Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: 4kPES0zAInVHv2nD4jVxzrzUEgNq4Ua3sgYM/IZDLzI=
Subject key identifier: BE:1A:9C:9E:4D:07:26:81:C8:24:26:E0:AE:E5:B5:38:01:C7:A3:74
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 0199FE471DC22364803AF1C45966327C04A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 13BE
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: /gLNbT/BKe7vQdXV8vBttO4GE7hAV1a74c1vDGaBnhk=)
2: 8n8zo5rtakZ1whW9-uc5uUrGQWs.roa (hash: aqUj+0Ybl2fHs4Ve+OniwJ/DSH+hH1A2s4EAgpbtDzc=)
3: gvC7ao5sxrnrTpKAU7Z6Kxl3n4w.roa (hash: 6Il2DCAKJW2GDXUMq30h38NoaFgqqtmGFfPCqtO+DUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1d:c2:23:64:80:3a:f1:c4:59:66:32:7c:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=be1a9c9e4d072681c82426e0aee5b53801c7a374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:af:3f:66:48:f5:b7:66:88:48:a0:5c:45:
be:86:63:c8:a8:83:6a:2f:d6:49:52:3f:cd:9b:26:
b0:8b:6c:de:84:fc:dd:5e:d9:05:75:2c:0e:47:8c:
3b:33:a7:50:22:91:f8:aa:42:2d:2e:90:87:e8:e0:
b4:11:c2:5b:e6:d9:2b:81:b0:28:e2:71:e2:0b:a9:
c7:f7:10:52:d7:6a:84:e9:c5:60:80:6f:a6:d0:d9:
66:4f:fe:d6:57:9b:e8:43:89:88:91:b3:86:85:e1:
d1:ab:db:13:fa:6b:76:41:89:ec:b1:90:7e:fa:b1:
a2:13:d1:cc:20:44:fd:d7:fc:13:dd:79:38:d4:46:
80:24:d7:45:7c:67:5f:c5:8b:39:f4:b0:e9:6d:67:
31:08:b4:d0:04:5b:d1:23:7c:0f:a8:64:f3:e5:14:
6a:87:8e:8d:cc:9d:a0:f8:56:61:5a:45:bb:17:b2:
70:62:04:c5:b4:b5:8e:d2:19:53:6a:a9:77:14:1a:
f6:ef:8c:ed:d7:0a:e9:87:59:de:b0:29:04:dc:6b:
e4:34:54:51:07:7e:a9:9d:54:fd:e7:5f:71:de:8b:
34:3d:3e:42:58:df:78:fb:56:71:ac:9a:b1:09:32:
28:e3:cc:12:e0:65:a5:2c:6e:da:31:d2:14:fc:a7:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:9C:9E:4D:07:26:81:C8:24:26:E0:AE:E5:B5:38:01:C7:A3:74
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:0b:45:c4:39:a1:23:69:ea:a0:19:b3:02:59:26:a4:34:
63:f7:7c:41:1a:48:68:a1:2b:bc:41:90:21:01:ee:16:9b:1f:
51:26:94:59:93:18:4c:cf:90:37:c6:c4:cc:ca:da:9a:21:12:
39:ad:e3:19:0c:b1:21:96:b6:b4:dc:50:89:08:0b:eb:cc:51:
14:d6:b2:b4:1c:e1:f2:4c:83:d3:83:3c:58:9a:fe:71:68:c7:
2d:92:9b:37:5c:13:21:d3:6a:9b:63:b6:b3:35:4c:07:ba:aa:
92:fd:0c:2f:94:61:69:de:d7:91:58:ad:58:f6:2c:29:2e:b1:
6d:ea:ff:a2:d4:5e:86:55:a7:05:23:21:37:50:4f:da:51:54:
78:22:e8:b7:2d:b0:11:64:13:75:55:69:50:50:5a:9d:23:45:
45:cc:d1:f2:e9:7e:bb:7d:88:ff:32:08:9c:d7:5f:dd:2f:93:
cd:20:e4:b8:99:e6:18:f1:bb:17:1f:3e:bd:69:7e:f4:67:19:
f5:b4:f6:8f:91:21:b6:d9:cd:cd:11:5a:fb:a5:1d:fb:51:6e:
fa:b2:07:12:a0:9f:84:92:2b:74:ee:c2:4e:44:25:0e:e7:10:
4e:23:99:ba:3c:d6:3a:2f:5a:c9:ab:08:35:56:cd:cb:09:5f:
74:5e:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:45 2025 by rpki-client