Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: ZGm+a49uag5vlL7Ojblgcs2ClzRi6mb960VVaglikm8=
Subject key identifier: 39:F1:F3:2B:7B:B5:66:F7:CF:AC:9C:A3:17:60:8E:B4:F1:9A:60:F8
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 0199FCC62AC0B29366CBA41F9438CB5C9205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0EE3
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: RfslpKi0017tRcOQQXl5GWK73TR0UXBRFmGeEFPoSqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2a:c0:b2:93:66:cb:a4:1f:94:38:cb:5c:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=39f1f32b7bb566f7cfac9ca317608eb4f19a60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:73:b4:70:42:25:d8:f6:0e:e3:49:14:31:
6c:21:75:73:9e:3c:9c:73:83:21:77:03:91:bf:7d:
b5:50:1b:10:71:1f:f7:2f:8e:8a:8a:9b:d4:5f:a4:
f3:16:49:1c:a8:a3:08:75:da:5e:6b:04:7d:32:60:
bc:fc:bc:d3:98:15:48:af:3d:25:c3:7a:05:09:65:
f9:a6:05:9a:50:74:8d:25:18:1c:fd:bb:5f:93:ef:
bb:35:71:8f:06:ae:21:17:19:f7:fc:78:29:24:64:
77:d6:ec:cd:2d:bd:4d:ec:a9:58:49:09:d7:ba:4b:
8b:df:c9:37:47:c5:71:e2:2f:74:a6:a4:e9:66:8d:
47:d2:58:11:30:e3:21:4c:6d:29:5d:93:4c:b0:1f:
8e:47:57:a9:29:2a:50:9e:d5:ff:db:a6:08:81:e9:
ec:d6:b2:72:f4:72:0b:5b:e1:a0:5f:c8:94:86:c2:
d4:ce:13:df:d1:87:c8:9a:b6:7e:13:83:73:df:18:
87:f5:b3:3f:23:d0:c8:74:94:ab:c5:44:10:2d:bd:
d1:ac:15:e2:3e:a9:a1:52:45:1b:f3:e2:72:3f:3e:
fd:f2:34:c6:77:fc:02:4d:66:14:2a:2e:4c:a5:df:
d9:9e:a6:26:33:73:44:ee:17:1e:47:61:fe:f7:fa:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F1:F3:2B:7B:B5:66:F7:CF:AC:9C:A3:17:60:8E:B4:F1:9A:60:F8
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:64:0e:9d:e1:f6:c4:1f:61:ed:f1:26:0f:e9:58:0a:d7:9e:
19:74:0d:f6:36:b1:ba:44:19:cb:5c:06:4f:8d:9e:8c:2e:f1:
ee:ea:62:53:91:16:fb:81:05:48:2b:6b:58:01:f8:81:04:e6:
85:1c:51:a8:0b:7d:a1:84:47:8a:4a:04:68:74:d9:ba:e9:12:
04:ef:bd:97:b5:bf:2b:1b:92:68:48:6a:49:93:0b:4d:d1:e3:
f9:ea:53:cf:59:30:2d:69:49:03:cd:88:c4:ae:30:8f:3f:df:
ae:bf:60:c3:e0:24:b1:29:5a:3b:8f:7e:69:bc:7d:1f:0e:b7:
44:fa:87:09:c0:ed:3c:8d:0a:3d:04:02:42:0c:54:44:59:a7:
c5:2b:ec:20:38:df:5d:92:e9:ad:b7:42:e0:0e:fd:c8:dc:48:
bf:7f:01:96:d5:0e:00:7b:49:c7:8a:fa:51:79:20:f9:3a:1c:
c8:31:c4:98:b8:b7:3a:e3:bc:c1:84:49:51:78:13:63:50:6d:
00:80:00:5b:0b:62:eb:78:7e:40:2d:c5:ae:3e:b1:da:b8:94:
21:36:b5:43:77:e5:1f:cd:c9:da:43:fa:0f:9c:40:6f:5f:6a:
6a:a0:8c:38:4f:5d:d1:44:84:dd:6f:36:64:2c:79:f7:5a:9b:
d5:16:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:34 2025 by rpki-client