Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: Zl39jOYb+IUbqXOEoHf2a1RtJEPomSPdObsHlwHxNdk=
Subject key identifier: 4A:80:A6:D6:87:66:D0:DF:61:89:07:1C:5B:70:07:47:A6:0B:38:1E
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019A533F06E8F89C031A4E4DF13A2A3FC323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0643
Signing time: Wed 05 Nov 2025 09:00:30 +0000
Manifest this update: Wed 05 Nov 2025 09:00:30 +0000
Manifest next update: Thu 06 Nov 2025 09:00:30 +0000
Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: nZ4YcefCoYbOHze13wog6OIpAM91cqX80quAxW9JHmM=)
2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:06:e8:f8:9c:03:1a:4e:4d:f1:3a:2a:3f:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Nov 5 09:00:30 2025 GMT
Not After : Nov 6 09:00:30 2025 GMT
Subject: CN=4a80a6d68766d0df6189071c5b700747a60b381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:09:cf:bf:5c:4d:89:10:c9:ac:e7:8f:4c:
80:73:42:24:71:e3:1b:d1:3b:fb:71:c3:5b:b5:ce:
2e:0b:9e:4a:c7:6b:4a:d9:9b:22:5f:56:b8:72:f6:
c0:7e:9d:4f:a2:12:ba:fc:9b:ec:b8:41:18:e9:cb:
5a:06:3e:80:23:f8:81:24:cb:fa:2a:5d:29:e7:74:
64:3c:ff:90:0f:55:1a:9d:2b:f1:c4:f4:54:f4:75:
f5:7f:b4:b9:33:65:08:e3:ad:eb:7d:14:4d:2a:5a:
b0:04:95:7c:65:6f:9a:81:3d:cf:94:72:b0:85:a5:
12:ee:d9:6b:95:30:5b:c8:fc:c2:bc:46:8e:14:76:
9f:86:cf:9a:1e:b0:01:09:47:57:ff:62:93:e8:1f:
32:a9:91:18:4b:02:cb:21:4a:40:9f:45:c4:00:24:
b2:9d:3b:39:b3:de:24:db:10:a3:72:74:20:07:2b:
8a:7d:9e:1b:0b:7e:14:c8:48:8e:9c:c0:a9:05:38:
bc:ee:2a:50:57:cb:71:ec:f3:69:00:40:39:54:45:
bd:1c:0c:17:81:af:23:39:c3:3e:b9:da:30:fb:0f:
79:bb:81:fc:a9:a7:20:84:e3:1c:79:9f:32:29:97:
38:cb:99:e3:ac:6b:05:af:15:c4:fd:da:ca:9d:16:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:A6:D6:87:66:D0:DF:61:89:07:1C:5B:70:07:47:A6:0B:38:1E
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d3:15:5a:7b:91:ad:fb:9e:2d:f5:48:01:8a:7d:be:f9:b5:
52:62:ce:ac:d4:02:20:ac:72:4d:5d:50:aa:9d:2e:53:38:cc:
b5:4e:14:19:c8:15:9a:a4:92:3d:b5:4f:dc:86:e9:33:12:0a:
a4:8b:cd:ce:d1:9e:97:05:c4:48:3c:a2:bc:ad:6a:de:47:8f:
3a:41:c0:6f:cf:fd:5a:0d:89:e7:54:b3:54:b7:5f:f2:b3:d4:
bd:5a:f0:b4:61:8b:73:6e:a1:e6:4f:b3:c2:61:b9:3c:00:7a:
5f:3b:09:98:c9:43:78:d4:66:1f:e8:65:8e:ce:2b:39:c7:0c:
0a:7b:73:de:67:f8:1e:53:7f:a1:b2:39:16:d1:4e:2c:f5:e5:
79:db:5f:6c:45:b6:3f:c1:19:f7:03:f0:d7:24:dc:b6:d7:50:
49:3d:09:b8:94:5c:cf:8e:73:8d:15:33:d7:58:b0:55:06:b0:
41:92:45:c7:9d:52:09:1b:80:2c:5f:a2:5c:82:31:64:ae:90:
0e:dd:a1:63:c9:25:57:cb:71:43:22:7c:73:7f:d3:45:4b:26:
3f:e9:6a:46:34:61:53:1d:af:71:a1:4d:10:b0:ac:1b:50:8b:
6d:6d:b5:02:a9:9c:96:eb:0a:1b:f3:b4:76:e6:84:d2:6d:b9:
27:78:0b:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPwbo+JwDGk5N8ToqP8MjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjUxMTA1MDkwMDMwWhcNMjUxMTA2MDkwMDMwWjAzMTEwLwYDVQQD
Eyg0YTgwYTZkNjg3NjZkMGRmNjE4OTA3MWM1YjcwMDc0N2E2MGIzODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTkJz79cTYkQyaznj0yAc0IkceMb
0Tv7ccNbtc4uC55Kx2tK2ZsiX1a4cvbAfp1PohK6/JvsuEEY6ctaBj6AI/iBJMv6
Kl0p53RkPP+QD1UanSvxxPRU9HX1f7S5M2UI463rfRRNKlqwBJV8ZW+agT3PlHKw
haUS7tlrlTBbyPzCvEaOFHafhs+aHrABCUdX/2KT6B8yqZEYSwLLIUpAn0XEACSy
nTs5s94k2xCjcnQgByuKfZ4bC34UyEiOnMCpBTi87ipQV8tx7PNpAEA5VEW9HAwX
ga8jOcM+udow+w95u4H8qacghOMceZ8yKZc4y5njrGsFrxXE/drKnRZKBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqAptaHZtDfYYkHHFtwB0emCzgeMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstMVWnuR
rfueLfVIAYp9vvm1UmLOrNQCIKxyTV1Qqp0uUzjMtU4UGcgVmqSSPbVP3IbpMxIK
pIvNztGelwXESDyivK1q3kePOkHAb8/9Wg2J51SzVLdf8rPUvVrwtGGLc26h5k+z
wmG5PAB6XzsJmMlDeNRmH+hljs4rOccMCntz3mf4HlN/obI5FtFOLPXledtfbEW2
P8EZ9wPw1yTcttdQST0JuJRcz45zjRUz11iwVQawQZJFx51SCRuALF+iXIIxZK6Q
Dt2hY8klV8txQyJ8c3/TRUsmP+lqRjRhUx2vcaFNELCsG1CLbW21AqmclusKG/O0
duaE0m25J3gLaw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:57 2025 by rpki-client