Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: 21xRFt9zguRqSV9Xv2h7Hg7qw3aBiovchXYCVKlIo2A=
Subject key identifier: E2:AD:83:8E:0D:13:EC:A3:AA:9B:B9:99:99:1E:43:00:12:A9:7E:6E
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019A00DA48520C71DFDF780F1921D2CF4DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 15B9
Signing time: Mon 20 Oct 2025 09:01:36 +0000
Manifest this update: Mon 20 Oct 2025 09:01:36 +0000
Manifest next update: Tue 21 Oct 2025 09:01:36 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: CuCvzzgpuMrEJujb3wXNGoA3FDzQmUSP4+tWMagI2OQ=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:48:52:0c:71:df:df:78:0f:19:21:d2:cf:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Oct 20 09:01:36 2025 GMT
Not After : Oct 21 09:01:36 2025 GMT
Subject: CN=e2ad838e0d13eca3aa9bb999991e430012a97e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:5a:27:f4:fa:e6:7c:ae:3f:9d:c3:dc:d4:
f7:44:17:18:61:c1:3b:ca:a4:15:4e:57:4c:02:53:
dc:ec:dc:8d:fb:42:92:e8:b8:03:59:ff:43:10:ef:
c3:e5:8e:f4:2f:c0:c6:47:33:c3:87:14:f0:77:d7:
4f:96:99:80:9e:47:aa:dd:59:ae:9f:cf:0a:55:19:
51:ed:5e:2a:8d:21:22:a1:32:db:24:87:e9:b1:50:
6b:b9:07:9e:68:b1:99:17:51:c2:2f:84:f2:c0:6c:
f6:25:63:03:99:ab:c5:6d:2c:07:1c:3e:a5:81:d7:
28:7d:9b:a7:f0:71:df:f6:54:a0:88:ad:28:42:2f:
63:34:82:90:77:51:9c:45:57:ee:18:9e:a6:a1:59:
44:12:27:4b:8e:48:bd:8b:b5:99:3d:1d:5a:f8:e9:
82:5e:3e:a8:61:58:19:7c:bd:b7:a7:d8:3c:d5:1f:
d8:91:26:ef:e9:25:89:04:4c:b8:11:3d:39:85:d5:
b3:5d:11:19:79:c4:85:6e:c0:c7:6f:85:1c:54:16:
3c:04:99:8d:02:78:05:3a:88:6b:7c:58:91:36:27:
a5:0e:c9:d4:18:59:e2:d4:10:16:c2:1a:e0:1d:4c:
39:d5:af:2a:df:d0:14:f7:bc:bb:c6:e4:2d:86:14:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:83:8E:0D:13:EC:A3:AA:9B:B9:99:99:1E:43:00:12:A9:7E:6E
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:aa:be:b1:11:54:42:a3:d0:27:9e:80:c4:79:78:39:8e:99:
dc:0b:1f:76:7b:04:2a:b8:41:19:d4:a0:f2:9d:4a:88:8b:17:
f7:64:ee:6f:0d:5f:95:39:2e:89:37:1f:bf:05:82:3c:10:6b:
79:90:7c:73:d1:d7:88:2d:38:03:64:37:ef:e0:4f:c6:b2:9f:
92:ba:99:4e:3f:23:34:76:2a:01:ad:96:45:e5:d2:14:33:a2:
c3:7c:10:90:2b:03:16:98:bc:94:0a:59:fa:df:10:9d:e4:9c:
66:d1:34:55:cc:a9:1b:db:95:9f:99:22:06:dd:e6:d6:12:46:
41:36:bd:69:3c:73:c7:5c:a7:72:55:54:fa:16:74:f9:15:cb:
1e:e6:10:c6:53:00:cf:9a:3b:6f:07:2f:cf:63:a1:26:c6:9a:
92:4f:cb:ec:58:1a:d4:56:39:e2:10:e3:d5:06:07:a0:38:c4:
b3:a2:d1:1e:c9:3c:80:3c:57:cc:59:11:00:53:58:0d:2c:05:
5d:a5:1e:f4:45:fd:f7:0e:fe:95:cd:bb:4f:32:53:f7:e4:fe:
64:3e:a4:38:bb:fa:86:28:4d:3f:1a:6f:f9:5c:8b:13:32:06:
a8:7f:f1:cf:13:b5:6d:e1:57:10:d7:f2:da:ca:06:74:60:f1:
66:b5:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:00 2025 by rpki-client