Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: Jhy6QFoj2sbdM/QTCdhOABA22aWTcH5aRoe2IiNggDo=
Subject key identifier: 02:B4:EF:42:57:98:71:B6:1A:9A:5A:DF:61:F9:37:01:E4:E5:AD:A5
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 0199FC58837953A299F8D26BEF109BC314CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0616
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: WutJoFL95QYEA06TVH+o1FXp5iWctnHOiY6Ns6c7Vwg=)
2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:79:53:a2:99:f8:d2:6b:ef:10:9b:c3:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=02b4ef42579871b61a9a5adf61f93701e4e5ada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:31:db:48:21:e3:71:11:8b:a1:86:8c:fa:
ad:d4:5c:57:98:61:b9:e8:c1:a4:78:de:73:aa:87:
74:65:ca:78:9c:eb:f7:f3:59:5a:52:76:88:aa:89:
d2:1e:77:ed:f3:a2:87:26:4b:fc:f6:59:22:d9:47:
71:70:9d:53:68:be:f7:17:be:ce:38:7e:c1:3b:ce:
9b:c1:86:4b:42:8b:00:12:f5:e6:0a:1c:fb:93:9e:
c8:1f:e6:5e:86:4c:da:78:5a:2a:c1:05:87:b6:f6:
ed:bb:c6:30:d1:59:2e:0a:b4:d9:b2:e3:05:56:10:
66:88:e1:85:ea:d0:35:ef:60:e7:d8:86:16:dc:2b:
ee:5c:91:9b:1e:43:ca:ba:dc:aa:80:8f:0d:f3:9e:
77:75:59:9d:e9:46:24:7b:9d:55:78:2d:2f:85:ec:
d5:54:c7:30:e0:cc:a1:be:68:2b:ae:c5:5f:ef:cb:
85:15:fa:9f:80:60:80:a3:05:23:35:be:82:52:e1:
97:73:ac:d1:89:e7:b6:f9:d6:2a:ec:f1:fd:32:a3:
bf:06:aa:41:33:75:e7:60:d0:b2:bd:21:2e:82:3e:
c6:6e:e6:4b:9f:b0:a6:cd:fc:cf:38:b6:fc:dd:f0:
f5:a1:ca:f2:a2:05:9f:ed:74:48:77:df:6f:64:67:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:EF:42:57:98:71:B6:1A:9A:5A:DF:61:F9:37:01:E4:E5:AD:A5
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:bb:41:8c:9b:0c:94:b2:5a:32:af:cb:9f:be:69:6e:87:
99:cd:ad:d9:b9:ce:c8:ea:de:92:a3:e4:6e:94:aa:bf:fb:4c:
ae:32:41:e9:69:8c:e5:bf:d5:25:21:93:0d:2c:dd:37:79:d3:
fc:b7:87:df:51:82:7a:61:02:27:02:df:58:64:13:69:fe:0d:
77:02:18:c1:51:91:34:e4:46:5f:13:3f:cc:4f:19:93:25:92:
a8:d1:f7:cf:59:ee:6d:4b:ea:f8:55:63:db:ee:b9:42:f1:a5:
96:d7:a6:ec:94:bf:fb:a5:58:51:cf:80:69:8c:ea:70:c9:30:
d6:3f:df:49:bf:cf:8e:f5:44:e0:65:29:b1:9b:a3:39:df:72:
ee:8f:33:a4:a1:8a:c8:43:6f:26:14:49:c2:92:c2:8b:b8:64:
4e:d5:20:6e:d2:09:9b:26:b3:d0:4b:3c:b8:25:ce:f8:fd:93:
65:35:bd:64:73:70:fe:94:63:ee:6f:02:8a:53:7d:d1:79:56:
f5:c1:a1:d1:c2:6d:65:6a:b3:ab:9c:02:6b:b8:3b:fc:f5:2e:
67:34:85:f2:6e:78:b2:f0:f3:40:5a:f1:7a:89:e2:0e:4f:ea:
63:a3:ea:d8:be:20:45:42:bb:b2:95:6b:f4:c6:50:1e:aa:75:
79:c9:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:20 2025 by rpki-client