Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: q61DPeG/qXtCdiDMgioxWFq11h4wZTJBd358uwVzIsA=
Subject key identifier: 06:D0:F4:43:C4:0F:63:B4:2B:1B:17:76:8B:BB:C0:CD:5D:C6:DF:9F
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 0199FBEB22AECA63F2C092BB44F72A3D21D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: 6XtYQ/hjCYaQM29WWyekeOo8g4/4Xg/mUhA6/3lqyBg=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:22:ae:ca:63:f2:c0:92:bb:44:f7:2a:3d:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=06d0f443c40f63b42b1b17768bbbc0cd5dc6df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:02:c2:e3:70:88:79:f4:cd:e0:b0:71:a9:
ba:fa:90:bd:5c:7d:ad:be:00:81:db:0d:6c:39:ca:
99:93:96:78:5b:77:fc:ff:86:a4:02:87:2f:14:6e:
5e:69:ad:84:af:38:53:f5:20:85:1b:71:7f:c6:3c:
b8:18:d4:70:b9:e5:b2:e4:c7:3e:a7:88:6a:b3:13:
94:88:0d:0d:da:96:6a:e2:fe:fe:7d:69:e9:89:95:
2f:99:86:f1:87:9c:e3:0a:3f:90:41:23:43:f8:34:
78:22:e5:91:d6:22:43:ae:96:9d:64:70:06:83:19:
5d:96:37:ac:f2:57:21:8c:59:3a:45:bb:92:ca:18:
dd:55:ca:79:f7:48:aa:0f:bf:9b:de:0c:d7:23:c1:
a1:6b:da:ae:ab:a6:50:86:47:92:cb:46:12:01:58:
57:34:79:7e:19:71:ca:f6:3c:75:88:f1:e1:46:f2:
6f:00:19:a2:b3:c7:ad:03:ce:78:50:b9:59:72:b0:
b2:91:57:7c:fe:b4:e5:b5:62:57:2c:ec:b8:49:fa:
cc:30:ca:d7:02:f0:a9:69:df:2a:46:5b:f9:97:6f:
fd:c2:a0:38:60:46:c7:d2:97:2a:e3:5d:49:35:86:
a9:0d:28:63:71:d4:d3:14:5d:08:b2:71:1f:1e:ba:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:F4:43:C4:0F:63:B4:2B:1B:17:76:8B:BB:C0:CD:5D:C6:DF:9F
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:c3:61:0b:57:2a:9b:95:b0:d0:00:81:2d:1f:72:a7:3a:
51:e7:10:23:fb:c5:fa:c3:8f:9c:8e:e2:99:cb:56:96:0a:07:
20:11:d7:a0:ca:83:80:ad:f6:86:7a:cb:77:76:ec:71:68:b4:
41:54:e4:98:5b:59:b2:c6:5a:b1:10:b2:77:ce:8d:92:8b:72:
95:cb:81:8b:df:21:b7:8e:eb:e5:9a:e0:5a:59:58:7e:61:f2:
1c:e5:a8:f9:9e:d2:96:0c:44:52:e4:c7:a0:73:80:4c:cc:ec:
7f:8f:c0:90:56:cf:f5:23:7d:36:1f:cf:69:21:bb:12:64:4d:
61:76:b9:11:3d:a6:d1:98:a5:6d:a0:17:cd:75:92:03:83:32:
da:6d:5b:96:46:c6:24:4e:3a:d7:94:93:61:e8:e6:72:87:17:
66:03:12:d6:c1:e6:bd:bc:96:24:0e:93:d3:cb:59:6a:9f:b3:
66:89:3c:0e:44:45:68:db:d8:88:f4:f1:93:82:08:0a:67:2c:
48:85:f3:1b:18:55:73:c5:89:56:14:42:b0:e5:17:6d:3a:84:
ec:04:f4:ef:df:92:1a:7a:29:44:36:01:1d:a5:88:e0:01:20:
02:13:73:3c:2e:09:73:1d:86:2e:92:9c:d1:4a:9f:5c:81:91:
0f:24:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:22 2025 by rpki-client