Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: pHv8LJbZYxRWMtiz1DyB1DdzMPfpUXWDru0zPidB2ac=
Subject key identifier: DE:D0:2F:50:2F:59:85:06:76:E7:F7:F6:60:56:61:44:00:27:4C:C8
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 01987418FBB45007557DFEB5CCF58846E0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0B6F
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: lgGu6YNXCJ6G8QQ3c0eONHZ9n3A+33XFOqE+bS0NfQY=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fb:b4:50:07:55:7d:fe:b5:cc:f5:88:46:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=ded02f502f59850676e7f7f66056614400274cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:e3:d1:42:c2:47:a0:e8:3d:96:36:c6:ca:
9a:01:08:10:9d:9f:da:e2:6f:5d:e7:c5:b1:9d:cf:
d8:b0:61:29:a8:60:43:db:95:3e:1a:08:85:5b:fe:
2f:ba:87:10:bb:5c:22:00:82:38:6f:42:1a:10:ae:
e8:df:f5:49:5c:32:eb:1a:70:c5:7f:19:29:86:a9:
23:c0:09:c9:c3:5c:f1:44:65:fa:b8:0b:54:80:e7:
90:91:4a:df:62:1c:5c:68:8f:f3:b3:15:92:10:36:
ed:30:1d:10:91:0f:e5:10:77:e3:78:5b:54:62:5e:
92:e7:03:a8:16:5c:96:54:5b:5d:50:84:fc:3e:06:
61:12:b7:4b:88:2f:c3:1d:84:d5:29:25:a9:75:bb:
ea:74:af:c6:60:87:df:1c:6c:f3:45:2b:a6:f8:06:
c8:8b:96:da:52:b7:43:ed:65:a5:4f:7a:ec:11:c3:
8e:09:56:be:bb:4d:87:e2:84:28:0a:75:45:4c:7f:
b2:a5:96:75:f5:c6:99:09:92:65:f3:45:a5:3d:3b:
2a:20:87:21:6d:9b:3d:18:b2:30:cc:1f:96:6a:86:
c4:ed:3f:bc:0b:95:81:a4:74:bd:da:98:c4:ac:75:
8a:60:58:9b:c7:37:79:f9:fc:65:fc:ba:5d:60:23:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:2F:50:2F:59:85:06:76:E7:F7:F6:60:56:61:44:00:27:4C:C8
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:c3:9d:bc:23:9f:f6:a6:5b:5c:8a:08:65:d4:89:c9:d2:
76:51:ad:57:2f:e7:c4:99:84:6a:c3:0a:7d:d8:eb:9a:df:af:
a2:c0:fe:e4:f1:bb:51:9a:c5:b6:04:b2:05:80:c9:d5:e7:63:
bc:c9:ca:48:00:e4:35:f3:36:db:e5:4a:1f:c3:61:d6:8b:d4:
0c:2b:47:3e:b2:f9:58:63:71:2f:11:4a:66:ad:e5:74:6d:20:
75:48:c5:aa:09:e2:78:94:7c:44:b9:13:c2:6d:a9:6a:58:75:
21:92:5d:1f:1f:72:a4:83:e7:59:f2:50:35:da:32:48:70:6c:
8a:d8:53:72:32:c2:6a:c9:d4:d9:20:3e:88:7a:73:a5:f1:fc:
be:1e:91:25:ba:7d:45:04:c1:9f:90:81:0b:66:f5:ef:9b:07:
e2:85:a9:a6:f7:b9:7d:4b:c9:74:56:4a:22:e9:66:dc:16:4e:
04:31:55:8f:e9:a6:19:33:02:89:cd:5a:00:f2:44:2f:4e:d1:
fe:b2:01:44:4c:2a:33:ec:bc:76:c9:8f:1c:02:0a:2e:21:91:
de:6f:c0:b1:3b:0b:a4:a6:77:29:27:72:ed:51:61:10:24:82:
8a:7e:bb:25:f1:6a:a4:d6:1e:a1:b4:df:ed:df:a3:5a:4a:0d:
41:72:40:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPu0UAdVff61zPWIRuDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy
MjhkYmIwHhcNMjUwODA0MDgwMDUxWhcNMjUwODA1MDgwMDUxWjAzMTEwLwYDVQQD
EyhkZWQwMmY1MDJmNTk4NTA2NzZlN2Y3ZjY2MDU2NjE0NDAwMjc0Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWDj0ULCR6DoPZY2xsqaAQgQnZ/a
4m9d58Wxnc/YsGEpqGBD25U+GgiFW/4vuocQu1wiAII4b0IaEK7o3/VJXDLrGnDF
fxkphqkjwAnJw1zxRGX6uAtUgOeQkUrfYhxcaI/zsxWSEDbtMB0QkQ/lEHfjeFtU
Yl6S5wOoFlyWVFtdUIT8PgZhErdLiC/DHYTVKSWpdbvqdK/GYIffHGzzRSum+AbI
i5baUrdD7WWlT3rsEcOOCVa+u02H4oQoCnVFTH+ypZZ19caZCZJl80WlPTsqIIch
bZs9GLIwzB+WaobE7T+8C5WBpHS92pjErHWKYFibxzd5+fxl/LpdYCMDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7QL1AvWYUGduf39mBWYUQAJ0zIMB8GA1UdIwQY
MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et
N2ZhNWViY2Y1NzRlLzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl
LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdnDnbwj
n/amW1yKCGXUicnSdlGtVy/nxJmEasMKfdjrmt+vosD+5PG7UZrFtgSyBYDJ1edj
vMnKSADkNfM22+VKH8Nh1ovUDCtHPrL5WGNxLxFKZq3ldG0gdUjFqgnieJR8RLkT
wm2palh1IZJdHx9ypIPnWfJQNdoySHBsithTcjLCasnU2SA+iHpzpfH8vh6RJbp9
RQTBn5CBC2b175sH4oWppve5fUvJdFZKIulm3BZOBDFVj+mmGTMCic1aAPJEL07R
/rIBREwqM+y8dsmPHAIKLiGR3m/AsTsLpKZ3KSdy7VFhECSCin67JfFqpNYeobTf
7d+jWkoNQXJAKg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:50 2025 by rpki-client