Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: lJxqJ9coQn4bWepxZAPl0lnk9M265+HeiwP0bXJmB+E=
Subject key identifier: C7:35:D9:BF:75:9C:F4:88:38:93:72:BF:39:79:B5:36:7A:DB:6E:50
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 0199FBEBC7C9B25B7FC14FE25CE16E7DA7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 052C
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: ZxJbCiXjNcewgTxdsvwbeEACwdYcE59wMf8PJuZz42o=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:c9:b2:5b:7f:c1:4f:e2:5c:e1:6e:7d:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=c735d9bf759cf488389372bf3979b5367adb6e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:a2:94:4e:69:1a:d6:fe:35:22:62:50:08:
65:5a:a1:40:c7:4a:27:cf:85:0c:be:06:95:4e:a0:
86:62:02:38:41:f7:e9:5c:de:66:70:c6:b0:04:88:
04:a3:b3:8a:62:fd:82:ac:0d:2b:38:28:b1:1b:92:
7e:98:1f:d0:33:79:da:99:26:31:c9:ad:ff:e1:f6:
a8:d2:91:4d:01:da:b1:d3:8b:47:e3:9c:1a:9e:d7:
b5:75:1c:cb:a2:d3:ab:3e:8a:06:34:00:87:8a:9d:
43:ed:c6:4e:d4:f7:8a:31:8b:00:62:9e:b9:5a:9d:
31:23:e6:88:80:82:21:1e:d0:48:fd:9b:c0:79:7a:
35:55:ef:ee:3c:93:5d:ca:97:86:fe:a3:a7:24:a5:
c2:01:64:3c:b4:fb:8f:4d:13:f3:8e:75:4c:94:32:
10:60:02:7b:e5:70:7d:a4:fe:9c:93:e8:10:d3:7c:
e0:66:34:4a:f6:27:01:04:7c:4d:a6:41:fe:0a:91:
94:13:cc:8a:9f:09:c9:ba:7b:d8:37:6b:a8:aa:46:
47:29:c2:b4:c3:09:76:6b:5b:00:e3:93:47:40:a6:
51:09:69:dd:f3:75:5a:60:02:d3:ba:79:1d:a0:ac:
d8:3f:7e:af:08:df:59:a8:c5:3a:4e:34:ad:48:bf:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:D9:BF:75:9C:F4:88:38:93:72:BF:39:79:B5:36:7A:DB:6E:50
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:35:af:72:9d:b7:30:e8:a0:a5:65:f3:22:c3:58:fb:69:b5:
63:e8:50:74:e5:34:ec:e5:21:fb:cf:7b:66:c8:c8:71:58:65:
b0:4a:58:88:8d:01:57:fa:7e:f2:02:54:44:33:1b:6b:d4:c4:
b3:26:cd:99:2f:96:4b:5b:73:76:05:5c:27:6d:e4:39:27:f4:
15:09:98:7f:5d:0d:ee:33:0e:0b:47:c7:5c:7f:41:37:8b:e4:
bd:a3:0e:52:e3:36:e7:0c:3c:6c:08:7a:ab:7d:e0:29:fc:a1:
73:1e:93:e3:21:fc:fd:98:21:4f:50:29:be:bd:80:47:92:aa:
71:8d:13:83:77:71:74:42:8b:59:9e:db:57:f3:45:a8:10:06:
ee:ac:16:6d:14:5d:1a:eb:33:f1:f0:28:da:b4:50:f6:b7:df:
ae:6e:ee:a8:b2:9e:2c:14:b3:1a:64:bb:22:a9:75:28:9c:7e:
02:4a:34:94:71:67:a5:0f:10:7f:aa:38:32:fe:33:e2:bd:47:
45:1d:5e:88:28:01:18:d8:13:93:2f:60:b2:23:8b:ad:7b:68:
cf:ec:8f:66:6b:f8:cf:60:58:a4:3c:cb:23:82:40:12:1c:a6:
d7:47:5f:92:98:bb:a9:dd:18:17:1d:0e:2f:c4:81:14:e2:14:
0b:9a:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client