Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: t60OdJt/9EQ19GqsI1TEF3fa6p1XQnD5mJ884erEgqQ=
Subject key identifier: A2:BF:E3:CF:43:FD:30:49:AC:2B:60:10:11:04:F5:2C:9C:AB:02:47
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019A73A6521F8308181CC078CEA9170246B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 16:01:11 +0000
Manifest this update: Tue 11 Nov 2025 16:01:11 +0000
Manifest next update: Wed 12 Nov 2025 16:01:11 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: ojZfK29/1hFeCacxcnxUbPdghEu9LNGnh/6kYH5ng0M=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:52:1f:83:08:18:1c:c0:78:ce:a9:17:02:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Nov 11 16:01:11 2025 GMT
Not After : Nov 12 16:01:11 2025 GMT
Subject: CN=a2bfe3cf43fd3049ac2b60101104f52c9cab0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:6f:3d:d9:18:30:b2:3a:a2:79:b8:04:0b:
15:cc:72:d0:14:cd:66:71:58:d9:34:0e:ed:01:a3:
02:33:95:d7:15:63:e1:eb:b7:8b:8d:d5:84:b0:e4:
21:7b:48:22:2a:cf:43:ba:bf:17:d9:2f:65:4a:04:
a2:0b:20:24:a6:39:fd:86:e8:66:4a:03:23:45:b8:
19:e3:2c:24:4c:5c:1c:8a:da:43:9d:f0:82:c3:b4:
56:db:61:cf:23:d0:c3:02:8b:64:c1:a9:ae:dd:00:
32:a2:38:4d:cb:42:a3:84:ea:64:21:b9:5d:21:de:
d3:ab:7e:48:d4:c3:81:82:1f:18:e1:3a:03:51:4f:
47:02:ac:aa:64:62:71:07:51:ec:1c:87:70:06:f8:
17:de:71:77:d3:28:d3:0a:b4:6a:56:22:64:9e:13:
1b:2d:d9:39:6d:97:5a:41:c1:90:3a:e9:5d:cc:3b:
4f:c3:fa:dc:ed:8e:fd:77:3f:46:94:4c:5e:b8:a8:
79:8d:f2:68:e4:34:c9:09:7b:ce:a6:f6:40:e2:33:
d6:d2:e6:fc:cf:fb:3b:e5:ca:e7:07:e0:e1:74:6a:
82:85:05:3c:97:e7:a3:a1:13:56:6a:75:dc:90:7a:
be:d3:80:57:87:da:08:ec:bb:ac:b9:ff:6c:3a:17:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:E3:CF:43:FD:30:49:AC:2B:60:10:11:04:F5:2C:9C:AB:02:47
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:1f:f9:66:d0:9b:32:40:d2:3d:bc:a3:45:cc:57:b9:b3:
d8:a2:0f:8e:6c:74:5c:19:b1:74:4a:b7:d5:ba:4c:74:b4:0b:
21:cd:0c:37:45:00:31:40:44:91:fd:9d:45:19:aa:10:0a:1c:
87:d5:fe:23:90:95:08:d6:b5:74:6a:e8:7e:44:1e:d6:9d:f5:
c5:0a:cf:ce:ea:4d:8d:3d:b6:b2:ee:dd:48:aa:d9:bb:54:44:
ab:90:87:f1:52:a5:37:21:a9:91:af:a8:30:33:d7:2b:9e:53:
02:1b:0f:7a:bd:55:11:ec:fe:8d:f5:d3:cc:85:3b:18:a6:04:
68:ac:05:a0:94:0b:7d:c8:95:2d:a5:7d:e7:c5:50:8a:30:4a:
ed:f5:d7:f4:5a:5a:09:94:9d:cd:f1:8e:4d:55:9b:5e:0e:60:
d3:f0:5f:dd:a5:ac:13:ab:da:32:82:26:07:f2:1e:c1:4b:2d:
39:44:fa:21:e0:65:7d:d0:a3:1e:9a:ad:02:16:34:0f:02:69:
45:66:69:f8:ae:0d:93:65:4b:3f:3e:d8:f3:18:0b:d5:73:52:
0e:9b:63:26:1c:ac:bf:18:38:a0:b7:82:e3:a9:44:30:07:4d:
9e:f9:29:85:a1:4d:dd:f9:b2:50:ec:86:06:57:81:fe:14:99:
43:25:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:14 2025 by rpki-client