Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: TSlkiCZ/CxZFUW2ahOnDQu3OVKCRc1xPe6/KRu5etGg=
Subject key identifier: CA:70:F8:7E:55:A8:5B:C7:6B:9C:38:F8:DD:40:B0:1C:E6:B2:18:CD
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 01988431641D64CBB4EA6E1FA3C922AB39CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1391
Signing time: Thu 07 Aug 2025 11:01:26 +0000
Manifest this update: Thu 07 Aug 2025 11:01:26 +0000
Manifest next update: Fri 08 Aug 2025 11:01:26 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: x0GcvylsqlBCvHGPhLcZN1xAnUSlG8nY+ptStlPjooc=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:64:1d:64:cb:b4:ea:6e:1f:a3:c9:22:ab:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Aug 7 11:01:26 2025 GMT
Not After : Aug 8 11:01:26 2025 GMT
Subject: CN=ca70f87e55a85bc76b9c38f8dd40b01ce6b218cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:a1:c7:2b:a2:d5:d0:cf:39:a3:b3:b6:a9:
0c:bf:5d:08:8b:99:65:12:d3:92:4b:3e:c9:f9:d4:
b3:3f:f3:d1:92:c5:12:6b:63:3d:44:28:1d:92:94:
de:11:e9:92:80:8b:91:06:89:1a:ca:b7:f6:86:44:
7d:fd:94:9b:d7:24:9a:1d:1d:75:b8:07:84:86:01:
10:d6:56:1e:cb:71:51:ee:c3:b0:bd:c1:aa:c6:09:
f5:67:29:0e:fc:24:69:2a:ac:9e:64:61:28:25:7f:
fa:fe:ad:7f:06:eb:53:a4:d6:b7:85:b0:8d:51:d7:
1b:96:e5:a6:65:d1:14:80:77:0b:db:68:5e:1a:73:
0f:99:68:e4:bd:5f:5c:01:0c:90:08:17:bc:e4:79:
a5:98:84:01:0a:a5:6b:be:47:0c:ba:a6:2e:b7:7e:
92:d9:e9:53:af:2f:b4:f1:d0:fc:96:ef:9c:c6:06:
ea:f7:9f:3c:55:50:cd:95:41:cf:b2:46:24:b2:3d:
05:9a:c6:b2:1e:45:99:f4:83:09:9e:5b:b5:94:da:
71:3f:ae:56:a2:aa:6e:bb:00:25:8a:76:f3:15:74:
cf:6c:49:1c:49:06:c8:f0:12:7a:0f:c0:c7:ac:7a:
02:55:35:42:b6:06:61:fb:63:42:fd:0b:10:2a:da:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:F8:7E:55:A8:5B:C7:6B:9C:38:F8:DD:40:B0:1C:E6:B2:18:CD
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:08:be:49:b0:2b:75:ff:d8:49:b6:dc:1b:98:20:7e:ce:
7b:20:ae:b6:3e:34:18:93:0b:69:c0:3a:2b:03:3f:c9:06:43:
c1:20:52:97:78:26:56:69:28:8a:af:18:5f:f3:77:e4:56:fe:
af:7c:85:be:f4:5b:db:55:70:16:dd:65:21:9c:43:b8:f7:a3:
84:67:d3:aa:2a:6c:73:f9:39:53:fd:44:59:fe:82:d5:48:12:
3a:6f:06:9d:8f:dd:ec:a3:cc:a3:ad:95:e5:12:a1:05:e0:5d:
c3:39:6e:f6:21:5b:d6:bb:23:17:d1:dc:09:eb:ab:f9:44:84:
c1:31:6d:e9:23:26:6e:3b:c9:20:f4:b3:8b:5d:65:6a:85:e2:
85:4c:4e:3f:07:37:b4:1e:fe:bc:97:2c:01:a0:49:55:8c:ce:
96:cc:0e:da:22:3e:d2:c9:ac:94:a1:5b:46:73:b3:aa:4a:02:
25:f0:88:fa:2d:1a:eb:9d:8f:aa:a9:5e:f6:4d:05:c0:28:fd:
de:ce:b9:7e:f9:6b:62:e5:a6:c2:5e:d7:07:09:7c:db:c7:42:
b6:8e:f3:5d:dc:69:7c:85:64:84:f4:18:d8:52:29:52:0f:f7:
f0:a1:6b:f7:66:22:51:14:36:45:f4:21:3e:02:54:76:76:37:
06:d1:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:19 2025 by rpki-client