Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: nztAbRlRarPxboqOFg4os/0EwWKmD5NvvE8QrF8lxUo=
Subject key identifier: F5:C6:87:AB:B3:51:BB:A3:D6:36:CE:60:04:63:B9:29:94:C3:EA:30
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019A51F565AE85B8EA2A104DDFECCDBD94C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 15E3
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: YU8kNBqvNK6WVoHCgJz7G9zbNeijv71zMx60UCAqBQ4=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:65:ae:85:b8:ea:2a:10:4d:df:ec:cd:bd:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=f5c687abb351bba3d636ce600463b92994c3ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:79:9d:0e:f4:28:aa:70:0a:8c:1e:54:91:
23:6d:3d:bd:62:ef:6b:6e:50:e5:77:b1:7f:45:55:
15:0c:59:98:37:3b:ac:23:0a:b0:c0:63:26:14:d5:
d0:e6:85:20:39:09:2a:3d:21:1a:e5:0f:f2:0f:c9:
5d:35:53:e7:03:ff:a4:e2:09:ae:91:5e:38:11:bf:
28:c4:02:b3:0b:d3:ea:9e:0f:d6:5b:b0:18:63:86:
13:58:5d:55:ea:38:0e:0a:81:24:ef:cf:29:9a:83:
e3:c4:4f:74:58:1b:3c:4b:56:d6:f2:68:4a:0c:83:
6b:fb:59:45:ef:96:1f:a1:8b:25:31:2d:16:39:61:
be:e6:b6:a2:08:7d:14:05:7b:0c:6c:8d:1e:de:d5:
01:87:a8:a6:20:6b:09:be:69:06:44:11:8d:67:f3:
6c:aa:d5:f4:25:5f:23:f6:29:37:d8:89:df:95:c7:
22:70:6e:13:c9:0b:38:ef:dc:ae:1c:7c:f4:77:e4:
bb:8a:24:4d:53:27:d9:85:ef:ad:ca:bf:12:42:02:
76:e4:87:af:b9:04:29:3e:80:f2:2e:57:8a:3a:b3:
a7:b5:f1:cd:ed:e9:86:51:f6:ac:1c:38:7d:9c:4c:
67:da:d6:7f:8b:5b:82:f4:45:0e:05:28:ff:e5:b3:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:87:AB:B3:51:BB:A3:D6:36:CE:60:04:63:B9:29:94:C3:EA:30
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:ab:72:fc:51:73:a9:b2:cd:c5:d2:78:71:7c:3e:f1:f3:
c1:89:9c:04:2a:84:db:04:aa:8d:4c:27:9f:f6:35:48:85:2b:
6a:c7:14:fd:9c:f8:df:32:00:43:3e:8d:40:ca:94:62:0a:79:
56:7b:53:1b:01:94:c0:04:87:ca:e6:16:7f:f4:ba:e4:73:1f:
72:ab:74:cd:14:ed:22:43:58:27:3d:3d:4b:da:f4:3e:9d:c2:
21:b8:ff:5c:8e:25:20:11:cf:8b:c5:0a:bb:e9:27:c6:70:df:
af:6d:77:48:6f:0a:0c:f7:f7:ef:a6:ed:53:fd:16:a1:ae:bc:
ac:38:9a:9e:f4:86:60:cd:65:ff:0f:e0:69:d4:04:3b:1c:d5:
2a:e5:62:fc:fb:35:a9:e6:7a:aa:f6:be:2c:2d:05:9e:8e:65:
f3:b2:4b:3f:80:c9:ad:33:d0:db:6c:2b:59:03:52:fb:a9:ba:
4d:d9:ed:5b:ce:ec:1b:90:eb:b1:cf:fa:00:33:97:24:f6:f3:
02:47:af:b3:79:ee:6b:62:fb:bf:0f:6d:18:4a:15:8d:06:7c:
80:1a:e5:8a:78:57:6a:52:4d:de:13:41:73:4d:35:e1:19:32:
bf:38:1f:d7:de:dd:b7:fd:17:22:e0:60:2a:30:65:1e:e6:16:
b7:f2:fa:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9WWuhbjqKhBN3+zNvZTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw
ZGE5MzIwHhcNMjUxMTA1MDMwMDI3WhcNMjUxMTA2MDMwMDI3WjAzMTEwLwYDVQQD
EyhmNWM2ODdhYmIzNTFiYmEzZDYzNmNlNjAwNDYzYjkyOTk0YzNlYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthh5nQ70KKpwCoweVJEjbT29Yu9r
blDld7F/RVUVDFmYNzusIwqwwGMmFNXQ5oUgOQkqPSEa5Q/yD8ldNVPnA/+k4gmu
kV44Eb8oxAKzC9Pqng/WW7AYY4YTWF1V6jgOCoEk788pmoPjxE90WBs8S1bW8mhK
DINr+1lF75YfoYslMS0WOWG+5raiCH0UBXsMbI0e3tUBh6imIGsJvmkGRBGNZ/Ns
qtX0JV8j9ik32InflccicG4TyQs479yuHHz0d+S7iiRNUyfZhe+tyr8SQgJ25Iev
uQQpPoDyLleKOrOntfHN7emGUfasHDh9nExn2tZ/i1uC9EUOBSj/5bPKNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXGh6uzUbuj1jbOYARjuSmUw+owMB8GA1UdIwQY
MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt
MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx
LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh+rcvxR
c6myzcXSeHF8PvHzwYmcBCqE2wSqjUwnn/Y1SIUrascU/Zz43zIAQz6NQMqUYgp5
VntTGwGUwASHyuYWf/S65HMfcqt0zRTtIkNYJz09S9r0Pp3CIbj/XI4lIBHPi8UK
u+knxnDfr213SG8KDPf376btU/0Woa68rDianvSGYM1l/w/gadQEOxzVKuVi/Ps1
qeZ6qva+LC0Fno5l87JLP4DJrTPQ22wrWQNS+6m6TdntW87sG5Drsc/6ADOXJPbz
Akevs3nua2L7vw9tGEoVjQZ8gBrlinhXalJN3hNBc0014Rkyvzgf197dt/0XIuBg
KjBlHuYWt/L6MQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:21 2025 by rpki-client