Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: gysm0Woks/Kd9yCPDq1KUkWjXt4ad4KeO3sAiHwfg3Y=
Subject key identifier: DE:5D:47:F4:2B:4C:04:47:A1:58:B7:D7:FB:E5:C0:39:66:24:32:35
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019A006C1AC43F62E4944B64D70C70D7AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0B75
Signing time: Mon 20 Oct 2025 07:01:15 +0000
Manifest this update: Mon 20 Oct 2025 07:01:15 +0000
Manifest next update: Tue 21 Oct 2025 07:01:15 +0000
Files and hashes: 1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=)
2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=)
3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: uZyt+xtVyWlI5WpU/v0ebTRY6Rf1bpkc4p09cajUJns=)
4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:1a:c4:3f:62:e4:94:4b:64:d7:0c:70:d7:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Oct 20 07:01:15 2025 GMT
Not After : Oct 21 07:01:15 2025 GMT
Subject: CN=de5d47f42b4c0447a158b7d7fbe5c03966243235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:6c:04:90:8d:fa:c8:3a:b1:6e:21:93:a0:
c4:0e:88:40:0d:a1:38:ac:8a:09:89:55:9d:e0:22:
b7:4f:72:19:42:bf:41:ea:e5:ff:fc:52:fd:8e:45:
ca:fb:5d:50:da:ac:2a:62:23:1e:ec:9f:27:a9:51:
84:49:b2:8f:19:f9:60:82:22:f3:1f:3e:cb:c9:cf:
05:2e:8c:41:87:e5:a5:22:c5:d9:11:88:10:04:79:
e2:f5:02:54:03:1d:76:ac:96:bb:c1:29:f6:00:d4:
b5:0d:df:9c:e0:02:e0:9d:8c:81:04:c1:1b:4c:36:
3d:7b:0b:e8:c5:20:35:21:46:b4:34:3f:37:2d:a9:
5b:31:2c:86:b8:c0:61:da:6f:8c:a8:0f:93:9d:6a:
b9:7b:49:65:ab:16:c6:21:63:31:9b:80:d2:f2:20:
25:a6:95:7d:25:dd:af:79:25:df:e1:79:46:ea:d2:
33:c1:ad:72:2a:c1:c9:66:33:9a:e6:29:18:7c:93:
d0:50:73:da:6c:8a:81:28:88:8e:65:a0:be:af:7e:
b2:b4:0a:13:83:f6:d3:ef:f9:54:75:0b:d2:f0:97:
d3:94:07:f6:2c:2f:e5:13:62:8e:f3:c4:53:74:12:
d5:6c:8f:21:1d:fd:10:21:22:26:ac:06:62:93:8a:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:47:F4:2B:4C:04:47:A1:58:B7:D7:FB:E5:C0:39:66:24:32:35
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:1d:ab:87:cf:3f:a6:31:bb:53:93:0b:fd:d9:4c:0d:cb:
c1:63:0c:9a:01:50:e2:6a:16:e5:ff:00:23:0e:c9:87:b4:71:
a6:26:e3:3f:71:03:a9:cd:e7:29:9f:08:4b:eb:d2:57:97:62:
19:e7:49:1c:05:37:07:e7:4d:a5:9e:ec:ea:02:59:98:a4:2f:
55:4f:5e:87:66:43:4c:55:84:ad:28:8a:b7:3e:cf:60:c8:7f:
29:88:10:26:a6:62:84:57:dd:56:68:9e:aa:7a:c6:f3:8b:84:
c0:35:e1:a6:e9:7e:98:70:50:33:8e:5f:fd:9a:23:a0:8b:45:
32:56:b1:8c:25:4e:79:fd:f6:0c:b9:d3:d8:48:4d:5f:e8:8c:
9e:ea:05:44:aa:da:f4:2b:c8:78:44:20:5d:cf:28:f6:05:d0:
07:68:0e:3e:8c:89:47:84:8d:18:9b:fb:fe:93:dd:a4:e0:dc:
08:5e:82:be:79:0e:5d:8d:f8:36:8b:5f:e4:43:0b:5a:9b:06:
56:7c:11:87:e5:ba:93:75:15:bf:ff:f0:e2:8b:8c:17:29:1e:
67:a9:1d:c9:00:2a:e4:54:5d:bd:88:f4:07:3b:3e:0d:d9:42:
33:43:20:f5:0b:6c:84:fc:29:e8:eb:c2:d0:4e:b2:1c:87:68:
cd:e8:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:01 2025 by rpki-client