Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: Jz80HTCtzOfhBuMM/xWGT1c2kYIok5kJPlfUIhqclyU=
Subject key identifier: 87:25:58:EE:FC:2D:89:1F:84:64:DA:6F:0F:B2:37:60:CB:CA:FD:E0
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019A72CAB35579B0961A6B360023B470CF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 14C1
Signing time: Tue 11 Nov 2025 12:01:18 +0000
Manifest this update: Tue 11 Nov 2025 12:01:18 +0000
Manifest next update: Wed 12 Nov 2025 12:01:18 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: pvEbV7aYeE114sVBSXK2ZkX3LrtbsSP8mpiPkTyy0Jc=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b3:55:79:b0:96:1a:6b:36:00:23:b4:70:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Nov 11 12:01:18 2025 GMT
Not After : Nov 12 12:01:18 2025 GMT
Subject: CN=872558eefc2d891f8464da6f0fb23760cbcafde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:70:4e:57:c4:81:d8:bf:93:e4:ba:2b:f2:
1a:f7:05:9c:f1:42:78:39:cc:4e:ae:90:2a:7c:16:
04:ea:dd:17:39:5c:30:ba:37:3b:1d:47:aa:58:86:
3f:62:10:5f:a7:16:9f:fb:d3:b5:98:8b:59:36:ae:
7d:71:f9:69:7c:15:a6:c5:ad:55:4f:a1:1a:8b:6d:
a7:2f:82:3e:be:2a:4c:4a:41:54:7d:27:4c:d6:b8:
25:ea:2a:88:4e:31:dd:f1:ac:02:24:f5:2a:28:ba:
1e:34:fd:ca:13:11:ae:38:c4:b3:88:39:ae:c8:15:
ba:6b:7d:21:0f:53:db:fb:3a:4d:2b:47:88:7a:2e:
e9:9b:37:4e:fa:92:e8:69:66:d9:64:fe:72:f1:6f:
a6:57:06:ff:fd:a3:2f:bf:9b:34:9e:f1:5e:4d:22:
8d:4d:02:89:ff:7e:e3:28:09:6b:5c:89:86:df:01:
97:48:be:e4:0a:30:c1:61:b8:14:0f:dd:9b:69:2e:
67:8a:02:8f:c3:86:9c:24:61:0f:e3:d2:fc:a1:c2:
4c:d6:c8:ab:2d:36:29:7d:45:ae:f5:9f:92:12:24:
f4:d3:9b:61:8e:af:55:cc:ba:9c:2e:6c:89:72:cf:
b3:d3:49:4b:9f:f6:74:87:f8:28:a1:7c:6c:7a:b4:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:58:EE:FC:2D:89:1F:84:64:DA:6F:0F:B2:37:60:CB:CA:FD:E0
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:0d:bc:64:65:54:de:2e:48:93:5d:63:d7:d3:4e:bd:38:
f6:bc:dd:42:70:a5:91:22:07:4c:de:34:70:f9:87:73:c7:93:
86:55:a5:ec:55:b1:32:87:cb:f5:68:52:37:16:41:3f:fe:f2:
25:2f:c1:dd:9b:de:4d:fb:12:c2:c6:6f:ec:79:c2:4d:8a:cd:
3c:5e:56:fe:1c:aa:11:8b:27:bb:5e:93:45:80:24:8a:9f:cf:
b9:a8:39:00:9f:9f:64:c6:80:c8:5e:98:71:b6:b7:dd:f1:e1:
2f:33:10:29:47:2d:4e:6d:93:ed:7d:6a:b0:b5:11:9c:27:a4:
96:0b:85:3f:aa:6f:3f:bb:70:99:da:21:b4:c0:57:00:7d:3e:
68:ab:1d:fd:54:4b:06:c1:ef:fa:24:a6:41:c6:2a:ad:f9:ef:
8f:f9:70:1c:d3:6d:9f:af:81:5f:18:bd:e1:d3:4d:4a:6a:1d:
55:05:1b:2f:a3:92:26:b9:48:c2:f7:45:7d:d4:b0:05:46:e7:
05:f9:08:b0:db:6e:55:2c:b1:81:f0:cd:94:8c:f3:6f:40:bd:
15:0d:d4:b5:97:c3:f0:1d:f2:d6:f9:f5:ae:62:42:62:de:b6:
3a:89:d1:dd:3e:5e:8d:f1:45:32:3c:ae:8c:61:20:2e:cc:0f:
c0:94:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:42 2025 by rpki-client