Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: eIwNOVnUwZzgihS3kC6sKBsFVn5SPh3K1YKzHUZNelo=
Subject key identifier: B6:BE:41:9B:24:90:88:43:42:00:21:48:F2:70:E0:22:9F:46:0D:F2
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 019A71EE9DFB32B28DE7B590DD59E72CD263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0C77
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: TDDI+AeBPbjrpyS+7zIUV+y7DzFXU1sH73pPYk8kKDU=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9d:fb:32:b2:8d:e7:b5:90:dd:59:e7:2c:d2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=b6be419b2490884342002148f270e0229f460df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:16:e0:5d:af:93:83:82:2b:7a:eb:d6:83:
56:55:a9:d0:15:2c:33:31:10:60:c6:98:ef:5d:09:
72:0a:87:9e:53:2b:01:e2:8e:07:27:b4:4c:46:cf:
39:94:b7:6f:5c:74:3e:b5:a4:a1:8e:f8:d6:eb:0a:
a3:1e:91:ac:9b:4a:b5:f1:5e:35:4c:fb:62:34:8c:
44:3b:7c:31:e0:1e:4b:5a:c0:73:66:6f:46:76:30:
23:a9:6e:7e:49:ab:2c:df:ac:ce:61:79:8f:8e:dd:
8f:ae:bc:c3:a8:c2:52:3b:ee:97:9a:6d:34:4f:0f:
56:af:2c:4d:58:e0:d9:16:c0:3b:1e:e6:cd:e4:f4:
70:13:88:23:61:33:b3:5a:9b:10:73:f0:d0:78:92:
c3:f8:61:ca:8a:46:62:1f:aa:b9:ed:f1:59:23:74:
c6:00:57:ba:dd:10:42:ef:df:77:35:e0:f5:15:3b:
df:b9:48:6f:ec:ea:48:86:ca:3c:9e:71:50:db:8d:
ff:db:5c:f6:4a:0e:f9:07:98:ea:dc:93:13:f5:59:
7f:04:1d:d2:70:bc:13:24:b0:60:13:ad:e9:eb:a7:
86:22:9f:11:3a:f5:67:e9:bf:32:7f:9a:fc:df:1e:
f9:5c:da:88:9f:7c:d0:e2:8d:80:e2:4e:28:59:b7:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BE:41:9B:24:90:88:43:42:00:21:48:F2:70:E0:22:9F:46:0D:F2
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:77:38:b3:96:80:7c:a8:7e:96:cb:b6:43:0b:70:1d:3b:
9c:0d:a8:60:4e:fb:96:9a:ec:52:e9:cf:ba:b3:ed:97:a6:85:
a5:e6:af:a2:3e:44:97:da:60:d9:23:4c:60:16:0c:f4:de:6a:
b7:0b:36:de:3f:01:1d:97:db:51:22:4d:fd:82:f1:9d:2e:f1:
98:a1:a3:32:85:89:f4:8e:ff:3c:92:1f:34:06:89:76:10:58:
aa:fd:ce:6c:dd:f0:e7:93:1f:f1:64:18:85:c0:6f:b5:ea:c0:
5b:f6:ea:18:eb:c6:40:6d:3f:43:52:11:bc:04:8d:e4:4d:9f:
d0:68:bb:d4:84:d1:93:6f:fe:2d:8f:ec:20:6a:08:32:9e:19:
72:8d:51:93:1c:19:61:d7:35:e3:95:42:21:d7:3c:28:21:c7:
f1:95:d8:57:56:f8:66:2c:8b:d6:fa:c9:f4:63:0b:9f:8b:b8:
4e:8d:9b:4a:53:fd:68:4d:37:20:8b:68:4a:4f:51:76:4f:25:
b7:ba:51:80:69:b8:ac:6a:f5:af:d5:58:db:fe:7b:eb:10:c2:
4a:2f:87:0a:62:98:03:66:c6:84:cb:ef:db:60:dd:99:d4:50:
d5:52:88:46:cf:f8:e8:4f:0c:8c:36:fa:e1:1c:5c:dd:0b:79:
71:fe:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client