Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: r8Z5Ya5PGRNZ8HF0J4fACYQ1t8DFo7zEOSZIGDMdTec=
Subject key identifier: F1:9C:A5:CB:6C:8F:FA:23:E5:64:94:0B:74:70:52:87:77:9A:A8:70
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019A03A33655CB5702702D21C5D7E21DE743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0530
Signing time: Mon 20 Oct 2025 22:00:19 +0000
Manifest this update: Mon 20 Oct 2025 22:00:19 +0000
Manifest next update: Tue 21 Oct 2025 22:00:19 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: JLMcr7lUuzevnFR3HxXUdLucIEO9iHQX9awUy6+vEAw=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:36:55:cb:57:02:70:2d:21:c5:d7:e2:1d:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Oct 20 22:00:19 2025 GMT
Not After : Oct 21 22:00:19 2025 GMT
Subject: CN=f19ca5cb6c8ffa23e564940b74705287779aa870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:60:f8:82:fa:ab:6f:f8:61:9d:9d:40:10:
e5:66:75:34:c1:46:06:d7:a5:fc:52:d5:7d:a5:db:
e7:55:5a:32:a3:ed:a6:ee:15:80:6b:68:a5:9e:13:
f1:0b:20:54:cd:37:4b:ed:cf:d5:7c:bd:e4:3b:71:
fd:11:64:ff:87:1a:b7:12:db:85:15:12:c3:e1:0d:
2a:94:90:d7:62:0f:1a:55:a2:8e:a8:ed:a8:68:1a:
0e:fc:6a:3f:fb:00:dc:8d:fa:fa:c4:6c:7e:98:9e:
00:7d:c9:e3:b7:04:92:84:e5:b2:64:4f:18:ea:6b:
e8:f2:93:86:49:39:a9:a8:84:05:c3:d8:ae:5d:ee:
05:21:45:e2:82:62:4a:c8:47:b3:d3:3e:d4:9f:3b:
01:41:97:73:55:e6:29:4d:63:c3:7c:7f:59:eb:89:
bd:48:b6:cb:84:12:ad:0e:8c:9f:2f:84:c3:ad:36:
42:ab:7d:24:97:dd:66:da:fa:fd:19:85:71:0c:1c:
e7:94:02:ab:6f:38:91:52:fd:19:00:5e:33:c9:c3:
7a:75:cc:28:fd:e2:6e:dc:c6:b8:43:aa:8f:e2:b7:
f1:2e:35:0d:79:19:0b:2a:2a:16:ce:86:02:86:6b:
f6:2b:3a:3b:6a:73:93:4f:cb:7c:3f:5a:04:10:da:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:A5:CB:6C:8F:FA:23:E5:64:94:0B:74:70:52:87:77:9A:A8:70
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:5c:80:da:54:7a:43:6a:36:c4:4a:02:fc:2d:da:42:14:
62:f3:3e:db:1a:96:a4:24:ae:c0:59:0b:4c:22:5a:bb:50:fe:
4e:4b:75:23:7e:ed:a2:48:80:d3:0c:ee:ca:b8:b7:a0:91:d8:
6c:4e:57:2f:54:e7:56:fe:4f:10:26:8c:be:53:cf:0d:1d:98:
b8:ba:fa:2c:2d:f0:35:48:41:7e:5d:da:88:5c:9d:70:f8:f7:
16:10:cb:c3:4f:b0:7b:d2:6b:4d:f5:c1:7f:7d:e7:24:e1:80:
1b:b7:65:8b:f3:90:39:71:73:e8:9f:80:1a:e3:22:cd:bb:d0:
67:1c:b3:f1:ec:8e:5f:b6:89:d4:6d:f5:ad:67:a1:8a:94:8d:
17:ce:7f:3b:cd:d1:3f:d2:f0:30:03:94:1d:c1:1b:dd:2c:9e:
ec:a5:24:d6:19:f9:39:96:a8:75:5e:45:01:92:b4:7a:31:75:
fb:01:9a:3a:16:62:8c:86:f5:a0:a9:91:18:07:fb:e1:17:f7:
84:94:13:38:73:44:d5:c7:da:5b:01:35:86:e1:d3:d9:7b:e6:
ca:b0:a6:b4:fe:9c:f7:e7:d3:17:99:93:16:c1:d6:5a:9e:f0:
83:44:0e:51:10:2c:e6:3e:10:43:62:b4:27:e2:75:3d:b1:75:
ab:03:45:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDozZVy1cCcC0hxdfiHedDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm
NGZhODkwHhcNMjUxMDIwMjIwMDE5WhcNMjUxMDIxMjIwMDE5WjAzMTEwLwYDVQQD
EyhmMTljYTVjYjZjOGZmYTIzZTU2NDk0MGI3NDcwNTI4Nzc3OWFhODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5tg+IL6q2/4YZ2dQBDlZnU0wUYG
16X8UtV9pdvnVVoyo+2m7hWAa2ilnhPxCyBUzTdL7c/VfL3kO3H9EWT/hxq3EtuF
FRLD4Q0qlJDXYg8aVaKOqO2oaBoO/Go/+wDcjfr6xGx+mJ4AfcnjtwSShOWyZE8Y
6mvo8pOGSTmpqIQFw9iuXe4FIUXigmJKyEez0z7UnzsBQZdzVeYpTWPDfH9Z64m9
SLbLhBKtDoyfL4TDrTZCq30kl91m2vr9GYVxDBznlAKrbziRUv0ZAF4zycN6dcwo
/eJu3Ma4Q6qP4rfxLjUNeRkLKioWzoYChmv2Kzo7anOTT8t8P1oEENrzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGcpctsj/oj5WSUC3RwUod3mqhwMB8GA1UdIwQY
MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt
MWQ4MmFiMTVjNDE1LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1
LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMNcgNpU
ekNqNsRKAvwt2kIUYvM+2xqWpCSuwFkLTCJau1D+Tkt1I37tokiA0wzuyri3oJHY
bE5XL1TnVv5PECaMvlPPDR2YuLr6LC3wNUhBfl3aiFydcPj3FhDLw0+we9JrTfXB
f33nJOGAG7dli/OQOXFz6J+AGuMizbvQZxyz8eyOX7aJ1G31rWehipSNF85/O83R
P9LwMAOUHcEb3Sye7KUk1hn5OZaodV5FAZK0ejF1+wGaOhZijIb1oKmRGAf74Rf3
hJQTOHNE1cfaWwE1huHT2XvmyrCmtP6c9+fTF5mTFsHWWp7wg0QOURAs5j4QQ2K0
J+J1PbF1qwNFWA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:25:44 2025 by rpki-client