Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 4lYVdGbsokBhxdJvL3wxXmbTZz+MC6hDQVyHhlE7zw4=
Subject key identifier: 91:C9:B1:0D:5C:B3:CE:CA:50:99:5D:DD:F9:58:73:75:0E:80:E9:ED
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019A52D179C4902858D874CA5FAC908CE684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0559
Signing time: Wed 05 Nov 2025 07:00:51 +0000
Manifest this update: Wed 05 Nov 2025 07:00:51 +0000
Manifest next update: Thu 06 Nov 2025 07:00:51 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: Eikc1tVtA2EQywwQ9TqHYlRIHq5/fYj6Yg07N2w4aAk=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:79:c4:90:28:58:d8:74:ca:5f:ac:90:8c:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Nov 5 07:00:51 2025 GMT
Not After : Nov 6 07:00:51 2025 GMT
Subject: CN=91c9b10d5cb3ceca50995dddf95873750e80e9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:84:71:11:5a:a0:ca:bc:3b:a1:8d:ef:f1:
8d:76:d6:d1:3b:d4:1a:a8:94:ec:b3:8e:e0:07:65:
75:26:e7:4d:c5:f0:12:68:0d:6e:e7:82:33:b7:c0:
cb:a4:1b:2d:ed:df:d8:b4:a1:3e:b3:6d:1f:52:0c:
49:7b:4a:77:f3:28:23:12:42:6e:d3:63:62:03:f0:
2f:28:3f:1d:1f:ae:f9:99:64:bd:f4:50:13:be:37:
35:8b:8f:57:0c:83:9d:31:26:e2:a0:ab:8b:cf:1c:
e3:33:42:46:77:53:3f:5e:e3:e2:85:ed:7f:d4:ec:
85:83:c3:c7:6d:36:17:8b:d3:7d:f1:ef:ff:be:28:
95:f9:33:e7:d2:6c:fc:d1:63:92:15:de:4f:1b:25:
0b:b4:7a:c2:77:d3:c9:d3:4b:ac:28:47:8a:53:0f:
09:74:b4:ee:03:12:c4:85:80:b3:13:30:24:7e:fc:
a0:51:15:81:bf:9a:2c:ad:4e:2e:e9:15:21:e3:d9:
ca:d3:fc:27:54:2c:3c:d2:c9:ec:b7:55:d0:74:29:
fd:6a:45:0f:de:8a:d6:28:1c:bf:a9:f6:b8:69:74:
40:e0:35:d0:84:9f:e1:e3:ce:ec:1a:28:ee:ba:ab:
b2:84:51:ea:f2:62:ab:6b:db:75:5e:ce:8f:27:8e:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:B1:0D:5C:B3:CE:CA:50:99:5D:DD:F9:58:73:75:0E:80:E9:ED
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:7f:6d:d1:2a:6e:19:80:df:7d:44:10:f5:71:db:ad:26:
20:0d:fc:18:61:d6:9f:df:a6:aa:7e:ff:a8:c3:3b:c5:3c:99:
4b:5e:1d:df:70:79:66:a8:c4:8a:cc:e6:c1:f1:e5:ee:43:d3:
61:f8:0d:d6:16:eb:7d:3e:87:49:56:ea:4b:6f:73:47:35:cd:
c5:d4:a2:d2:a8:da:8f:89:52:05:77:cc:06:78:06:59:36:33:
e5:78:09:28:15:a2:ed:14:7f:7e:18:eb:02:dc:18:7c:e6:8d:
e5:33:be:94:77:f9:3c:c5:d1:a3:5b:67:5b:ee:82:20:43:a3:
80:be:0f:82:cc:58:f4:7a:0d:7f:5f:1e:1e:04:65:ef:c7:b3:
dc:25:74:34:93:b0:60:d7:a7:75:16:65:3e:a5:a8:5b:65:b6:
3c:f1:91:e8:d6:6a:14:a5:1f:fb:de:52:61:9d:15:aa:02:d9:
fa:d3:93:d5:4b:f5:35:f9:bb:3d:0f:83:f6:dd:3b:5a:10:f7:
36:b2:d4:ad:36:ab:4a:d3:73:17:5a:a7:11:ed:c0:58:02:fe:
8d:45:42:01:31:27:2f:19:36:c3:d9:99:ec:96:5c:6d:b3:fc:
a6:60:c1:30:97:92:01:da:b9:89:26:28:3e:aa:84:89:7d:f4:
1d:bd:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:28 2025 by rpki-client