Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: B8iAcxNR4+92IwYDp86RiuhZ9OLe3ETo8CUd2rU35cg=
Subject key identifier: C0:20:77:BC:F0:2F:E0:B7:58:0C:14:2C:EE:A1:3C:85:82:70:DF:95
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 0198D4DFE5463F81C6E4B702FDCECF9075DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 057D
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: Du4dtd9mYs0UUgH5/D3UpaXySGGNQG6ShDqHgqaCFOA=)
2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e5:46:3f:81:c6:e4:b7:02:fd:ce:cf:90:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=c02077bcf02fe0b7580c142ceea13c858270df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:1c:eb:46:45:13:4a:00:c0:92:3c:ac:ac:
aa:b6:e2:6a:ee:9c:61:ca:ec:f2:ef:0f:2b:c3:fa:
ca:26:0f:bc:42:3e:db:40:f8:26:f8:6c:72:e5:a3:
c3:42:67:ea:ca:47:92:d7:ac:7c:50:99:cf:81:91:
cd:31:88:d7:55:14:36:b2:3a:fb:69:20:02:70:ba:
60:9d:c9:fd:6c:ce:71:8d:18:1c:47:93:d3:89:87:
72:21:dc:7a:0c:1b:0b:28:54:22:88:37:ed:0c:73:
87:7a:5e:ef:87:86:45:56:77:e3:fc:2f:ac:23:65:
17:95:dc:c5:3e:c5:55:41:2e:a0:33:36:5b:91:44:
37:8b:2d:f2:ff:71:cc:ec:51:27:16:a4:3a:99:6a:
0e:39:ca:40:0d:43:76:ff:96:4e:72:71:09:7c:45:
16:e4:9b:69:55:f9:a8:a5:86:60:5e:26:2a:fb:5e:
2c:8f:1e:8b:d0:5f:2d:49:e0:bb:90:d9:1c:cd:eb:
bd:8a:25:ba:88:dc:07:45:be:35:9b:54:ee:1c:2d:
cb:c4:68:30:c9:86:30:d8:8b:e9:51:ba:52:ab:5b:
92:89:05:30:ef:8e:fc:02:f8:11:f3:66:5b:10:a4:
ee:be:8e:6b:d2:9c:93:a3:2f:fc:70:ea:e3:a8:3f:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:77:BC:F0:2F:E0:B7:58:0C:14:2C:EE:A1:3C:85:82:70:DF:95
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:8a:f8:a1:0a:65:0e:8c:72:d0:5d:2c:14:16:6b:2c:80:
fb:03:06:d1:71:5a:82:61:5d:64:14:23:85:84:0c:c8:2a:77:
b4:de:41:51:6f:68:cc:12:74:95:3d:2b:ff:83:5e:d7:31:56:
49:63:cf:0a:83:05:b9:40:51:82:a6:cf:21:ef:67:e3:06:ed:
25:2e:6c:1e:6b:f2:fb:e5:d0:ac:13:f7:86:c0:fb:4e:4b:5e:
dd:9c:3e:7f:70:11:ad:9f:b1:80:00:d2:78:3c:e6:66:8d:d7:
77:cb:05:77:3a:19:29:18:f0:c2:46:87:50:b5:b1:c2:8e:a5:
61:0d:4a:e9:b3:29:53:30:e3:50:6c:c1:23:4b:b2:8b:10:df:
cd:57:fe:c1:a8:59:00:30:58:b5:58:51:9e:8f:e0:fd:d4:fe:
0e:27:7a:1c:66:e8:56:26:c2:e0:87:7a:46:fc:61:e3:47:d6:
30:be:43:9b:54:95:6c:f8:79:53:70:df:c9:da:58:a9:c9:59:
c3:77:a2:89:26:34:f3:34:b5:b2:63:c4:af:28:d7:19:bd:1f:
bd:31:fa:c8:37:4c:e9:29:57:64:d9:99:ad:35:a2:0a:c8:87:
c4:1e:59:3a:01:07:96:44:46:fa:46:70:25:42:3a:c8:f2:1d:
f6:42:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:19 2025 by rpki-client