Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: X2aHz20trTAxrCLqCl7gpIUhJTj2OuDSKEtf1GKWjsU=
Subject key identifier: 04:E0:92:98:A1:18:41:2D:30:F4:A3:8F:D1:12:1B:81:34:29:F3:4B
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0198466472ED2463B8CC4F0D73074E6285D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 1280
Signing time: Sat 26 Jul 2025 11:00:44 +0000
Manifest this update: Sat 26 Jul 2025 11:00:44 +0000
Manifest next update: Sun 27 Jul 2025 11:00:44 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: uLBJ6+M8oqh+FehWVrzFcaG/zYGjAwUlu1iuNJUYTzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:72:ed:24:63:b8:cc:4f:0d:73:07:4e:62:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Jul 26 11:00:44 2025 GMT
Not After : Jul 27 11:00:44 2025 GMT
Subject: CN=04e09298a118412d30f4a38fd1121b813429f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:d9:d2:ee:75:79:79:68:db:c4:89:ae:4c:
18:d9:31:9d:1d:48:4c:b9:b9:63:7e:43:2a:b8:dd:
9d:9d:72:bc:c7:52:b1:cf:1f:55:63:ad:64:30:bb:
61:7c:ad:65:03:5b:7f:b8:00:ba:00:89:ab:23:3b:
51:37:48:e7:cf:a9:42:6a:ef:11:7e:e5:db:f5:de:
b5:91:25:9f:3b:2a:59:f9:df:89:27:d4:62:e2:2e:
1e:56:ee:17:c5:16:2c:54:cb:c7:df:3a:4a:fe:f6:
fa:3b:dd:7c:d1:ce:0c:d9:a8:ca:80:39:d3:08:87:
5d:55:03:fa:d3:e4:ef:d2:2f:ef:7e:4d:5e:95:d7:
ba:78:f1:3f:e5:3f:a6:d4:6d:84:a8:0c:c1:2d:a3:
32:b7:b1:54:8d:a5:ad:15:38:a7:f5:d5:f2:80:ba:
25:4c:79:89:19:64:61:e4:31:9a:52:78:c3:8d:f9:
1f:74:9c:eb:84:25:e6:d4:f6:2a:8c:e0:3a:ee:02:
72:6d:df:ec:9c:c2:b1:ce:21:6b:e4:35:36:17:5e:
65:8c:18:11:06:ef:e0:ed:d3:1b:d0:ce:f4:0b:a0:
0a:c8:91:5a:87:6b:04:d5:da:05:30:5e:be:02:20:
e2:62:cb:10:26:b3:92:bc:1d:ec:c6:ec:78:ca:50:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:92:98:A1:18:41:2D:30:F4:A3:8F:D1:12:1B:81:34:29:F3:4B
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:ca:10:e9:d8:63:e8:24:d8:13:e2:1f:28:ac:a2:df:99:
76:ec:ea:b7:41:b9:e0:51:22:76:ee:9a:e5:a2:a3:87:19:49:
5a:71:c2:58:e7:3a:6f:5e:9d:bd:25:9a:ca:0e:68:8c:6d:01:
1d:2d:d0:ad:f8:7b:9d:b5:da:1b:31:30:3b:4c:6d:8b:16:bd:
47:82:db:d1:43:55:37:96:71:47:e6:23:2b:a1:01:ac:c6:b9:
32:40:b5:78:5b:39:5d:43:83:72:d7:47:46:43:ca:f7:9f:a5:
a4:80:2d:37:d7:88:2f:13:f1:61:c5:65:f7:db:36:bf:57:28:
68:23:0c:83:e8:4a:91:62:35:42:eb:4d:1e:08:fd:e3:bc:89:
c9:cd:53:64:f7:cb:d5:67:30:c7:55:90:5e:62:90:e7:79:7e:
f8:14:76:e9:b5:02:dd:97:8a:ac:12:25:ed:30:97:53:53:39:
db:5b:4f:b0:d5:75:d5:71:5e:c8:3d:0f:7e:51:38:12:28:5f:
18:28:1a:3f:f7:38:36:90:95:d9:c8:a1:83:56:83:5c:cc:88:
18:87:8c:c6:7f:64:48:38:7d:51:43:1c:4e:f6:60:7d:bc:cc:
45:0b:42:a2:73:ca:b2:94:cf:03:de:e3:9e:c6:d2:0b:67:8a:
e0:f8:ca:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZHLtJGO4zE8NcwdOYoXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTU3MTZhYTFmNGMzYzEwMjg3MThhMWMzMzFlMjJiMzM5
ZWFkN2MwHhcNMjUwNzI2MTEwMDQ0WhcNMjUwNzI3MTEwMDQ0WjAzMTEwLwYDVQQD
EygwNGUwOTI5OGExMTg0MTJkMzBmNGEzOGZkMTEyMWI4MTM0MjlmMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB/Z0u51eXlo28SJrkwY2TGdHUhM
ubljfkMquN2dnXK8x1Kxzx9VY61kMLthfK1lA1t/uAC6AImrIztRN0jnz6lCau8R
fuXb9d61kSWfOypZ+d+JJ9Ri4i4eVu4XxRYsVMvH3zpK/vb6O9180c4M2ajKgDnT
CIddVQP60+Tv0i/vfk1elde6ePE/5T+m1G2EqAzBLaMyt7FUjaWtFTin9dXygLol
THmJGWRh5DGaUnjDjfkfdJzrhCXm1PYqjOA67gJybd/snMKxziFr5DU2F15ljBgR
Bu/g7dMb0M70C6AKyJFah2sE1doFMF6+AiDiYssQJrOSvB3sxux4ylA8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATgkpihGEEtMPSjj9ESG4E0KfNLMB8GA1UdIwQY
MBaAFCJVcWqh9MPBAocYocMx4isznq18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgt
MDczNjllMTRjYWRlLzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgtMDczNjllMTRjYWRl
LzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaDKEOnY
Y+gk2BPiHyisot+Zduzqt0G54FEidu6a5aKjhxlJWnHCWOc6b16dvSWayg5ojG0B
HS3Qrfh7nbXaGzEwO0xtixa9R4Lb0UNVN5ZxR+YjK6EBrMa5MkC1eFs5XUODctdH
RkPK95+lpIAtN9eILxPxYcVl99s2v1coaCMMg+hKkWI1QutNHgj947yJyc1TZPfL
1Wcwx1WQXmKQ53l++BR26bUC3ZeKrBIl7TCXU1M521tPsNV11XFeyD0PflE4Eihf
GCgaP/c4NpCV2cihg1aDXMyIGIeMxn9kSDh9UUMcTvZgfbzMRQtConPKspTPA97j
nsbSC2eK4PjK9A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:34 2025 by rpki-client