Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: xaNA25rTnlg5v1+KeSYyeH0Mlza6EqoBToMYN3hsijc=
Subject key identifier: F8:86:A1:AD:7E:15:08:C7:24:EF:C3:80:F3:E3:6F:F3:80:7D:C6:FD
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 019A22F753698ECD3FD632A054F908A94A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 0161
Signing time: Mon 27 Oct 2025 00:00:25 +0000
Manifest this update: Mon 27 Oct 2025 00:00:25 +0000
Manifest next update: Tue 28 Oct 2025 00:00:25 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: lrmAf4vg6daSJd3YCHT05YjO2090Mjx3c+4ie096GWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:53:69:8e:cd:3f:d6:32:a0:54:f9:08:a9:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Oct 27 00:00:25 2025 GMT
Not After : Oct 28 00:00:25 2025 GMT
Subject: CN=f886a1ad7e1508c724efc380f3e36ff3807dc6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:42:aa:78:a9:80:15:38:86:15:ab:e0:57:
18:8a:b3:d0:94:22:0e:45:07:83:b5:01:65:79:d2:
98:09:a0:e5:b0:00:c4:9f:91:19:30:8d:27:50:88:
e3:85:91:08:f7:f1:0e:8f:71:08:a2:7a:8f:20:a9:
c9:01:d2:d8:97:79:d8:55:44:67:75:8a:dd:53:9d:
40:9b:2b:40:85:97:b2:c5:b1:3f:61:ae:89:7e:9e:
6a:43:2b:1b:ee:8d:7a:66:42:23:bf:0f:9a:f2:80:
c9:5f:f5:61:3d:99:5a:3a:b1:cb:1c:fc:d7:b2:d5:
8b:52:6a:39:98:52:0e:3b:bc:90:20:19:16:cc:5a:
ed:1b:ac:12:2b:ed:98:7a:62:62:7b:c4:7e:c1:78:
59:9d:a7:32:4c:e7:5a:0f:3c:d9:66:36:c7:14:d0:
03:89:f2:2b:1a:8f:ee:90:91:ce:3e:b8:76:91:dd:
c4:41:54:ef:62:58:65:6d:1b:64:22:40:36:3b:c0:
d0:a6:d0:e3:04:fa:c9:30:03:1c:c6:1a:81:29:82:
89:b6:c2:16:f1:5c:25:2d:9c:a4:d3:22:92:8b:cc:
e9:68:a7:20:de:34:9e:68:42:a1:82:67:a5:28:1b:
47:a4:a1:8a:ae:78:65:de:e1:d1:d3:81:c1:15:3c:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:A1:AD:7E:15:08:C7:24:EF:C3:80:F3:E3:6F:F3:80:7D:C6:FD
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:56:fb:3b:12:f2:cb:b5:9c:86:11:b6:42:72:04:f8:61:
76:21:e4:a0:85:dc:6e:57:93:7c:33:0e:77:31:b9:a6:49:1e:
8e:53:4e:19:e5:79:15:e1:76:e0:e0:41:ae:5c:de:95:6c:cd:
5c:76:46:a0:0e:0e:3f:d4:da:6a:a7:52:69:a7:16:67:6c:4f:
ec:9e:91:b5:e9:9c:13:bf:7d:c7:16:71:98:5d:96:3b:73:6f:
25:38:7a:a0:11:2a:05:d5:58:92:f7:9f:e6:57:88:73:92:c0:
ae:d9:06:65:64:cc:ff:df:da:f2:56:00:5f:06:10:62:39:17:
f7:e1:fd:33:17:7b:f5:45:72:81:b2:ad:47:d0:27:b9:ec:a1:
07:46:97:91:b4:40:3b:d8:f5:a8:5d:f1:e3:ab:c2:cf:56:c9:
b5:43:56:06:ab:a4:b6:d2:9c:0f:20:fb:be:9a:26:e2:d0:c5:
8f:b1:ea:ac:de:d8:0d:14:ec:54:33:72:00:1a:09:4e:bb:b3:
b5:04:bb:e6:ee:0a:59:f3:3f:7c:91:fa:89:35:fd:b7:c8:3b:
1e:5b:fd:e2:4f:bd:b6:c1:eb:4e:11:59:63:76:6e:5c:c8:bc:
3b:a9:28:28:6e:6b:72:55:b4:a6:e7:cc:a9:52:5c:dd:c3:ed:
94:ba:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:29:44 2025 by rpki-client