Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: rOD21DBusaAe207KpZotgd3xq6WR9fabOskBf1tROlI=
Subject key identifier: 0B:49:61:24:C7:6C:73:0B:14:70:58:26:5F:08:3F:6E:39:46:A9:5B
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019A4DE18363CCDCFF35120D3C9965B7F461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 147E
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: Q5noPQa1aoGUgm8sX7CN1U6/Ky1VGvhCbAwdTonkg/c=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:83:63:cc:dc:ff:35:12:0d:3c:99:65:b7:f4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=0b496124c76c730b147058265f083f6e3946a95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:d0:80:d5:0e:0c:d8:d7:21:4d:37:74:35:
99:b7:5c:0a:5c:29:73:c5:b2:f2:cb:84:c1:09:ae:
17:c1:12:d5:15:03:85:f1:50:f4:bb:15:c8:0c:29:
a1:44:d6:66:8a:a8:5a:81:fe:dc:50:28:3b:63:91:
28:8b:f7:c1:f0:51:50:5a:8b:20:22:d2:4f:82:86:
79:7f:17:14:dd:e4:35:52:9c:b6:69:56:2f:c3:b9:
26:4c:03:e4:29:e7:77:b1:9c:4f:b4:16:58:c1:58:
0c:13:33:30:15:30:79:1a:5a:a8:9f:1a:4c:7a:25:
06:6f:51:a8:46:7e:18:23:0a:d1:fa:6a:c8:a9:ee:
bc:40:8a:44:cc:11:77:b2:a4:06:dc:78:b8:89:8f:
7b:57:49:65:8c:a9:c1:e1:2a:66:b9:ae:1c:df:68:
7c:74:88:fe:53:94:8e:db:aa:59:c1:31:d1:89:5a:
fa:6a:27:22:c9:3b:9e:81:4c:9d:d3:22:e6:00:a0:
a0:61:5d:32:65:ad:5f:ec:29:7f:c0:8d:66:b1:9a:
8f:77:2f:a2:fb:a8:9b:bf:cd:d2:3f:7c:fd:12:07:
0f:7f:cd:11:57:87:6b:05:e4:fa:98:a9:b7:53:c6:
ae:1a:ad:9d:4e:c0:5d:c1:3b:1f:76:57:95:28:8a:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:61:24:C7:6C:73:0B:14:70:58:26:5F:08:3F:6E:39:46:A9:5B
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b3:dd:33:47:f5:09:62:43:4f:ef:79:9d:8f:a6:0c:71:42:
04:4c:d0:a0:a1:b4:f5:26:f5:62:46:f9:b9:e6:09:b6:8e:18:
7b:d5:c9:2f:8a:eb:9d:c3:84:d0:ee:fd:5f:84:04:ea:7d:f1:
82:f3:5e:17:1e:87:96:7f:a5:aa:b6:f1:55:ee:92:94:01:fb:
d5:2c:fa:cd:29:59:12:12:2f:2f:26:b5:ef:04:15:d7:c8:09:
bc:4a:8c:2d:44:53:70:ea:85:04:86:7b:20:46:4a:96:db:a6:
ae:cf:5a:ae:e3:ad:07:a7:46:42:29:2b:4c:c8:a5:84:ab:fd:
7f:15:4b:ec:3e:a7:dc:eb:60:32:b8:1d:7d:92:d9:63:b2:e6:
89:8c:7c:c5:ea:64:61:ec:62:75:4b:ce:b8:7b:42:d2:81:42:
f0:83:73:d4:92:06:6f:82:dc:33:f8:8d:f5:f2:8b:75:76:d5:
cd:04:63:57:ba:d3:b9:4a:5e:85:78:29:19:17:48:9d:ac:2b:
a8:ca:55:28:d5:4c:89:20:ab:3c:3c:df:9d:f7:d8:46:c4:ea:
a6:89:27:76:c9:eb:c5:bf:b3:fa:30:f3:a4:1a:59:ab:44:d6:
9c:7d:99:25:a8:f9:3b:9c:b2:8e:4b:14:7f:99:c2:40:32:0d:
ac:3b:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:21 2025 by rpki-client