Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: KUJA4EL0HX9hZajhxD5xr8Q17b9VUI28bbUF6cK7Z2Y=
Subject key identifier: 2C:0E:E8:ED:E2:99:83:43:60:0D:17:79:56:59:57:1D:DC:14:9E:1A
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0199FC8FB62B067B5D3AF991E9CCC450B326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 02EB
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: AXaRdncnhh4pibFW0p+GfQHF+4mMljFOfsxMzZOAGMM=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b6:2b:06:7b:5d:3a:f9:91:e9:cc:c4:50:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=2c0ee8ede2998343600d17795659571ddc149e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:32:4f:8a:fa:10:0b:86:ee:85:b9:59:5f:
70:c9:7e:3c:73:e0:6a:a3:cb:d8:37:03:33:05:74:
37:bd:a1:a0:e2:f5:be:3b:9e:5c:30:c6:4c:a6:9d:
89:60:78:b4:44:63:6d:f4:2f:e3:06:3f:74:ad:1a:
d3:41:f9:0e:ee:b5:a7:ec:f0:2c:99:3e:2e:ac:a0:
f8:2f:b1:48:84:fe:75:f4:58:31:7f:0c:55:20:d6:
08:bb:6a:94:c5:30:4d:ae:86:b6:23:21:9d:53:b8:
49:0e:e3:e4:be:07:d0:8b:45:45:30:a2:d0:8a:76:
c3:2b:23:a5:f7:f0:3d:e0:2e:f3:be:c2:67:2a:e8:
03:eb:2b:da:11:f3:77:a0:82:13:0b:e1:e3:28:65:
77:d3:2f:23:3e:37:b3:7f:90:cc:58:07:b9:75:e7:
8c:c4:33:78:60:fd:a1:60:31:e6:b5:8b:d4:9b:29:
e1:d7:62:98:41:bb:30:09:bc:1f:b5:b9:3a:71:e8:
f2:1b:a8:7c:e6:07:dd:79:c1:bc:a3:3b:37:8f:28:
52:f9:ed:6b:ab:7d:fd:85:9c:83:d6:c3:79:38:49:
dd:5d:ec:c2:4d:82:50:5f:78:95:d0:e7:35:ee:3f:
42:85:c1:43:95:33:03:3e:e6:c2:71:1c:7d:c8:48:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:E8:ED:E2:99:83:43:60:0D:17:79:56:59:57:1D:DC:14:9E:1A
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:11:54:27:62:9a:fd:72:d3:4c:10:b7:58:d4:62:b7:75:
58:8a:bf:59:ac:aa:55:d9:74:d5:03:12:02:67:7a:26:b4:53:
9f:61:23:0f:3f:1b:31:0e:3d:b9:18:cd:b2:7a:6c:76:79:9c:
53:9f:0c:a2:58:97:52:29:b9:18:52:74:a3:c6:b2:42:66:e1:
1d:8f:ae:8b:9d:15:c8:c8:54:2d:58:a1:a4:ed:12:1e:e1:54:
fc:d4:69:d4:70:b7:5d:50:79:92:52:cd:a5:55:c3:60:4e:8b:
f7:48:90:20:09:b7:21:17:23:ba:de:eb:bb:fb:8c:ad:aa:c5:
d7:e8:2b:75:53:e5:57:a4:82:e1:fe:40:15:6f:fb:47:93:1c:
6d:e6:46:6e:13:9d:ee:71:66:61:42:3d:30:f3:96:d2:04:b6:
9c:e8:9e:b7:14:09:ee:a7:9d:3f:bc:3b:9c:74:23:79:dc:d3:
b0:8a:06:3d:4b:6e:9c:b6:e2:b4:cf:10:f4:e7:2e:6e:d8:7d:
5c:00:96:1f:0c:fe:09:92:3c:f5:12:89:b7:4e:91:65:7e:df:
70:47:e9:72:f8:fc:da:e5:3a:6c:90:21:d0:1f:3f:94:9a:7f:
e1:ef:ca:64:32:39:47:ea:12:88:7a:e5:3c:63:9d:6a:64:eb:
cc:98:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:33 2025 by rpki-client