Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: nAfg/HKO8TXKZhCC5e5VV2yO4njPOCDQIttEb8wkT9A=
Subject key identifier: 14:38:76:6B:62:34:5F:CC:6B:FE:35:2E:49:08:E4:4E:28:22:52:7B
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019A52D1E2B334F1D84F01F678F7D3D963F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 07:01:18 +0000
Manifest this update: Wed 05 Nov 2025 07:01:18 +0000
Manifest next update: Thu 06 Nov 2025 07:01:18 +0000
Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: oMqFpsqO5ExnUsFxTv7vrlNAO2Y9NhXmPw0voZ9FJ6M=)
6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:e2:b3:34:f1:d8:4f:01:f6:78:f7:d3:d9:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Nov 5 07:01:18 2025 GMT
Not After : Nov 6 07:01:18 2025 GMT
Subject: CN=1438766b62345fcc6bfe352e4908e44e2822527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:a2:60:1c:01:2e:08:80:1a:03:df:0f:9f:
ed:43:35:a1:02:fc:11:04:f1:7d:fe:29:43:f7:94:
69:a1:03:7a:78:9c:89:af:ef:e2:12:9b:4e:76:be:
62:76:e2:74:62:fa:9d:e1:56:a9:a8:29:ac:33:c7:
2c:e6:a1:b6:c3:eb:bb:6a:78:de:24:50:dc:00:77:
f9:2d:6e:ce:59:7e:36:17:b8:e6:cb:40:c5:cb:29:
dc:6c:9a:89:99:b2:af:80:96:63:f8:45:06:b0:dc:
6c:ff:c7:bf:fc:94:ad:77:17:b9:1e:07:ad:28:68:
26:ae:1c:b0:7a:5f:cd:86:2f:d8:26:13:89:eb:43:
ca:9c:a8:66:16:63:e0:5e:02:4f:a0:d5:39:50:c4:
d7:ba:d3:e3:7d:2d:d0:b0:34:cb:8b:ca:6f:ba:2b:
6c:97:f7:40:04:2b:f6:1a:dd:f8:64:2b:c7:4b:79:
59:74:7d:32:60:0a:28:f8:c5:7a:65:7c:31:e8:fe:
e4:74:b8:be:4b:35:76:1d:d2:5d:7e:e6:76:f5:b3:
b7:28:b6:1c:57:a7:6d:b7:ba:03:84:13:12:89:82:
b8:24:19:56:31:74:9d:78:12:71:f1:eb:ba:a7:41:
f1:62:f1:33:28:40:94:0f:00:83:3a:5d:20:8e:7a:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:76:6B:62:34:5F:CC:6B:FE:35:2E:49:08:E4:4E:28:22:52:7B
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:f2:91:79:8c:f0:bd:3e:60:98:6f:a8:9a:ed:bc:e9:43:
ba:01:8a:4c:73:31:68:98:6f:6c:fc:d5:f8:aa:f6:53:8f:e3:
49:0d:51:50:3a:e5:a6:9e:18:4f:47:17:0a:f9:5c:2c:43:eb:
75:55:ed:10:07:df:98:25:0b:1f:17:10:c2:1b:63:41:d4:64:
75:90:4e:e5:c1:3c:01:be:e8:f1:00:0c:0f:f3:1d:e0:f8:b2:
d2:77:f0:c1:a8:b4:64:cd:25:d6:59:2a:49:9e:2e:0d:52:20:
9c:af:4a:54:cb:01:78:92:14:ac:9e:03:4f:0a:8f:d3:0f:be:
1e:ef:65:8b:61:54:79:f4:16:e0:7f:13:7f:1a:ec:68:e7:a1:
be:7a:82:c8:64:2f:49:27:8d:f5:94:2e:95:a5:81:3b:6f:e7:
0e:95:8b:38:2f:aa:43:d0:b8:ab:c8:69:51:60:f6:9a:7c:cf:
19:13:ed:68:f4:04:42:76:0f:e2:5f:6e:24:8a:bd:48:f9:4d:
0a:d6:d9:8a:bc:81:68:9c:f6:a9:76:5a:0b:c5:f0:45:a4:42:
89:24:d1:5a:0e:26:dd:14:98:a7:fb:27:50:7d:d8:41:17:b6:
69:e4:a9:27:36:93:f9:2d:fa:ab:2e:b2:68:f4:d1:c9:a8:1c:
8c:10:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:46:15 2025 by rpki-client