
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier: DACDpZMGnesfbfUom6PxGuZHppasZwWaavKdoEtbJyc=
Subject key identifier: 0C:C2:89:18:68:00:63:02:94:58:16:54:EF:8B:8E:71:C2:08:35:21
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 01983FF46A90A1627490D73C5FB47875EC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number: 09C4
Signing time: Fri 25 Jul 2025 05:00:39 +0000
Manifest this update: Fri 25 Jul 2025 05:00:39 +0000
Manifest next update: Sat 26 Jul 2025 05:00:39 +0000
Files and hashes: 1: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: vs7hfZ1EJpH1lLGjHe6HmK2vLkS6qNVrpoIuT1d6e+s=)
2: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:6a:90:a1:62:74:90:d7:3c:5f:b4:78:75:ec:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Jul 25 05:00:39 2025 GMT
Not After : Jul 26 05:00:39 2025 GMT
Subject: CN=0cc289186800630294581654ef8b8e71c2083521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:2d:c8:76:b7:af:35:b8:f1:ff:1b:6e:5e:
1a:8d:7b:f9:1a:0a:06:d2:35:d4:4f:01:84:ac:98:
41:f7:1d:bc:74:27:72:57:02:62:35:0b:53:3a:9c:
f5:e4:ee:52:6e:f4:42:a6:27:d0:09:3f:ca:05:a6:
9a:63:73:94:3f:7c:73:b2:d6:86:30:f6:f8:2e:0a:
0d:b1:48:ed:a9:82:e6:6e:e1:96:84:d7:cb:1f:53:
bb:f2:89:80:3a:4a:a2:88:f2:35:05:ae:f3:eb:59:
e4:da:f2:a3:5b:02:77:80:63:ac:84:2b:ab:f5:6d:
79:4b:15:06:ef:07:d4:77:eb:95:72:aa:b5:49:95:
bb:01:a0:ce:6b:64:2d:1b:0b:1e:dc:3b:83:1e:45:
a5:db:8c:f5:12:3b:69:17:2c:6a:64:a8:d5:ba:cb:
b2:27:5f:02:4e:7e:e3:5d:bd:70:b2:b8:3e:c1:bc:
8e:9d:9f:dc:64:fa:06:32:5b:9e:e4:9e:50:98:32:
2a:0e:9b:b6:0e:a6:9d:67:de:bd:69:d0:14:3d:d0:
10:6e:28:56:d0:3a:a0:87:0f:e7:d7:b8:ca:2d:f5:
63:81:18:f8:43:25:df:35:3c:a9:3f:c4:c9:7b:54:
49:ad:36:98:34:58:1e:da:a5:89:aa:2d:f7:ae:09:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:89:18:68:00:63:02:94:58:16:54:EF:8B:8E:71:C2:08:35:21
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:f9:d6:71:aa:74:dd:6e:7f:3f:8f:94:a2:33:cc:62:91:
c1:b3:69:b9:0a:bf:a1:a4:b5:e1:4a:1e:0c:23:c3:c8:7d:fc:
b2:96:b6:8c:f3:95:1b:59:c4:56:9f:27:19:bf:e6:e8:84:87:
42:a0:5f:61:cc:7f:de:0c:ce:d5:ee:20:ef:03:cd:b6:17:c4:
f1:35:93:3d:64:3d:85:57:24:b3:5e:ee:1f:fc:fe:76:79:18:
9e:b9:33:eb:57:19:f3:33:61:01:5c:da:41:23:1e:49:3a:0c:
35:da:db:f3:a9:20:a8:6c:a4:c9:e3:a5:08:03:fe:b6:66:be:
f1:9d:7f:1c:c5:75:bc:ab:5f:f2:b1:f3:eb:2e:26:f2:cb:dc:
27:03:57:8b:cd:a0:95:02:bd:10:3e:9a:95:f7:ec:65:e4:f3:
b3:aa:3a:e8:16:e3:17:90:69:8f:f2:3e:f4:43:41:db:8b:73:
21:2a:a8:aa:2d:37:bf:df:07:aa:99:0a:38:ab:ec:e5:9e:37:
ec:01:e7:b6:75:23:9f:c3:81:1f:ce:db:0c:66:6d:98:e7:f9:
2a:46:a6:0b:80:26:ad:3f:5c:ae:6f:50:a9:e9:68:ea:69:d3:
5c:2e:6f:2e:78:d1:76:58:86:da:7b:5f:04:98:f5:21:1a:9e:
3f:69:fa:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/9GqQoWJ0kNc8X7R4dexkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEwOGY0MWMzNzMwMjdlMDgxYjVjMWNhOGE4MDBiZjE4
NTVkOWYwHhcNMjUwNzI1MDUwMDM5WhcNMjUwNzI2MDUwMDM5WjAzMTEwLwYDVQQD
EygwY2MyODkxODY4MDA2MzAyOTQ1ODE2NTRlZjhiOGU3MWMyMDgzNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNItyHa3rzW48f8bbl4ajXv5GgoG
0jXUTwGErJhB9x28dCdyVwJiNQtTOpz15O5SbvRCpifQCT/KBaaaY3OUP3xzstaG
MPb4LgoNsUjtqYLmbuGWhNfLH1O78omAOkqiiPI1Ba7z61nk2vKjWwJ3gGOshCur
9W15SxUG7wfUd+uVcqq1SZW7AaDOa2QtGwse3DuDHkWl24z1EjtpFyxqZKjVusuy
J18CTn7jXb1wsrg+wbyOnZ/cZPoGMlue5J5QmDIqDpu2DqadZ969adAUPdAQbihW
0Dqghw/n17jKLfVjgRj4QyXfNTypP8TJe1RJrTaYNFge2qWJqi33rgmMSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzCiRhoAGMClFgWVO+LjnHCCDUhMB8GA1UdIwQY
MBaAFIpaCPQcNzAn4IG1wcqKgAvxhV2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUt
OGE1NmIwZjUwNzMxLzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUtOGE1NmIwZjUwNzMx
LzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkL51nGq
dN1ufz+PlKIzzGKRwbNpuQq/oaS14UoeDCPDyH38spa2jPOVG1nEVp8nGb/m6ISH
QqBfYcx/3gzO1e4g7wPNthfE8TWTPWQ9hVcks17uH/z+dnkYnrkz61cZ8zNhAVza
QSMeSToMNdrb86kgqGykyeOlCAP+tma+8Z1/HMV1vKtf8rHz6y4m8svcJwNXi82g
lQK9ED6alffsZeTzs6o66BbjF5Bpj/I+9ENB24tzISqoqi03v98HqpkKOKvs5Z43
7AHntnUjn8OBH87bDGZtmOf5KkamC4AmrT9crm9Qqelo6mnTXC5vLnjRdliG2ntf
BJj1IRqeP2n6EQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:32 2025 by rpki-client