
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier: 7eL3sM7mnUqyBdC2keBHF4aqUwoxx/OVWLUPFOMEyfI=
Subject key identifier: 8B:A6:4F:99:00:3D:3F:EB:8B:8B:E4:AF:88:95:FE:C3:97:15:3E:12
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 0199FC21E03B878DB5DDF046C65C0011851A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:42 +0000
Manifest this update: Sun 19 Oct 2025 11:01:42 +0000
Manifest next update: Mon 20 Oct 2025 11:01:42 +0000
Files and hashes: 1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: Mjv/vWgu3HCPpk1V7M6A4vzmEfA55jOPgUcz1uQZiyk=)
4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:e0:3b:87:8d:b5:dd:f0:46:c6:5c:00:11:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Oct 19 11:01:42 2025 GMT
Not After : Oct 20 11:01:42 2025 GMT
Subject: CN=8ba64f99003d3feb8b8be4af8895fec397153e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:3d:ca:1d:28:3b:bd:bd:9e:43:2b:af:89:
14:a6:c9:51:ae:e5:20:d4:f2:bb:1f:72:9a:6b:fa:
b3:8a:0d:e4:25:25:41:05:29:33:c2:d2:61:07:90:
c5:b8:81:00:b0:8d:6c:4c:e7:44:fe:fc:2e:bd:b7:
7b:d8:de:21:29:cc:bc:92:25:47:24:47:a1:fc:fb:
83:d1:06:78:bc:74:21:a5:0a:46:ba:13:6e:2a:5d:
40:8b:af:50:93:57:f4:40:44:e7:d7:ff:97:88:0c:
5d:cc:ec:ac:10:15:84:e9:60:4f:44:b3:9d:d8:74:
35:97:16:0a:1e:6d:14:c5:b5:92:a6:eb:17:5a:49:
a0:2c:2b:a2:83:bc:00:97:b5:8c:22:5c:ac:30:d1:
f8:ab:6c:84:4f:d4:21:19:29:b4:86:8b:aa:74:56:
18:85:71:d9:e2:e5:76:0f:0b:88:df:fa:b2:22:cf:
4b:89:5b:f4:c6:00:5c:cb:7d:d4:0b:17:96:85:e1:
07:90:a4:39:30:5a:59:7d:fc:5a:53:40:3d:14:55:
3c:70:28:44:fc:2a:79:0b:bd:83:c6:42:3e:16:58:
73:42:01:da:cd:74:41:0d:61:0b:11:e0:e6:3a:05:
21:31:62:ac:48:52:c9:3d:61:c0:96:8f:ab:6b:af:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A6:4F:99:00:3D:3F:EB:8B:8B:E4:AF:88:95:FE:C3:97:15:3E:12
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:ee:a8:20:b0:17:e2:5b:97:71:78:ca:ea:b9:fa:d8:aa:
bd:e2:8a:80:c8:45:80:dc:4e:8b:c6:29:e8:3a:3c:84:c1:41:
80:5a:40:be:35:6c:dc:97:75:38:0a:dd:0f:80:e4:61:7a:1e:
68:a5:9a:c9:70:09:e1:16:49:60:ee:fe:ab:82:63:31:9b:b2:
68:96:fb:91:49:6f:ae:cc:4b:9a:c1:ac:96:37:14:c9:96:3a:
22:f5:60:92:04:f6:a9:39:50:9f:d7:5c:c9:fd:1e:ea:d7:4d:
9e:bd:67:ee:4c:4a:4a:15:13:dd:3f:3c:3a:16:17:ad:04:1e:
2f:2f:f8:32:fe:bd:6b:35:16:a2:ff:0b:c4:6d:c9:66:eb:94:
7f:7d:1b:50:eb:0c:cb:f3:1f:76:31:9d:b4:56:c4:d6:d4:17:
87:69:61:b1:79:3b:21:08:7a:ce:e3:56:24:5a:cb:2d:bb:5e:
72:2a:2d:26:8f:f4:10:10:83:c6:b8:18:81:85:c3:10:e1:63:
33:28:89:6c:c5:2d:be:b0:7c:00:2c:71:78:a2:2a:e1:46:5d:
fd:38:a4:11:51:e9:4d:d2:35:4f:ba:39:76:51:51:2e:07:6e:
85:d4:a8:fb:09:50:84:97:0b:60:d7:7d:6f:ae:eb:46:ca:97:
ab:4b:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client