Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: LiOEDAkooTcC8d6H1dgucML3zhpf9nPErNHEPIgSZoo=
Subject key identifier: C0:15:C9:E6:9D:77:3A:30:08:C1:13:51:99:EC:74:58:EF:B8:1C:13
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 019A4DE211207F0A0C2EFABA6C62B851548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 07F9
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: a8YKD0jHGPLoCS4kkUv/0m9PRoxhpTR8USylpN/1hN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:20:7f:0a:0c:2e:fa:ba:6c:62:b8:51:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=c015c9e69d773a3008c1135199ec7458efb81c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0a:2b:17:60:8e:8d:07:4f:25:79:c8:07:9a:
39:dd:93:60:f2:82:86:19:26:d2:bc:ef:d9:ec:59:
31:d2:04:52:c2:c0:fc:66:ad:7f:2c:46:43:b2:11:
83:ee:cc:d2:49:82:19:f1:0c:ff:42:e5:98:df:7b:
b9:6e:1f:56:ae:16:da:db:a0:db:32:cf:fc:f4:72:
ac:d6:70:78:87:15:5d:e8:63:5e:5b:57:2f:43:4d:
34:b7:cb:2a:2e:a0:30:a3:c7:af:2f:27:43:52:45:
06:3d:86:b2:0d:ab:e1:cc:d2:77:31:a7:4e:01:02:
6a:1d:ba:21:c7:03:e9:de:ad:f5:96:3c:83:b4:b6:
e5:9c:e5:ab:ac:fe:22:bf:25:c1:de:15:2c:de:47:
9b:2f:24:a5:03:49:3f:09:37:5a:07:6d:fb:84:30:
bb:ca:d3:b6:ec:69:8e:1a:ce:f7:c8:b8:7f:39:1f:
e0:ca:9c:7f:b2:c9:b1:98:5b:62:99:6a:fd:dd:e3:
2c:db:bc:da:f9:2e:82:97:01:39:78:9d:f3:96:f7:
9f:26:84:58:fb:27:58:4f:55:0d:07:35:a5:23:ad:
9e:83:6f:41:a4:e5:84:bd:85:49:70:fa:5a:61:f3:
be:86:77:00:31:d1:b4:fc:18:cc:27:bd:c7:22:36:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:C9:E6:9D:77:3A:30:08:C1:13:51:99:EC:74:58:EF:B8:1C:13
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:2f:f3:88:a4:a4:c5:6b:cd:e2:26:94:b1:a2:46:73:89:
6e:8c:e7:ab:72:65:36:9c:0f:b6:4c:a7:d1:66:d0:5d:11:6a:
44:ed:c6:81:30:e0:9d:92:55:93:e1:23:55:a7:ee:cd:53:ea:
b9:46:8f:06:f7:3e:8c:46:1e:ee:fd:ea:78:45:77:26:eb:0a:
26:c0:98:12:8e:d1:98:7e:24:56:c8:77:3f:12:fe:d3:90:39:
ac:79:b1:71:c6:66:70:6f:c7:27:1a:b1:b4:13:75:52:93:cc:
7b:77:17:09:c1:74:a6:9a:5f:50:3d:24:ad:38:d3:91:8a:d5:
34:c8:15:65:9b:b4:29:61:4d:11:e3:b0:94:07:43:6e:a2:bf:
91:5e:bc:40:b0:8a:1d:49:c3:ee:8e:75:4e:c8:b4:4e:42:43:
c1:94:75:ab:72:fd:74:1a:c7:21:c7:2d:25:08:0a:df:3a:3a:
20:dd:92:1b:58:3b:a4:65:4f:1b:a3:58:83:35:e5:39:dd:6d:
85:4c:aa:5e:8d:7c:c0:87:d9:31:1a:f7:53:04:d2:dc:98:28:
f9:dc:93:2c:8f:fa:c1:a5:05:4c:9d:bc:38:20:02:35:49:1e:
91:e8:3d:77:c4:5d:7a:f3:ef:d5:55:06:39:53:92:94:35:b1:
58:40:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:24 2025 by rpki-client