Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: kn8zQN3J+gk/He1UIt0mu7fbtMsb+EaeKqOhjvvD+JQ=
Subject key identifier: 0E:B3:AC:38:0C:D7:0E:CA:41:A3:11:D2:1A:26:C4:63:4F:E7:3A:57
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 0199FCC65AAADCF50586CC7EB9F9D620C5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 08D0
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: ItW2YWRH45pXrao25gWChijQZZ6nLSjQTZliXNY2LUA=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5a:aa:dc:f5:05:86:cc:7e:b9:f9:d6:20:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=0eb3ac380cd70eca41a311d21a26c4634fe73a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:3e:31:2e:0c:47:61:62:0f:33:7a:bb:67:
8a:db:e9:a2:ba:22:73:96:9c:4d:01:85:c3:19:a6:
a8:73:c0:a0:16:94:1c:81:c1:8b:45:4e:9f:46:96:
80:84:d6:08:ae:1e:a2:d6:58:85:a0:e8:30:2f:71:
68:f2:1d:17:3b:b0:4c:6c:d1:63:8b:e9:a7:a4:76:
29:d0:f2:41:2a:86:8f:1d:af:67:51:7c:0c:08:89:
5d:89:8d:99:e8:ca:0b:1c:d8:13:27:4f:42:db:ab:
ab:ed:4a:4b:34:c3:0c:60:9a:d0:3a:52:85:30:e5:
5a:2b:23:ff:52:bf:88:20:16:02:b2:58:a7:f9:e6:
64:4f:48:8e:db:30:28:bd:60:c8:7a:a5:d4:4d:ac:
d3:9e:ea:7d:36:b6:19:0a:35:91:5e:a8:82:b3:98:
4a:8d:8c:8c:4e:99:61:46:b1:87:e4:c8:62:e1:3f:
96:b6:c2:e6:1d:38:5e:78:91:8a:e7:66:0c:14:78:
dc:6c:38:62:f1:c2:4d:50:c6:44:78:25:b7:e1:9a:
68:be:d0:d2:f5:1e:5d:54:9a:7e:36:97:aa:69:e8:
5f:97:51:e0:c2:55:47:61:dc:33:c1:1e:69:8f:57:
42:93:61:ff:05:8f:3c:25:5d:00:96:b3:02:6b:da:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:AC:38:0C:D7:0E:CA:41:A3:11:D2:1A:26:C4:63:4F:E7:3A:57
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:b1:d3:7f:82:12:80:3b:0f:2c:4c:5c:80:e1:3c:52:6e:
bd:fb:ed:1d:69:a1:02:95:5c:ad:97:3b:7d:aa:28:b5:1b:3c:
d2:ed:77:81:79:7a:65:9e:7c:28:4a:12:42:ee:45:6a:34:15:
cd:d6:a9:69:a1:4d:4c:14:b0:c3:4c:ef:c7:e2:39:e9:97:cb:
c6:79:95:1a:66:f7:d8:63:77:a5:71:bd:fa:20:ac:77:42:0b:
73:97:e3:70:b5:5e:1c:67:31:aa:b0:a2:fb:b8:b4:62:e8:4a:
7c:36:dc:85:28:5c:29:d0:46:76:19:4a:3f:b0:5b:42:92:b9:
27:c5:d1:0c:9f:01:93:b1:db:35:01:c4:fd:0d:e2:25:cd:6a:
8f:62:6e:4f:a8:2b:eb:db:f3:9b:24:c8:96:94:a5:6e:b6:db:
9d:ac:27:26:8c:4f:e9:dd:a0:0d:36:21:75:5b:d2:0e:c6:5d:
3d:47:4e:3d:1d:85:11:f9:0d:31:32:73:3e:22:2c:c2:c0:18:
f2:fd:88:e6:83:78:2b:b5:c7:5d:a6:c6:6b:41:7d:9c:e4:eb:
cd:c3:42:15:3b:46:e5:b2:13:df:83:f8:bf:37:df:c4:c4:0f:
2e:fa:38:f6:0d:ed:8c:19:65:5f:7c:cc:4e:0e:d5:30:8f:58:
88:fe:38:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlqq3PUFhsx+ufnWIMXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2
NjAwYTYwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD
EygwZWIzYWMzODBjZDcwZWNhNDFhMzExZDIxYTI2YzQ2MzRmZTczYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRU+MS4MR2FiDzN6u2eK2+miuiJz
lpxNAYXDGaaoc8CgFpQcgcGLRU6fRpaAhNYIrh6i1liFoOgwL3Fo8h0XO7BMbNFj
i+mnpHYp0PJBKoaPHa9nUXwMCIldiY2Z6MoLHNgTJ09C26ur7UpLNMMMYJrQOlKF
MOVaKyP/Ur+IIBYCslin+eZkT0iO2zAovWDIeqXUTazTnup9NrYZCjWRXqiCs5hK
jYyMTplhRrGH5Mhi4T+WtsLmHTheeJGK52YMFHjcbDhi8cJNUMZEeCW34ZpovtDS
9R5dVJp+Npeqaehfl1HgwlVHYdwzwR5pj1dCk2H/BY88JV0AlrMCa9p24wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6zrDgM1w7KQaMR0homxGNP5zpXMB8GA1UdIwQY
MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt
MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0
LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcix03+C
EoA7DyxMXIDhPFJuvfvtHWmhApVcrZc7faootRs80u13gXl6ZZ58KEoSQu5FajQV
zdapaaFNTBSww0zvx+I56ZfLxnmVGmb32GN3pXG9+iCsd0ILc5fjcLVeHGcxqrCi
+7i0YuhKfDbchShcKdBGdhlKP7BbQpK5J8XRDJ8Bk7HbNQHE/Q3iJc1qj2JuT6gr
69vzmyTIlpSlbrbbnawnJoxP6d2gDTYhdVvSDsZdPUdOPR2FEfkNMTJzPiIswsAY
8v2I5oN4K7XHXabGa0F9nOTrzcNCFTtG5bIT34P4vzffxMQPLvo49g3tjBllX3zM
Tg7VMI9YiP44pA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:52 2025 by rpki-client