Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: YM4O0nUFah4KXk5RrsRi2wRkLI4y0o1MXfUWUVxrNpM=
Subject key identifier: 35:D3:08:3D:F7:BB:81:9C:42:12:2F:1F:0A:ED:FE:E9:B1:B4:44:A0
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 0199FCFD6EB9BEC089DCB01EE7132C888390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: kb7f/CBLiBbd2EXlUomVrSV1HWLDNQ41L12ZmO3Z5Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6e:b9:be:c0:89:dc:b0:1e:e7:13:2c:88:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=35d3083df7bb819c42122f1f0aedfee9b1b444a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:a2:2d:d0:c6:2e:cb:c4:97:0a:3d:e8:a4:
52:23:6b:a6:f1:7d:85:9c:e7:05:6f:20:c4:60:d8:
e0:a3:17:5e:2a:e3:1e:3d:06:eb:51:8e:1f:10:42:
31:60:63:e4:74:db:e1:ff:55:d4:41:bc:7c:04:d5:
1d:34:76:54:47:cc:f3:88:d7:0a:39:25:7c:08:2b:
aa:cc:fe:c7:f3:64:9a:b0:e9:bd:d0:5d:1b:2b:d4:
5a:41:0e:87:ae:62:f1:08:7e:82:dc:80:75:2c:79:
39:5f:55:6a:40:ca:53:63:ad:7b:20:59:ac:fc:f0:
39:10:3c:12:d9:0b:23:0c:1b:44:51:12:41:d7:cc:
10:32:4d:24:51:53:6f:50:f3:e5:10:e1:7a:e5:47:
7a:1a:8a:b5:e5:93:03:8d:58:5b:fd:a6:a0:c4:26:
14:41:eb:4f:8d:b9:0c:54:e3:9a:aa:fc:09:1b:6e:
2d:dd:b8:64:3b:bb:1e:db:be:56:84:ee:4f:3d:24:
a4:4d:05:44:2d:62:d3:87:6b:a7:8f:b0:e5:54:10:
ca:e8:1a:74:ce:2a:1d:6e:5a:b7:f2:74:2c:b4:65:
cf:11:4f:65:80:2a:db:e9:b7:94:0c:48:47:ca:d0:
d7:ae:7e:be:7b:be:43:53:d1:30:c9:e9:f1:45:48:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:08:3D:F7:BB:81:9C:42:12:2F:1F:0A:ED:FE:E9:B1:B4:44:A0
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:83:f3:77:6e:f0:df:a1:a4:c0:69:d1:7c:8c:34:06:20:19:
c7:98:d1:e7:2b:ba:c3:c3:40:1d:29:aa:01:e9:b2:80:6e:4d:
a5:9d:0a:9f:fb:8d:3f:3d:42:31:b1:cc:4b:d1:19:4f:67:9b:
01:9b:f1:ab:2b:64:59:c4:81:c1:b7:72:76:72:1c:da:64:8b:
87:45:99:2a:38:d6:6e:71:4c:1f:8c:ac:6d:fe:a9:ea:77:65:
e3:76:2a:6b:0b:a5:99:84:32:83:3e:5b:75:0d:0e:8c:2c:6f:
0f:1c:b8:db:c5:23:dd:94:ab:35:2d:aa:1a:6c:7c:b0:85:8b:
56:76:97:07:16:ee:60:70:ad:17:9b:70:43:c9:2a:e6:71:d4:
f0:ea:e1:f3:8b:a0:17:a5:c7:c5:71:e2:f7:7d:50:e4:e0:c1:
04:42:bf:fb:d6:49:fe:5e:4d:8b:f6:ca:9b:58:42:19:5f:19:
ee:54:11:be:b3:fe:c0:60:79:01:77:f0:6b:5d:c1:22:03:9d:
f7:90:71:96:27:4f:09:0d:fc:b3:5a:c6:bd:1e:16:6d:09:ce:
25:b2:0f:46:65:cf:b5:5c:44:2b:61:aa:0c:45:a6:0c:bb:e1:
64:67:3a:07:80:5f:a1:6d:35:12:0a:16:3c:76:3d:38:23:cf:
4b:1c:00:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:45 2025 by rpki-client