Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: f+1G+5nDQGK2Et+tW2ODhpzGs87x/RNI0/6aruhK47k=
Subject key identifier: 3A:8F:C0:6A:CA:1A:51:B6:BE:C7:B0:B8:7D:5C:D0:99:85:61:57:97
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 0199FB0F2B7A933B41E4251AA141980B0DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 7F
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: 2VMJ9WQikYFEDlDpOKmAjBWdjSA.roa (hash: KpcckScBja4+tcIOvGVtG8MssUZtxxse3N+i6aa0OUk=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: sEVolHbz3JtrAPjCP8sLxCHNXo25nIAHdgCYTWaMz/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2b:7a:93:3b:41:e4:25:1a:a1:41:98:0b:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=3a8fc06aca1a51b6bec7b0b87d5cd09985615797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:c1:80:f4:c3:f9:be:f7:a3:17:1a:8a:59:
45:b8:62:bc:47:1c:e5:9c:ee:0f:b6:fe:9c:65:4c:
a7:62:ae:1a:f9:26:8d:a4:47:83:61:b7:ad:33:3e:
b8:00:41:c4:6d:6b:9c:94:e9:89:13:c4:cc:77:e2:
3c:01:d9:34:91:36:51:fe:5a:08:c6:aa:16:45:cf:
95:09:08:62:13:be:50:d9:70:fe:cb:26:90:d4:48:
80:eb:09:e0:a2:27:f9:f9:ba:8a:b0:64:c4:bf:bf:
b5:2a:be:ea:9c:5a:d6:bf:c9:88:84:c9:7e:29:08:
05:27:e3:8b:77:b1:16:52:14:e2:41:e1:e1:ad:20:
4a:57:5b:73:c8:43:1e:b9:43:34:bf:1f:af:31:97:
d2:69:66:a3:54:9e:d6:6d:94:c7:de:4d:09:21:13:
14:4a:fd:ea:7f:4e:0b:27:18:c0:8c:75:c2:af:2f:
0d:ca:af:42:fa:65:74:91:6d:2f:ad:29:3b:f9:a0:
f0:0d:66:de:2e:fa:9e:97:5a:cd:00:82:5e:d1:e9:
68:98:89:1c:6d:a2:3d:4c:99:c0:10:24:ff:01:b1:
dc:29:e8:76:3f:d2:da:c5:8c:db:02:e6:78:a8:4c:
27:52:87:d7:23:7c:91:33:6b:60:f7:de:8e:5c:61:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:C0:6A:CA:1A:51:B6:BE:C7:B0:B8:7D:5C:D0:99:85:61:57:97
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3e:cb:3a:fe:df:20:2c:c2:cc:34:d2:a3:18:46:a0:c7:2a:
db:87:6f:d0:a8:b1:db:74:7d:db:a9:99:d4:a4:2a:47:3e:f0:
af:ee:b3:29:e2:1c:aa:f4:6c:97:a9:7d:20:a9:da:6e:57:20:
61:db:f1:bd:76:9c:6d:a6:7e:69:07:c8:cb:5f:5a:7a:2d:be:
e4:e9:68:bd:84:2f:50:fd:eb:0b:ef:fa:36:e6:86:51:8c:cc:
18:7a:de:3e:28:02:50:01:4f:81:c5:b7:58:8f:b0:79:51:35:
cc:ac:5b:7e:cc:38:39:dc:43:4c:73:2a:bd:eb:93:87:95:a7:
21:84:eb:f0:e0:71:ff:1d:05:90:dc:82:0c:00:ba:f4:d0:6c:
c6:7b:db:35:0b:ac:01:cd:56:31:73:15:cd:9f:29:c8:0c:da:
72:df:68:5e:5c:12:77:23:c4:28:15:1a:4d:b5:9f:71:bb:8b:
08:b5:3c:f5:6d:dd:1a:91:16:15:7d:04:fb:f4:31:09:c0:39:
9d:eb:b3:7d:ea:c6:0c:91:b8:95:85:6b:9f:41:e2:89:a7:4c:
b8:4b:24:53:01:43:96:96:12:ef:e3:37:98:06:f0:52:c7:92:
3c:f6:41:09:11:bd:ed:99:b1:47:3c:e8:89:b6:9d:ea:a3:1f:
d9:9e:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client