Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: jQOkHHYKpYdK1qKeZunK/oIEsanlFmceqyoiKpjNrlk=
Subject key identifier: 69:3C:8E:FA:6E:85:2F:74:E4:14:94:A9:8C:FC:E9:6A:FB:5A:98:D8
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 0199FFFE47DEC767EE60691A734BCD2C8B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0C3C
Signing time: Mon 20 Oct 2025 05:01:18 +0000
Manifest this update: Mon 20 Oct 2025 05:01:18 +0000
Manifest next update: Tue 21 Oct 2025 05:01:18 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: NEYy+nhrtRl/+AChV1jA2II5jfiFCgm2+hfs11B3uIw=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:47:de:c7:67:ee:60:69:1a:73:4b:cd:2c:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Oct 20 05:01:18 2025 GMT
Not After : Oct 21 05:01:18 2025 GMT
Subject: CN=693c8efa6e852f74e41494a98cfce96afb5a98d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:d1:9b:7f:82:43:7a:d5:32:58:22:9f:4e:
11:8e:76:64:02:0f:47:63:5d:08:81:be:56:8a:70:
9b:f8:1a:fc:dc:1c:39:f0:e2:a6:80:97:82:9a:1f:
05:48:c3:dc:7f:6f:8d:fc:a2:cc:11:4b:74:95:e1:
8b:db:88:df:3f:92:3f:0d:ff:57:3e:24:67:d9:80:
a4:3c:67:75:4e:a5:15:3d:d7:a3:ad:fe:56:8c:30:
dd:69:c6:20:7a:51:42:50:71:c0:70:2e:a4:5a:6d:
b0:29:91:31:d6:ae:89:63:20:79:9e:65:8b:cf:67:
f4:ab:7c:94:58:eb:e1:a9:cd:15:e7:c0:a2:fc:16:
84:42:93:57:77:37:b2:0a:17:be:23:35:42:f3:97:
1c:37:41:df:ec:a7:04:08:79:7f:62:9e:7d:d1:57:
59:c0:24:38:61:fa:3a:8a:f3:c5:c9:ad:cf:5f:fd:
84:f7:5c:ab:46:1b:b5:2e:32:ca:7b:b8:61:c5:a5:
99:ee:16:84:75:05:d0:1a:62:3d:f1:be:71:79:a5:
c3:41:52:61:3f:49:69:a4:a2:2f:53:db:8a:6a:8f:
c2:90:09:bb:06:35:58:5f:ed:79:03:78:50:31:b1:
9f:41:e8:30:ba:1d:c5:40:36:13:ae:6a:fd:33:48:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:8E:FA:6E:85:2F:74:E4:14:94:A9:8C:FC:E9:6A:FB:5A:98:D8
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:03:1d:3b:88:6e:c2:8d:8b:fb:bc:30:67:ea:83:88:3e:
36:59:0c:cb:2d:bb:09:22:22:d5:b4:d0:c9:5d:7c:3c:28:5d:
fc:e4:03:01:80:50:38:2e:56:22:f9:08:37:2d:68:ab:b9:27:
a4:31:36:22:2b:62:4f:8b:87:c4:b2:77:12:d6:f4:22:c1:2b:
0e:3c:0d:22:71:f5:49:e6:e2:d5:d5:07:e6:96:7e:ea:dd:37:
2d:fd:88:41:27:7b:1e:ad:6b:cb:be:d0:f5:9d:23:09:1c:ba:
5c:01:a4:ea:01:5d:43:98:85:3c:63:9d:f8:dd:8b:eb:29:6e:
36:d1:57:44:37:0f:fc:70:22:f6:d7:48:10:21:00:24:69:ff:
8d:20:38:d0:79:80:58:f2:07:06:3c:ac:0e:f8:20:2a:ab:06:
5a:56:e4:11:03:4f:4b:7d:21:7a:3a:97:2c:3a:16:47:21:3a:
23:c0:07:11:f2:f8:db:af:c3:6b:b2:cb:1c:67:89:65:47:7e:
38:87:de:3e:9a:64:ce:17:b4:9e:78:1b:90:5e:53:fd:33:8c:
70:61:ef:da:81:1d:84:a2:78:7f:34:54:60:3a:3f:e9:04:3b:
1d:d7:18:7c:78:80:73:a5:ed:fe:2c:6a:9b:ec:76:58:b3:e3:
75:be:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:45 2025 by rpki-client