Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: mFH8pKzMEC8Ub+7B2NdIxiIeT54JUZwupq4Q4h3dfWU=
Subject key identifier: C7:45:9B:B3:4E:34:83:80:5E:24:8B:8F:43:D6:D0:39:BC:F2:8A:38
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 0199FBEBAF73C55DB0BC90002605F9D4F6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: cP5j/H0Enkw+UPNmZBoJJu0Et4AmeAc2JAM5YlAYra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:af:73:c5:5d:b0:bc:90:00:26:05:f9:d4:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=c7459bb34e3483805e248b8f43d6d039bcf28a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:ee:8b:4e:3b:bb:42:13:23:f4:77:2a:05:
be:bf:46:c7:fa:c6:0f:2e:b7:88:b8:9d:0e:2f:b0:
a2:44:ad:9d:52:8f:f7:87:f4:99:e9:ba:e2:57:28:
4c:2b:ec:7b:d0:5c:bc:3c:1f:51:69:c6:84:27:6d:
c4:3b:4c:b0:89:16:76:e1:5c:e3:dd:ac:1d:d6:70:
a7:06:70:f6:65:84:44:9a:8e:a3:37:6b:86:6e:a1:
40:4f:0d:c6:22:1f:40:c5:2e:2f:69:ed:27:a4:e4:
85:ae:6d:c4:93:6a:d0:26:48:f4:7b:10:91:fc:58:
b1:5f:a1:02:06:a7:6e:6a:13:7b:b6:71:9e:fe:90:
b9:61:1a:d0:15:19:25:fc:1d:f6:ac:19:95:bf:69:
af:3f:7f:1d:0f:05:a0:61:52:d9:49:38:dd:45:af:
b1:ba:d2:a9:d5:50:f8:3d:c3:bf:49:e9:4c:46:4c:
04:07:65:40:d8:34:2f:9f:a4:ef:53:32:45:a2:e7:
e0:ef:43:e5:2e:1d:ea:7d:74:45:ab:65:f1:15:14:
ff:0d:c7:39:97:71:ec:f0:1a:f4:e1:d1:a3:a4:59:
21:d1:ec:19:f2:97:46:a5:b2:e1:0c:b0:7d:10:0d:
f2:b7:0f:b8:33:d4:4c:17:59:1f:b0:e6:88:b8:72:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:9B:B3:4E:34:83:80:5E:24:8B:8F:43:D6:D0:39:BC:F2:8A:38
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:92:42:e5:f0:38:72:40:fc:aa:4a:a6:45:76:d5:84:2c:
45:86:8e:bf:07:b9:e7:b0:43:b1:cb:e8:cd:50:35:ee:08:e4:
17:fe:6b:0f:da:d1:eb:bc:c8:05:a3:50:ba:03:66:53:0d:72:
bc:49:94:4d:b8:42:8c:4d:bb:19:5f:5d:a6:d8:68:7a:e0:60:
cf:da:fe:82:66:7b:16:40:3c:b8:dd:32:bf:0c:64:e2:f3:89:
83:48:46:ec:01:88:ef:45:5a:29:c5:e4:7e:6a:58:91:01:af:
b3:73:0b:53:81:ff:8d:ac:4a:5f:a1:35:67:ad:af:98:db:82:
7a:04:54:8e:0d:a4:16:fc:46:5c:1f:4a:8e:e1:b5:2c:cd:2b:
a4:7a:b1:0a:63:66:9a:e3:b9:cc:37:6d:1d:47:ab:5f:02:0b:
82:eb:58:60:34:17:f4:8b:3b:50:2a:b7:d5:ff:ba:5b:42:0d:
39:94:ea:17:45:40:2e:8c:3b:7c:d9:76:65:c5:f0:df:34:b9:
35:6c:2f:19:2f:87:a9:f1:9b:cb:49:49:be:b1:6a:d4:87:d2:
1c:d3:f9:e7:66:ca:69:c7:26:ee:c3:63:6d:37:03:aa:00:c4:
cf:f6:e9:cc:d9:08:68:73:d4:2d:41:ba:0e:18:bd:79:60:7b:
be:5d:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:29 2025 by rpki-client