Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: 7B0iD1YpcWWGphFjAjqTHky6jaIbpuowUf9cbuhCEEY=
Subject key identifier: 68:B2:6F:2D:D2:E2:97:B5:6C:0F:15:C0:B5:19:DA:BD:33:35:84:CF
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 019A4EF4F9FDDCEAD3DF54EDF1285DD9C619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 0419
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: 9bLY909u1vNrCPPBX1GObMB17ThbEbdOA+giGqk6Rd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f9:fd:dc:ea:d3:df:54:ed:f1:28:5d:d9:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=68b26f2dd2e297b56c0f15c0b519dabd333584cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:92:0c:25:d7:24:bc:ed:18:b1:60:3e:2a:
54:2f:81:c9:b9:8f:2a:93:62:b1:59:02:cf:45:0b:
f1:d9:0f:b3:a5:f2:64:fc:3b:af:1c:ac:2c:ab:0b:
62:c1:c6:20:df:a1:1c:2e:50:73:f5:de:b6:22:3c:
ff:c8:2d:50:d5:91:eb:9b:c1:72:8b:6f:49:0a:ce:
be:40:f3:8d:39:f7:13:79:3b:0b:12:99:1a:5a:1a:
95:79:90:c6:3d:dd:65:8b:6e:e3:9c:12:4f:5d:36:
c4:06:c0:78:38:b3:4c:63:82:0a:fc:f5:43:01:61:
d0:b1:b7:48:69:4c:e5:07:6e:f2:19:48:b4:ba:11:
a2:3c:45:a5:4c:56:a6:14:e4:dc:b4:10:94:23:b9:
41:c8:24:aa:69:76:06:e2:32:e1:2f:74:12:c0:b6:
fb:3a:52:9a:a2:c1:85:6e:b6:cd:71:8e:61:59:cb:
b6:4c:29:a9:3e:f9:a2:0f:47:6a:99:08:38:8f:b3:
ba:02:e6:a6:59:0b:02:16:39:04:1d:5b:9c:d5:8a:
08:1c:c0:3c:70:7f:be:90:d5:c8:6d:72:aa:aa:c3:
0e:d5:36:11:86:38:15:f1:e8:db:01:b0:77:05:df:
c9:57:7a:01:b1:f4:77:f6:0e:79:ea:c0:d6:3d:ad:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:6F:2D:D2:E2:97:B5:6C:0F:15:C0:B5:19:DA:BD:33:35:84:CF
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5e:54:15:d7:2c:8b:2a:19:58:b5:17:a5:13:29:b5:5d:38:
a9:dd:9a:ce:1e:87:21:f9:f1:b9:ac:d6:66:6c:8d:ce:96:b3:
63:e5:c5:01:ae:d6:e6:2f:fd:23:79:1a:1c:af:fb:fc:7b:2a:
51:b5:56:5c:45:bd:44:0b:94:6d:f0:3d:0c:64:87:ae:9e:00:
7f:82:59:97:ef:ca:bd:2a:44:4c:dd:c6:34:98:2f:28:54:c6:
17:41:bb:c4:18:49:e6:8e:a8:db:7d:8f:68:7e:cc:f8:6d:29:
05:42:b8:cd:35:4b:76:93:af:28:89:0f:11:50:f9:38:86:33:
af:71:21:de:8c:14:4d:e6:ef:09:50:62:83:42:e1:87:28:22:
91:3f:e3:ec:88:07:7d:89:0d:d8:a3:f2:87:8b:da:9b:25:40:
4b:5a:fe:d2:a2:ed:80:aa:cf:05:2a:59:67:9a:17:56:39:9c:
7f:ee:c7:87:f2:d6:6d:3b:83:b0:c9:e2:4e:97:32:f4:4d:13:
a3:24:7b:a7:fe:a2:bd:87:07:7c:0c:da:71:28:14:22:b4:dc:
0c:2f:8c:2f:b2:38:2f:b3:50:28:60:3a:8f:cd:a0:27:9c:e1:
89:26:c9:a6:95:fd:a3:e0:d2:be:29:08:49:40:87:3d:68:c5:
8d:3c:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:29 2025 by rpki-client