Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: uJKZypPfAhExFj0y541qdc6t6OKf4t0+RXxLYqZo/Ow=
Subject key identifier: B9:33:4C:82:D8:D9:B6:6C:08:72:1D:2F:0F:AE:E7:87:6D:EB:0B:87
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019A21AE0781CACA36C3CE147514EADA80EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 93
Signing time: Sun 26 Oct 2025 18:00:44 +0000
Manifest this update: Sun 26 Oct 2025 18:00:44 +0000
Manifest next update: Mon 27 Oct 2025 18:00:44 +0000
Files and hashes: 1: 2VMJ9WQikYFEDlDpOKmAjBWdjSA.roa (hash: KpcckScBja4+tcIOvGVtG8MssUZtxxse3N+i6aa0OUk=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: Jn5hBivwIJMYiTLNlB6Z/chGaaigQIvg/Jp6z/Qsh3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:07:81:ca:ca:36:c3:ce:14:75:14:ea:da:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Oct 26 18:00:44 2025 GMT
Not After : Oct 27 18:00:44 2025 GMT
Subject: CN=b9334c82d8d9b66c08721d2f0faee7876deb0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:0f:14:66:ff:39:b0:61:db:b2:cf:34:f1:
e8:35:7e:22:f7:0b:db:c1:87:4b:4f:dd:d5:cd:2e:
fe:f1:3a:ba:b9:39:7e:b9:0d:52:75:0a:05:02:a3:
f5:bb:9b:3f:45:18:a0:bf:41:fc:93:3c:70:6b:ac:
c6:86:1c:94:8d:83:55:9c:f0:b8:2e:d8:85:fd:13:
c0:53:9a:d8:79:57:ae:92:b8:48:16:d4:01:c6:36:
59:57:61:de:ef:0b:92:52:ce:63:fa:a8:fd:d6:2b:
c4:f4:51:99:c6:e9:5e:7b:ac:a4:e8:dc:57:56:d7:
af:a5:62:74:f6:56:73:24:e8:b3:73:fc:dd:14:0a:
70:22:a4:42:43:dc:b8:04:63:81:fe:1b:4f:91:05:
89:20:fb:7f:b2:14:eb:9f:60:f0:48:d8:14:13:68:
66:b7:5c:31:9e:ee:d9:f2:31:ba:0b:6f:18:fc:19:
a6:30:aa:63:82:5c:2c:e0:94:85:14:ef:77:89:2f:
05:34:68:67:44:fb:d2:5c:58:78:d0:5f:fd:23:03:
1b:a3:e7:fa:2c:47:88:48:13:df:2e:9c:fc:f6:ea:
65:17:c6:c5:92:56:7f:80:c1:4a:87:5c:ee:b8:6b:
7b:42:67:fd:35:f8:f5:57:92:d0:0c:e2:7d:0f:1d:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:4C:82:D8:D9:B6:6C:08:72:1D:2F:0F:AE:E7:87:6D:EB:0B:87
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:bc:66:70:a6:79:cb:8f:b8:19:a6:5f:35:69:13:5a:14:
cb:65:b4:32:95:3f:c9:04:cf:c8:b8:46:40:2d:7b:a0:24:22:
92:e1:09:43:85:05:ea:64:e4:0d:62:4f:07:37:4d:be:f6:04:
a8:3e:10:12:02:5c:5e:9d:4e:59:da:4a:80:36:79:9d:a3:36:
72:13:4c:90:ef:6f:c3:c5:5f:19:ca:cb:4d:75:e5:40:37:a0:
de:8f:1a:ad:d6:c5:d5:19:05:41:a3:e9:b1:1c:d3:88:fc:18:
95:19:c5:d3:b0:8d:50:10:cf:d4:8b:3f:b3:d6:57:48:66:51:
ad:28:2a:e4:bd:d1:2e:d5:57:e4:2a:d4:8a:ef:81:18:38:95:
bb:04:4e:87:0a:01:76:ed:9e:b2:96:cb:d1:14:5f:64:5f:0a:
c7:81:a8:0b:e4:f8:17:d8:56:86:56:17:d0:41:86:df:57:90:
12:0e:95:f7:93:51:db:de:c3:a1:c3:cd:13:a3:3b:b9:2a:80:
d4:8a:cf:d4:5b:9c:d3:f8:3b:64:de:35:f4:83:b1:e6:f5:d9:
05:e8:e5:d7:b2:a1:38:9c:d7:24:45:74:22:8e:ea:78:39:ec:
ad:92:8c:c4:39:73:33:bd:f0:47:58:15:58:68:0b:d5:de:9e:
b8:da:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:33 2025 by rpki-client