Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: UYKaQSVnDS1Cjz0Rvkz6Ic68QSrau3E2SLwP/7Y5B18=
Subject key identifier: 77:2A:BB:F5:69:0C:B5:37:60:34:B8:01:E8:6C:D4:30:7A:A3:13:24
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 019A02234270368B9C6ACD544DBEAD439754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 0150
Signing time: Mon 20 Oct 2025 15:00:56 +0000
Manifest this update: Mon 20 Oct 2025 15:00:56 +0000
Manifest next update: Tue 21 Oct 2025 15:00:56 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: 9s5Ujx4fI+QI5B90sVha7ojOEfdCAbALPv16NnmzMTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:42:70:36:8b:9c:6a:cd:54:4d:be:ad:43:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Oct 20 15:00:56 2025 GMT
Not After : Oct 21 15:00:56 2025 GMT
Subject: CN=772abbf5690cb5376034b801e86cd4307aa31324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:d8:3c:72:97:20:70:8e:ad:3f:12:ad:c8:
16:a1:69:61:ee:a9:73:2e:21:cf:0e:c1:d6:86:ac:
34:e9:f1:7f:d2:a6:7d:e1:dc:f8:ab:e8:7b:9a:6d:
6a:c9:bb:3d:ea:5c:81:3b:66:73:23:7d:00:80:2b:
f1:8b:86:b4:40:34:5e:94:b0:d3:c7:64:f7:fa:46:
5a:d0:e3:04:6e:ca:30:b5:d7:a0:d9:1a:3d:f4:75:
ce:d9:48:04:f5:43:db:7b:a2:d1:3b:b7:a4:e5:d8:
f6:3e:45:a7:06:f7:ca:93:44:f7:68:bc:e5:1d:f9:
0f:a0:40:ed:12:aa:d8:a8:12:9c:2d:9c:ad:7b:bf:
9f:c7:02:35:40:22:d9:56:5b:25:17:9d:5a:d6:bd:
f2:1d:60:78:cf:63:cf:0f:00:d6:77:db:ba:21:7d:
51:eb:75:e8:0d:32:6b:da:cd:2f:bb:43:45:01:9c:
be:5a:33:9f:76:f7:27:ca:fa:f3:08:44:ec:92:09:
48:86:90:8f:0e:a3:53:2d:7b:65:bd:47:67:dd:87:
d8:d1:fc:8d:38:3f:f6:2a:db:5d:22:e7:24:6b:72:
27:bf:8e:ce:ee:14:fd:e5:f9:8d:47:96:54:0a:6a:
b9:c0:84:55:59:74:29:4f:ae:ef:ae:3f:3f:90:09:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:BB:F5:69:0C:B5:37:60:34:B8:01:E8:6C:D4:30:7A:A3:13:24
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3f:7f:96:4f:2f:b4:d0:f1:ba:cb:7d:3b:6d:25:2e:d2:13:
6b:b1:cd:a6:46:46:19:2f:e4:45:bb:b3:82:fa:54:2b:44:de:
5c:5a:85:71:52:3e:c3:64:3c:41:bb:a2:18:aa:11:7d:80:07:
59:5f:e4:f5:27:b5:f9:df:81:43:28:aa:11:63:22:cb:d3:f5:
32:09:52:47:fd:88:36:a4:c0:7c:0c:ba:f5:b3:05:ee:3e:82:
32:0a:59:80:f2:d2:93:91:43:64:0a:1e:88:84:d0:70:f0:48:
6e:10:fd:fc:63:da:be:aa:04:08:06:56:86:17:4f:06:d5:3c:
e9:10:d3:e2:2f:e6:d9:b3:2e:28:fe:97:68:87:b5:48:90:23:
73:21:b2:ff:4b:fc:42:b1:d6:56:40:85:ed:f7:1e:89:56:2b:
27:f5:12:42:df:3a:a7:8c:8d:2a:77:f7:87:1e:75:d9:67:8c:
b9:28:cf:ed:64:7b:2c:39:65:41:7f:75:60:dd:20:b9:82:64:
98:25:e6:42:6a:bc:18:fd:71:c5:98:fe:da:97:b7:da:84:0a:
56:8a:a0:17:26:f8:ea:cd:a3:18:4a:8e:78:c3:4a:7e:f3:bc:
15:be:d0:fb:b7:30:48:7a:a6:02:42:b7:62:03:9c:30:42:b0:
b1:2d:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:55 2025 by rpki-client