Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: n5gHPbVB9WWJnLiEbd0iRduHge8dQRYi3Wr2XzVeqwI=
Subject key identifier: BA:75:1E:FE:6A:EA:56:E4:4C:7E:B1:79:41:B9:F8:DC:3F:A9:B7:97
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 01976A05A3CDF5C5FFF14276BEF94CECEB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 12BC
Signing time: Fri 13 Jun 2025 16:00:43 +0000
Manifest this update: Fri 13 Jun 2025 16:00:43 +0000
Manifest next update: Sat 14 Jun 2025 16:00:43 +0000
Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=)
2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: u3VDKr0Tb4V0DBo+woMKbiJjM5yuIKtRRmon2zLC7mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:a3:cd:f5:c5:ff:f1:42:76:be:f9:4c:ec:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Jun 13 16:00:43 2025 GMT
Not After : Jun 14 16:00:43 2025 GMT
Subject: CN=ba751efe6aea56e44c7eb17941b9f8dc3fa9b797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:2f:cc:34:ff:1e:cb:f4:d5:bb:d9:7c:41:
76:9c:ab:c3:fd:1f:a5:ac:23:81:b2:69:17:47:c0:
35:f1:5f:e0:fa:93:f7:fb:56:f7:8c:3e:ef:0e:0a:
c0:8e:74:61:01:05:ca:6a:c1:54:fa:3e:93:be:9c:
bf:a5:16:2b:12:9c:ca:4d:af:56:2b:7e:77:87:1a:
86:b0:b0:07:58:d2:a4:45:03:a7:cf:70:1b:73:2e:
8d:3e:a2:20:6a:c6:9b:7d:5d:ea:45:a4:cf:ab:37:
21:d3:8f:cb:5c:94:0f:b6:aa:b9:57:73:0c:c8:97:
a6:95:81:22:81:e1:5a:e1:9e:36:30:cc:be:e8:5a:
78:6d:3a:63:5d:e3:cd:4c:e6:ff:ad:bc:8e:25:14:
83:3c:77:1a:a5:11:23:a5:db:e1:50:a9:ff:3d:14:
b3:25:20:67:b1:64:25:c0:59:6b:07:f4:c4:ba:fb:
12:ab:19:0d:fa:29:e6:0c:69:10:ba:0f:ac:c8:02:
e9:9e:8b:da:e4:dd:b9:29:19:6b:22:24:66:d7:54:
8e:bc:80:61:09:b0:99:c7:12:7d:b8:0f:eb:6a:4a:
c4:f9:f7:9f:d5:34:17:93:ab:f4:11:96:72:9b:bd:
25:c4:f9:06:a7:d1:4d:3c:23:09:b7:16:10:fe:60:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:1E:FE:6A:EA:56:E4:4C:7E:B1:79:41:B9:F8:DC:3F:A9:B7:97
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:f3:6b:db:87:8d:51:7b:1a:32:d4:f2:81:f6:da:ec:a8:
4d:fe:d3:13:17:a2:6a:86:63:2c:a0:a0:5e:4f:31:be:44:a8:
74:f7:03:40:8e:f9:76:5c:39:a4:e9:ff:dd:ba:a1:1a:33:8f:
a2:ad:2e:61:ae:8d:b2:57:cf:96:03:df:98:6e:db:ef:25:00:
bc:bd:8b:ab:6a:ca:d6:5f:0d:6e:15:88:bb:44:91:3e:25:58:
f3:79:47:b0:f8:91:d1:0f:4a:32:cc:9e:9b:8a:ca:0a:cd:c2:
87:85:f7:13:0b:07:e9:c8:fc:84:a4:47:41:0d:b4:97:96:77:
a4:65:8c:49:79:d6:19:e7:1a:34:dc:c4:ce:21:f1:cb:2b:e4:
22:fd:ea:fd:a2:ac:4a:81:32:97:e6:50:08:42:70:6c:a0:38:
9c:6b:8a:59:ef:5e:fb:ef:90:c8:c0:0e:75:aa:d6:0b:1e:70:
f3:c1:59:b6:dd:2e:fe:60:71:11:0c:7b:29:90:b0:53:19:d0:
a4:1a:f3:85:f1:00:37:2d:6b:5c:67:5d:0c:f5:87:c7:53:6a:
97:02:6f:e2:9e:b9:86:4a:bf:5d:5f:29:78:86:de:fd:20:dd:
34:ff:fe:16:5c:62:a0:cc:0e:ca:03:bc:1a:2a:e4:54:ff:40:
17:a5:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:06 2025 by rpki-client