Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
File: iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json)
Hash identifier: wZ9DwXhMgo3jlpgzjkAGjPDMPY8mKyAJzJC/FQ6t8kc=
Subject key identifier: 6C:F6:B9:6F:62:54:6C:D3:B5:F6:EE:29:5A:B5:28:69:EA:0D:BA:65
Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
Certificate issuer: /CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Certificate serial: 0199FDDA611D63F4B30E21E2D027A7A24A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
Manifest number: 09D5
Signing time: Sun 19 Oct 2025 19:02:51 +0000
Manifest this update: Sun 19 Oct 2025 19:02:51 +0000
Manifest next update: Mon 20 Oct 2025 19:02:51 +0000
Files and hashes: 1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: DCGxLQJkms+Yxxf/y80XW2hWld8M2cyoN8ar2uKKEi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:61:1d:63:f4:b3:0e:21:e2:d0:27:a7:a2:4a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Validity
Not Before: Oct 19 19:02:51 2025 GMT
Not After : Oct 20 19:02:51 2025 GMT
Subject: CN=6cf6b96f62546cd3b5f6ee295ab52869ea0dba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:80:5d:17:a9:17:f5:e2:bd:9d:57:6f:a3:
03:9c:7f:bf:52:37:18:9f:56:e1:2b:17:56:e9:b6:
18:ea:78:47:f2:56:5d:a3:d3:54:e8:4b:89:b3:48:
2f:f5:da:c3:84:cc:87:70:c0:b9:89:b2:38:f8:8e:
57:ae:4d:d0:35:ba:03:4c:93:1c:a9:84:e4:8e:4b:
7a:05:b4:6f:4e:53:d8:4e:73:43:5c:2c:3d:a0:dd:
bc:30:9e:ae:51:e4:f7:51:d7:38:d3:e9:f0:20:6d:
43:ec:6f:42:70:ef:eb:e2:1d:ba:49:a4:d9:35:e3:
17:ef:cb:73:75:fd:92:30:93:19:62:b4:be:91:19:
c6:33:24:60:f3:eb:87:a2:71:35:11:11:cd:25:95:
b5:0c:b0:91:fd:61:75:50:38:88:d7:9c:d0:65:50:
ae:91:10:94:ed:ca:74:d8:1d:38:d2:27:1e:36:60:
d7:69:28:cf:29:ea:51:49:3d:f2:b8:3d:95:db:b0:
5a:4b:31:44:e0:eb:96:28:95:e6:fe:a6:1f:b4:cb:
cd:62:13:3d:c6:fc:bf:a3:69:8e:3d:76:48:67:d6:
93:3b:e9:03:cf:c5:80:44:35:46:48:b7:19:0d:2a:
57:f8:2d:54:34:63:cf:23:a1:92:6d:7c:bc:cc:46:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:B9:6F:62:54:6C:D3:B5:F6:EE:29:5A:B5:28:69:EA:0D:BA:65
X509v3 Authority Key Identifier:
keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:f7:d2:b2:69:83:c9:b9:51:20:86:19:cc:ff:eb:18:4d:
fb:fe:19:76:4b:55:ef:23:4d:13:a4:bd:c3:09:d3:ea:4f:9b:
e2:ba:87:e9:9b:77:99:f6:ba:13:f5:8b:b3:65:59:a8:d0:12:
41:bc:8b:00:ed:8f:32:18:23:86:1c:30:0b:57:0c:92:16:33:
84:d0:c3:ad:5f:73:25:9d:59:ee:7a:5d:ac:a3:d0:da:fb:f1:
b7:88:bc:0b:dd:b3:56:80:98:9d:2f:fa:36:07:92:e3:0a:b0:
85:14:41:43:38:a1:0c:e2:e1:72:8a:f3:64:f5:57:89:1c:78:
4e:27:1a:6d:98:17:5a:8f:77:78:3d:21:4b:6e:f6:d3:92:01:
ab:65:67:79:ae:e9:a9:d7:09:e1:1e:2f:26:f8:44:75:62:13:
b3:69:f1:1b:eb:d4:a8:09:65:f3:52:98:25:98:c9:d8:c6:ac:
50:c5:56:34:e6:88:7f:56:b3:84:56:dc:3f:1a:81:10:d8:6b:
5c:93:95:f2:e2:47:d4:36:38:69:7b:6d:88:84:fe:81:ba:2e:
aa:cd:86:bf:79:a8:e9:98:cf:49:e0:a1:ab:aa:9e:12:d9:27:
c9:02:68:60:b0:80:33:66:25:13:43:95:1b:2e:89:83:92:ed:
e6:8f:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:15 2025 by rpki-client