Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: H8ZxlAjket/clm5D/2pBCSmR2yVOQv8s4Mw9BgXeM9o=
Subject key identifier: E0:46:F9:BE:CF:3A:6F:2E:E0:A9:2B:B2:D4:7B:34:25:4B:C8:63:89
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019A49CE1930949916B723BBD4A5308B8E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0B9B
Signing time: Mon 03 Nov 2025 13:00:34 +0000
Manifest this update: Mon 03 Nov 2025 13:00:34 +0000
Manifest next update: Tue 04 Nov 2025 13:00:34 +0000
Files and hashes: 1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=)
2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=)
3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: zxWxJwg6UE2wBImB4prIN85AWgEl+r12I1u+DLXimww=)
4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:ce:19:30:94:99:16:b7:23:bb:d4:a5:30:8b:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Nov 3 13:00:34 2025 GMT
Not After : Nov 4 13:00:34 2025 GMT
Subject: CN=e046f9becf3a6f2ee0a92bb2d47b34254bc86389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:3b:29:4b:59:16:a6:64:a0:c5:5a:7e:d4:
b9:4f:6e:e5:ec:31:2f:a7:30:6f:60:16:ad:fb:4b:
b1:7d:8f:e8:53:40:7a:8c:15:fc:35:03:c7:d5:ef:
b9:77:2b:03:04:eb:53:e4:e4:78:4b:18:78:28:4c:
a1:8a:60:2c:74:cd:c1:b0:55:40:f0:7b:ce:88:9d:
3d:6d:79:07:cc:d1:87:00:1e:4b:16:24:2f:9f:40:
f0:75:8d:eb:ba:e8:88:b8:1f:d0:20:b0:ec:a8:de:
b9:87:4c:61:91:a9:8f:9e:0c:83:9d:b2:62:9c:0d:
5b:46:16:d3:46:ae:ee:fa:f0:86:cb:92:20:8c:ae:
55:bc:0d:07:5e:4e:e4:62:cf:1e:99:d0:58:8d:a4:
cf:64:08:29:a9:0e:c8:4b:67:62:71:00:e3:27:4a:
12:02:c1:a7:ad:84:47:45:66:f8:80:08:2a:a9:47:
01:0c:78:6d:e7:cd:62:3f:13:16:51:08:c2:8d:a1:
ae:29:4b:e1:75:05:d7:82:03:6a:58:66:6f:7f:b3:
b6:18:7e:86:92:8f:02:46:89:11:bd:ec:60:6b:04:
d4:f3:2c:26:d3:97:34:82:74:31:a7:16:db:a9:03:
a1:00:57:0e:87:db:ad:34:ed:7d:99:ab:0e:ae:00:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:F9:BE:CF:3A:6F:2E:E0:A9:2B:B2:D4:7B:34:25:4B:C8:63:89
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:55:c6:bc:0d:c4:87:ee:7c:e9:dd:89:75:ad:ce:38:8c:0c:
f9:a4:db:cb:9d:d8:a4:52:77:af:5f:f3:38:8f:4d:4a:8d:8a:
30:41:bc:b8:ee:63:c4:c3:66:b9:f9:55:0a:7d:7b:15:a7:5d:
0f:fe:69:35:30:49:27:0d:31:41:f6:e5:47:a8:94:95:b9:0d:
32:70:57:4a:65:b3:f9:e2:76:1b:b9:8f:94:ee:44:3b:7a:7d:
fa:24:c0:1b:34:d8:b2:c5:e1:b0:ad:45:b9:5e:eb:91:da:56:
33:10:bd:9a:92:ce:da:47:57:0a:5e:76:b0:fe:4c:ba:29:f7:
dc:e0:7e:e0:4b:01:75:21:92:50:56:4d:52:d7:fb:bd:fb:3f:
58:8a:c3:fd:f8:16:5f:29:d5:04:b0:23:ff:38:b3:2b:55:a4:
2b:36:19:6b:3f:37:01:58:31:3f:72:4f:0e:72:6f:b9:c4:57:
65:16:e8:cf:64:3a:3c:7e:25:b0:11:f5:df:4f:14:2f:6d:26:
0c:bf:45:4b:dc:7c:88:5f:50:92:dc:3e:6f:d3:d4:7f:11:00:
6b:e4:f4:b5:88:eb:01:09:20:96:66:6f:a5:4c:c8:62:ee:75:
3c:45:03:b8:9e:fc:ab:e6:20:21:33:b3:a3:11:d7:42:03:7f:
92:00:3d:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpJzhkwlJkWtyO71KUwi45MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjUxMTAzMTMwMDM0WhcNMjUxMTA0MTMwMDM0WjAzMTEwLwYDVQQD
EyhlMDQ2ZjliZWNmM2E2ZjJlZTBhOTJiYjJkNDdiMzQyNTRiYzg2Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Q7KUtZFqZkoMVaftS5T27l7DEv
pzBvYBat+0uxfY/oU0B6jBX8NQPH1e+5dysDBOtT5OR4Sxh4KEyhimAsdM3BsFVA
8HvOiJ09bXkHzNGHAB5LFiQvn0DwdY3ruuiIuB/QILDsqN65h0xhkamPngyDnbJi
nA1bRhbTRq7u+vCGy5IgjK5VvA0HXk7kYs8emdBYjaTPZAgpqQ7IS2dicQDjJ0oS
AsGnrYRHRWb4gAgqqUcBDHht581iPxMWUQjCjaGuKUvhdQXXggNqWGZvf7O2GH6G
ko8CRokRvexgawTU8ywm05c0gnQxpxbbqQOhAFcOh9utNO19masOrgBHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBG+b7POm8u4KkrstR7NCVLyGOJMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFXGvA3E
h+586d2Jda3OOIwM+aTby53YpFJ3r1/zOI9NSo2KMEG8uO5jxMNmuflVCn17Fadd
D/5pNTBJJw0xQfblR6iUlbkNMnBXSmWz+eJ2G7mPlO5EO3p9+iTAGzTYssXhsK1F
uV7rkdpWMxC9mpLO2kdXCl52sP5Muin33OB+4EsBdSGSUFZNUtf7vfs/WIrD/fgW
XynVBLAj/zizK1WkKzYZaz83AVgxP3JPDnJvucRXZRboz2Q6PH4lsBH1308UL20m
DL9FS9x8iF9Qktw+b9PUfxEAa+T0tYjrAQkglmZvpUzIYu51PEUDuJ78q+YgITOz
oxHXQgN/kgA9pw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 15:08:06 2025 by rpki-client