Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier: jCDXzTfyHbx4sZWiq7ttHJlOtICSRva/2wc9kH0SVOk=
Subject key identifier: 7E:08:BC:16:CC:B3:36:D0:37:6B:6C:52:28:52:DE:08:89:B4:B1:3C
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial: 0199CFED22644F6E31E972187853BB9EE57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number: 16CA
Signing time: Fri 10 Oct 2025 21:00:48 +0000
Manifest this update: Fri 10 Oct 2025 21:00:48 +0000
Manifest next update: Sat 11 Oct 2025 21:00:48 +0000
Files and hashes: 1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: hn4+GkNrBo6/hmalUel/XyeXTckmNBo3qxAxEre6ix8=)
2: cznyJUVo486opCfwPRwYW5a-bCI.roa (hash: yeo9giLM4O/29X7azlP3H7yqqKlzXfDMEa/1/AZBMhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:ed:22:64:4f:6e:31:e9:72:18:78:53:bb:9e:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Validity
Not Before: Oct 10 21:00:48 2025 GMT
Not After : Oct 11 21:00:48 2025 GMT
Subject: CN=7e08bc16ccb336d0376b6c522852de0889b4b13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:59:9e:b2:f6:70:3b:cc:05:a9:70:a3:00:
2d:ec:5d:3d:b3:67:9e:85:97:56:6c:82:a8:43:4f:
5e:f2:af:90:8a:aa:ab:00:eb:4b:b2:04:79:04:3d:
44:17:84:43:cf:20:2c:0d:c6:36:19:4b:d9:b5:a4:
dd:df:2d:f8:f5:7a:34:a5:1b:3d:17:86:8f:dd:f5:
2f:3c:8b:b1:20:f2:e2:a8:01:71:dc:ce:9d:e5:b8:
54:dd:26:fa:3c:45:9b:bc:48:96:47:23:09:f1:1c:
eb:a8:2f:4b:87:88:e3:a7:43:13:61:16:b7:f1:1d:
f9:cb:8d:f0:7d:10:c4:69:34:76:36:b3:14:74:96:
b9:8f:d7:e7:b2:e2:c9:bb:a2:0d:7c:22:87:cf:7f:
51:d9:c9:6a:ba:8a:ef:3e:6f:1a:36:c5:58:28:0b:
e2:bc:a2:85:b0:30:54:d5:ec:59:2d:ca:02:27:3a:
76:f6:21:f7:fb:c6:80:95:7e:56:80:4e:40:e5:5f:
9c:1b:e6:33:bc:ab:d9:ba:7d:43:dd:cd:8f:a7:8d:
66:a9:f0:02:43:c8:86:12:c2:fb:e1:06:70:d6:97:
35:da:9f:df:9b:19:50:2a:8b:0c:90:60:38:9f:f8:
55:b7:aa:d3:11:34:10:10:f9:97:9e:47:ba:9e:36:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:BC:16:CC:B3:36:D0:37:6B:6C:52:28:52:DE:08:89:B4:B1:3C
X509v3 Authority Key Identifier:
keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:59:de:56:1f:27:8b:bc:22:a0:db:42:35:1c:ed:25:77:
f8:ce:33:43:a4:05:2f:f2:2b:61:25:74:09:c7:2f:ab:06:4e:
8d:42:35:c1:4f:5a:f4:9d:cc:c4:99:87:63:71:49:37:c6:a0:
37:5b:0a:2e:2c:85:d2:55:03:27:b5:eb:6b:ae:2c:fb:49:25:
eb:b3:ea:8e:dd:52:ca:40:ab:c1:9f:26:28:8f:dc:71:49:dc:
25:80:d4:ea:33:b1:a5:75:1e:48:75:bb:cb:a0:db:24:ee:b6:
48:da:85:55:62:9a:eb:0e:33:d0:f7:5e:11:d1:5d:6c:d4:92:
10:25:5d:37:86:0e:3f:53:e1:f9:83:e1:13:8b:d8:c3:0a:d6:
af:2a:79:b0:68:64:8d:e4:bb:7d:54:d3:ea:fa:67:1a:ce:19:
2f:82:3b:dd:93:e2:a8:d4:6f:ca:7d:68:5c:73:36:7d:ac:6b:
63:a8:26:55:3d:82:3c:22:22:46:92:ed:5c:e2:4d:9a:cf:ff:
5a:06:c6:7b:fb:b4:71:fb:b6:e7:29:45:a1:75:26:22:9c:48:
31:da:ff:94:d8:50:0b:e2:14:13:ff:0d:11:7b:12:51:34:51:
b0:8b:39:27:c1:7c:56:15:42:82:46:15:fc:fe:42:34:19:26:
ac:0b:65:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnP7SJkT24x6XIYeFO7nuV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjBkYTIwMmQyYzM0YTQ3M2E2ZDc2YWYwOTNlOGRlMDMx
MWI5NWIwHhcNMjUxMDEwMjEwMDQ4WhcNMjUxMDExMjEwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZTA4YmMxNmNjYjMzNmQwMzc2YjZjNTIyODUyZGUwODg5YjRiMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3hZnrL2cDvMBalwowAt7F09s2ee
hZdWbIKoQ09e8q+QiqqrAOtLsgR5BD1EF4RDzyAsDcY2GUvZtaTd3y349Xo0pRs9
F4aP3fUvPIuxIPLiqAFx3M6d5bhU3Sb6PEWbvEiWRyMJ8RzrqC9Lh4jjp0MTYRa3
8R35y43wfRDEaTR2NrMUdJa5j9fnsuLJu6INfCKHz39R2clquorvPm8aNsVYKAvi
vKKFsDBU1exZLcoCJzp29iH3+8aAlX5WgE5A5V+cG+YzvKvZun1D3c2Pp41mqfAC
Q8iGEsL74QZw1pc12p/fmxlQKosMkGA4n/hVt6rTETQQEPmXnke6njat5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4IvBbMszbQN2tsUihS3giJtLE8MB8GA1UdIwQY
MBaAFCCw2iAtLDSkc6bXavCT6N4DEblbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMt
ZDhlZmY1ZDZhNjNiLzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMtZDhlZmY1ZDZhNjNi
LzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ9Z3lYf
J4u8IqDbQjUc7SV3+M4zQ6QFL/IrYSV0CccvqwZOjUI1wU9a9J3MxJmHY3FJN8ag
N1sKLiyF0lUDJ7Xra64s+0kl67Pqjt1SykCrwZ8mKI/ccUncJYDU6jOxpXUeSHW7
y6DbJO62SNqFVWKa6w4z0PdeEdFdbNSSECVdN4YOP1Ph+YPhE4vYwwrWryp5sGhk
jeS7fVTT6vpnGs4ZL4I73ZPiqNRvyn1oXHM2faxrY6gmVT2CPCIiRpLtXOJNms//
WgbGe/u0cfu25ylFoXUmIpxIMdr/lNhQC+IUE/8NEXsSUTRRsIs5J8F8VhVCgkYV
/P5CNBkmrAtlFw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:20:19 2025 by rpki-client