Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: D/mVZDRzNwJU9bggiGW/F6E9jmZw7iV7X6YLF3Z9wpQ=
Subject key identifier: 18:C4:ED:75:58:1A:25:8C:FA:BD:DA:99:E1:60:64:DB:F9:A8:55:E8
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 019A0FA7C3E8E41EFF363297B48575E0FD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 13C7
Signing time: Thu 23 Oct 2025 06:00:44 +0000
Manifest this update: Thu 23 Oct 2025 06:00:44 +0000
Manifest next update: Fri 24 Oct 2025 06:00:44 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: zwhr670H6o0WIpjOkJxeV63MErd2Jd4BxTDFNq9C/0g=)
2: 8n8zo5rtakZ1whW9-uc5uUrGQWs.roa (hash: aqUj+0Ybl2fHs4Ve+OniwJ/DSH+hH1A2s4EAgpbtDzc=)
3: gvC7ao5sxrnrTpKAU7Z6Kxl3n4w.roa (hash: 6Il2DCAKJW2GDXUMq30h38NoaFgqqtmGFfPCqtO+DUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:c3:e8:e4:1e:ff:36:32:97:b4:85:75:e0:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Oct 23 06:00:44 2025 GMT
Not After : Oct 24 06:00:44 2025 GMT
Subject: CN=18c4ed75581a258cfabdda99e16064dbf9a855e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:4b:f3:d4:2d:6b:16:91:57:f7:e7:64:23:
40:ad:9b:21:41:b5:0b:94:73:bc:7f:2a:7e:1e:5b:
89:81:9b:1f:5d:0f:da:6e:7b:f7:71:29:f6:49:46:
f1:a0:09:db:ed:b7:f3:97:6c:49:fa:b7:34:39:74:
a2:f1:30:ef:ad:ed:4c:7e:73:b3:4f:88:5e:e8:3a:
a5:bd:93:cb:5c:5c:ca:6f:9f:ea:fe:f6:d6:b5:f6:
28:e0:9c:4b:f9:c3:21:a2:d6:36:d2:5a:d1:d0:9c:
3f:22:eb:36:d8:1d:81:c9:3e:b9:33:4c:1c:a9:5c:
03:a6:f4:30:e2:8e:50:29:e8:50:1b:88:36:f5:95:
de:93:59:8a:49:46:c7:af:42:c4:90:8e:92:ab:d4:
a5:fb:1a:02:45:cb:0b:a9:68:4b:4d:36:1b:c5:7c:
55:54:39:7d:78:6a:3e:f7:67:3f:e7:39:7f:f0:92:
73:1a:a4:04:77:f0:09:cc:a3:ab:c9:d8:93:46:2e:
a5:82:cc:a4:50:2e:bf:c9:10:18:db:d0:b1:30:ca:
13:71:fe:3a:7b:e9:14:be:2c:df:2c:cc:08:b4:fa:
2b:3d:1f:94:e0:c2:fb:06:42:6c:83:5b:92:4c:3d:
59:c9:69:c4:0e:22:a8:c9:92:de:31:3e:59:cd:73:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:ED:75:58:1A:25:8C:FA:BD:DA:99:E1:60:64:DB:F9:A8:55:E8
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:72:12:85:16:bb:89:5b:49:5b:64:84:da:e1:e6:25:6b:
25:c8:b6:ad:00:b1:51:5b:1e:ff:7d:66:32:28:48:36:8e:42:
e9:65:87:19:f0:3e:34:28:92:d8:59:bb:58:6f:3a:66:b9:a1:
53:1e:ab:bf:4b:64:b6:04:87:37:31:5e:60:6d:38:3c:56:f6:
3d:f2:f5:8a:53:2b:16:02:5c:f2:df:93:de:9e:27:63:c0:6d:
ec:bb:58:3a:1d:0d:db:58:21:36:10:14:86:2c:54:ae:a1:70:
c3:38:e5:a3:3d:7f:16:3a:a9:74:a9:97:63:52:f8:4b:3c:19:
09:67:dd:81:c4:42:4f:b2:23:1a:70:eb:bd:46:97:a5:87:59:
6b:32:5d:81:6f:98:a5:aa:2e:e0:c7:76:32:72:95:0c:76:3a:
c6:f4:69:9e:70:89:0e:3a:b2:55:59:1e:b0:d9:c0:a1:a9:01:
a3:d2:3c:d5:7f:2e:25:c5:a0:e5:be:41:a9:f2:cd:54:dd:75:
79:c5:4b:89:d7:f9:61:18:ce:42:d7:52:60:2a:85:49:c8:85:
fb:60:8d:f1:6f:06:68:a2:1e:3d:32:d9:78:c3:fa:84:85:9e:
c8:07:3a:89:60:8e:f0:6a:6f:a9:fc:8a:69:7c:c1:e2:02:06:
d3:ab:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:50:19 2025 by rpki-client