Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: 1PdiavSZX+qAMHArKz6wZ1gLi0YjKLSO8+SobjwlPHI=
Subject key identifier: 96:13:ED:A4:AE:28:A6:F4:EE:46:D5:BA:80:BC:FF:86:C9:52:19:C7
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019922C3A99819310D96E30D7888E2A6FEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0F
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: 2VMJ9WQikYFEDlDpOKmAjBWdjSA.roa (hash: KpcckScBja4+tcIOvGVtG8MssUZtxxse3N+i6aa0OUk=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: r46DmA7eK4IdDTJ9JS4F0A/AH70/9GLodcWuOOsTprQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a9:98:19:31:0d:96:e3:0d:78:88:e2:a6:fe:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=9613eda4ae28a6f4ee46d5ba80bcff86c95219c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:bc:79:b6:ae:d1:34:1d:7e:71:24:df:39:
6a:bc:d3:8f:10:c2:5c:bb:e4:eb:29:f7:b6:18:32:
58:c9:d3:e5:0b:15:68:ab:ba:8d:26:de:05:15:78:
8b:81:38:10:55:b9:51:3d:05:8d:16:71:6b:a5:76:
cd:e9:7f:d2:a7:24:f9:f3:b8:a3:11:ed:2a:49:96:
d6:10:74:87:24:b9:a9:16:18:d8:82:54:f8:b3:dc:
1c:64:e0:1b:ed:7c:15:2a:43:a0:42:49:7c:a2:0e:
f6:67:59:04:6d:cd:12:dd:d7:12:98:e6:68:ad:5b:
4f:0e:c9:62:3b:d0:e6:c6:28:3c:82:1a:12:4b:06:
47:bb:b9:22:4e:44:ff:ad:9e:07:73:3b:a0:03:93:
f4:06:37:79:0b:61:91:84:46:0f:bb:c8:fb:e0:72:
8f:7a:89:6f:e8:16:6e:7c:a1:10:96:09:27:70:90:
fc:5b:b4:b2:a6:ab:68:3d:22:27:04:18:06:1b:fd:
a6:bb:0d:9d:9d:3e:63:d2:e1:ea:bb:44:33:23:9f:
5b:6d:c6:1d:e6:be:35:ce:c4:79:a8:71:bd:c2:7e:
41:3d:56:a4:04:a1:9d:db:3a:eb:92:f0:9e:e6:ed:
bc:f5:43:7e:21:a0:53:27:59:2e:45:10:32:05:83:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:13:ED:A4:AE:28:A6:F4:EE:46:D5:BA:80:BC:FF:86:C9:52:19:C7
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8b:40:b1:e8:36:ae:ee:fd:6a:e7:7a:1d:a6:d2:2b:fb:1e:
23:27:32:88:8b:ed:fc:41:78:1e:3e:75:5a:85:de:1d:5a:8f:
fd:0a:ad:6e:4b:67:49:a7:21:66:5e:50:06:89:9f:40:41:4b:
99:d1:44:ba:64:37:9a:47:84:c0:23:e2:4f:68:b1:ba:e4:a7:
a0:33:5d:a5:ef:8c:ba:08:af:70:37:15:7a:e0:d0:65:95:6f:
28:02:ff:89:d7:65:f5:bb:a7:6b:e6:8a:bc:fe:8f:9e:13:41:
cd:b7:cc:f4:a3:9e:2f:59:8c:3a:ed:92:51:35:28:81:83:3d:
c9:31:de:1f:ca:9e:51:3e:68:ea:9e:51:b9:8a:88:ac:bb:83:
5a:70:46:40:2f:04:ec:e4:77:75:0b:d4:a7:5a:e1:92:f1:99:
d1:84:b6:58:58:ed:53:09:ff:88:b7:f4:e5:89:c2:2c:f9:54:
26:4d:96:63:f1:49:9e:c1:e4:77:8a:43:a4:c0:ab:56:36:fb:
a3:65:f8:ae:27:0f:a3:0f:63:c7:52:f8:99:3f:79:a3:08:cd:
cc:69:e8:5a:c8:cf:22:12:0e:5d:f3:d0:7f:6b:f5:b8:28:ea:
47:5d:37:95:ac:17:48:ef:62:bb:61:2e:a7:90:24:f9:f6:9d:
2e:01:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:07 2025 by rpki-client