Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: hSvwlIQYFrFgs9XQJi8ZhVBt5q8n6VAUL3B2LMMwwC4=
Subject key identifier: 5B:3E:EA:DC:10:BE:D3:50:E2:B4:D8:D9:4C:35:51:1C:62:B8:F1:D8
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 019A725CF833F63E2A2C5C2358B744FAD574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 023D
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: 3UxMnz/sVKFwFDm2tLhrmddLyyEslR5ZRJrOaxF33fI=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f8:33:f6:3e:2a:2c:5c:23:58:b7:44:fa:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=5b3eeadc10bed350e2b4d8d94c35511c62b8f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:5a:e9:23:83:f7:3b:2d:db:93:a4:c8:2c:
f4:c4:2e:e1:55:6c:6a:23:d0:a1:1d:2c:c0:93:75:
17:3a:c8:ea:7b:71:5a:75:62:61:74:51:1c:97:03:
fc:a2:a6:46:bc:7f:f1:3a:f1:b4:b1:e4:85:9e:06:
97:13:bf:a0:60:2b:29:68:05:55:81:25:91:f3:73:
c3:e3:9e:bd:0d:b8:6c:4a:ce:b7:8d:42:d9:32:c9:
51:4d:2a:3b:56:8e:16:c3:c2:f3:4d:83:8f:46:57:
a5:b9:60:ab:0e:2c:3b:be:62:a4:a7:ff:e9:89:2d:
9b:91:fb:f8:6f:64:7a:84:07:57:67:70:9e:09:8f:
a8:ed:7c:25:8c:8e:92:10:39:bb:73:ec:40:fb:ca:
36:e9:96:b0:b7:06:2e:53:2e:40:4f:10:9b:5d:19:
39:86:ad:e4:27:fc:6e:9f:7f:5a:0e:36:90:7e:e6:
de:5e:c2:b1:a9:c4:2b:1e:5d:92:1c:93:5e:39:36:
d7:e1:d5:71:c5:90:2e:e9:24:91:08:5e:f6:9d:c6:
fb:85:4b:b4:5a:78:53:52:b8:28:44:f7:44:c4:5d:
9d:9b:66:d0:e7:06:83:31:33:d3:ce:bf:c8:06:0e:
f7:ad:1b:66:ef:a9:8e:8e:9c:1a:16:ef:02:0e:1e:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:EA:DC:10:BE:D3:50:E2:B4:D8:D9:4C:35:51:1C:62:B8:F1:D8
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:88:80:e0:37:a4:d6:db:a8:c6:98:12:33:5a:b9:10:bd:
46:f2:41:11:bd:13:ce:9a:74:8e:b9:5c:23:bb:c2:cc:39:a9:
96:29:6d:f3:1c:48:1b:4b:45:98:a8:49:61:9e:f3:d7:25:ed:
2f:19:2c:3f:89:9b:72:29:52:18:ea:6c:0f:ff:b5:b6:b6:f1:
3a:50:ff:91:70:41:ee:17:aa:89:b3:28:e9:32:61:fa:e1:bf:
e9:0d:6f:bf:6c:4a:22:14:93:e2:56:63:e5:8c:ed:22:9c:1b:
6d:7f:fc:a2:1f:4f:fd:09:38:d4:8c:65:38:58:3a:c4:e0:28:
8c:88:7b:8e:74:c0:98:9a:2a:e6:b4:50:2c:a3:85:3e:89:c3:
10:8e:9c:44:0a:3e:78:ea:c0:7a:63:07:ae:5a:c4:0f:53:d8:
c8:bb:67:5e:c6:a8:b8:bc:23:a6:5a:e7:cf:51:7a:e0:50:ed:
cb:b2:3a:53:23:68:ba:1d:0c:33:68:60:b8:d9:67:06:4d:62:
0e:56:a2:0b:fe:86:a3:49:f5:6e:bb:aa:7c:af:fa:e5:cc:db:
97:51:54:73:f9:39:bb:42:78:fa:71:1b:62:29:63:75:0d:2f:
63:6a:e0:a6:c0:d9:64:23:f8:b1:42:6b:a6:e8:c2:ec:37:0b:
53:a0:e1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXPgz9j4qLFwjWLdE+tV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjQ4NzM4NDJhOTA0ZjFhNjk3MjAxMzkzZTdiYTYyNjg0
MmY0YWYwHhcNMjUxMTExMTAwMTI2WhcNMjUxMTEyMTAwMTI2WjAzMTEwLwYDVQQD
Eyg1YjNlZWFkYzEwYmVkMzUwZTJiNGQ4ZDk0YzM1NTExYzYyYjhmMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pxa6SOD9zst25OkyCz0xC7hVWxq
I9ChHSzAk3UXOsjqe3FadWJhdFEclwP8oqZGvH/xOvG0seSFngaXE7+gYCspaAVV
gSWR83PD4569DbhsSs63jULZMslRTSo7Vo4Ww8LzTYOPRleluWCrDiw7vmKkp//p
iS2bkfv4b2R6hAdXZ3CeCY+o7XwljI6SEDm7c+xA+8o26ZawtwYuUy5ATxCbXRk5
hq3kJ/xun39aDjaQfubeXsKxqcQrHl2SHJNeOTbX4dVxxZAu6SSRCF72ncb7hUu0
WnhTUrgoRPdExF2dm2bQ5waDMTPTzr/IBg73rRtm76mOjpwaFu8CDh65MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs+6twQvtNQ4rTY2Uw1URxiuPHYMB8GA1UdIwQY
MBaAFCC0hzhCqQTxppcgE5PnumJoQvSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMt
ZWY1YmE1NGFkYjU5LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMtZWY1YmE1NGFkYjU5
LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSWIgOA3
pNbbqMaYEjNauRC9RvJBEb0Tzpp0jrlcI7vCzDmplilt8xxIG0tFmKhJYZ7z1yXt
LxksP4mbcilSGOpsD/+1trbxOlD/kXBB7heqibMo6TJh+uG/6Q1vv2xKIhST4lZj
5YztIpwbbX/8oh9P/Qk41IxlOFg6xOAojIh7jnTAmJoq5rRQLKOFPonDEI6cRAo+
eOrAemMHrlrED1PYyLtnXsaouLwjplrnz1F64FDty7I6UyNouh0MM2hguNlnBk1i
DlaiC/6Go0n1bruqfK/65czbl1FUc/k5u0J4+nEbYiljdQ0vY2rgpsDZZCP4sUJr
pujC7DcLU6DhIw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:23 2025 by rpki-client