fd:c8:cd:cb:08:77:12:6d:1b:
ea:79:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:00 2025 by rpki-client