Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: A+7dynrt/j5BlP3b2nc3C/tPG2KzlqwHQ4QShYsbnwA=
Subject key identifier: CF:2E:6E:64:75:2D:6B:AF:23:6B:DF:62:BE:9E:C0:11:6F:E9:D4:9E
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019A72938998F5FD0AA1F3E408C47F5A3B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0F20
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: mvsuH46cLWLwfVyGzGw8HsPIaUkNqoGfmOz0vFhXT/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:89:98:f5:fd:0a:a1:f3:e4:08:c4:7f:5a:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=cf2e6e64752d6baf236bdf62be9ec0116fe9d49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:20:61:8e:65:a5:64:be:5a:55:de:b8:fe:
1a:bc:2a:b3:e0:ca:36:2b:e4:ca:fa:85:fe:84:2b:
4a:a6:4d:6d:0f:bc:ae:75:61:c8:ee:7b:06:cb:cc:
ad:14:1d:0b:44:10:9b:59:f4:92:09:d1:47:a9:46:
17:60:a2:fd:d3:61:8b:15:0c:3d:72:e1:6b:a3:95:
a5:76:9a:cf:1a:a2:2b:0d:ff:c2:2f:d3:18:21:1a:
09:b4:25:50:c8:db:83:74:d2:5f:2b:90:71:c8:5e:
3c:26:af:b8:7f:c6:04:70:2c:53:e4:2a:7f:41:35:
27:bd:4e:57:ec:50:6e:69:11:2f:61:8c:6e:14:40:
90:cb:ad:2d:b2:82:18:1f:d7:b5:f0:2a:3f:7b:bb:
5f:4b:9d:0c:a8:24:fd:21:1a:78:7f:e1:97:08:aa:
e8:c5:6b:21:5c:8b:4e:06:d2:01:ea:f9:9d:da:24:
3e:b3:6e:53:b4:fc:e3:4e:eb:a5:2c:ee:b9:35:fe:
41:22:f2:fa:eb:d6:ad:a6:c5:5f:20:37:fe:01:5a:
bc:d3:01:17:f0:24:53:75:1f:46:c9:1d:26:ad:71:
23:a1:83:73:51:21:0c:a6:24:fd:cf:a2:e2:9f:e9:
22:fa:30:f4:d0:57:87:17:7e:23:7c:1f:3a:c5:d8:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:6E:64:75:2D:6B:AF:23:6B:DF:62:BE:9E:C0:11:6F:E9:D4:9E
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:94:c2:05:45:fc:32:91:87:c2:60:67:d3:e2:35:de:2c:
63:5c:79:04:88:b7:f8:06:47:b0:fc:43:b7:42:f0:fd:e3:0d:
1b:81:9e:0e:a3:f2:84:6f:53:8c:00:3e:a1:f4:07:ff:26:8a:
c8:77:fd:ef:a7:0a:47:a9:f1:fd:6f:7a:ca:77:45:e7:e7:1c:
27:a6:3c:36:23:97:ee:4c:52:e7:ab:cb:d6:e1:2d:a4:7c:22:
b6:1a:2b:98:22:c8:c7:a2:bd:9b:09:c2:94:fe:27:ce:ff:ee:
8b:cb:f3:00:d8:76:3f:26:63:a4:24:d0:f2:66:09:be:f3:b8:
89:85:14:09:8e:b8:0c:90:81:de:3c:0a:d8:d4:b2:01:07:5f:
07:5d:a2:9a:c1:57:51:27:3f:51:4b:c4:a2:76:2a:c9:24:72:
b8:9f:70:60:19:bb:3a:be:05:36:af:62:ca:6b:ba:26:96:3d:
b5:82:ea:ec:a9:07:a9:46:47:b6:b6:b4:b6:39:0a:84:7f:38:
9c:f0:b5:6e:ff:23:d3:2e:f0:24:1b:b5:4e:f8:8d:4b:ee:52:
e4:73:0a:04:22:5e:18:b5:66:66:ce:64:bb:5e:a6:a7:10:ad:
e9:e6:c0:30:6b:60:e1:54:ee:10:34:45:71:9c:78:f6:d2:2f:
a9:b5:84:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4mY9f0KofPkCMR/WjuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWQ0NWE0YzE3M2FhZWIyMzZjYmVhMDlkMmU4YWZjODA0
NTE2OTUwHhcNMjUxMTExMTEwMTAyWhcNMjUxMTEyMTEwMTAyWjAzMTEwLwYDVQQD
EyhjZjJlNmU2NDc1MmQ2YmFmMjM2YmRmNjJiZTllYzAxMTZmZTlkNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9YgYY5lpWS+WlXeuP4avCqz4Mo2
K+TK+oX+hCtKpk1tD7yudWHI7nsGy8ytFB0LRBCbWfSSCdFHqUYXYKL902GLFQw9
cuFro5WldprPGqIrDf/CL9MYIRoJtCVQyNuDdNJfK5BxyF48Jq+4f8YEcCxT5Cp/
QTUnvU5X7FBuaREvYYxuFECQy60tsoIYH9e18Co/e7tfS50MqCT9IRp4f+GXCKro
xWshXItOBtIB6vmd2iQ+s25TtPzjTuulLO65Nf5BIvL669atpsVfIDf+AVq80wEX
8CRTdR9GyR0mrXEjoYNzUSEMpiT9z6Lin+ki+jD00FeHF34jfB86xdiWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8ubmR1LWuvI2vfYr6ewBFv6dSeMB8GA1UdIwQY
MBaAFIpdRaTBc6rrI2y+oJ0uivyARRaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYt
ZTA2YjIwNGFjNDk0LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYtZTA2YjIwNGFjNDk0
LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLCUwgVF
/DKRh8JgZ9PiNd4sY1x5BIi3+AZHsPxDt0Lw/eMNG4GeDqPyhG9TjAA+ofQH/yaK
yHf976cKR6nx/W96yndF5+ccJ6Y8NiOX7kxS56vL1uEtpHwithormCLIx6K9mwnC
lP4nzv/ui8vzANh2PyZjpCTQ8mYJvvO4iYUUCY64DJCB3jwK2NSyAQdfB12imsFX
USc/UUvEonYqySRyuJ9wYBm7Or4FNq9iymu6JpY9tYLq7KkHqUZHtra0tjkKhH84
nPC1bv8j0y7wJBu1TviNS+5S5HMKBCJeGLVmZs5ku16mpxCt6ebAMGtg4VTuEDRF
cZx49tIvqbWEQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:04 2025 by rpki-client