Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: flK6DY2/+pYSHsrJMycwkW6lelm4QBRQF0QIPQO2YHM=
Subject key identifier: 47:BE:58:73:26:23:22:5D:F7:98:D4:1B:56:D0:DE:73:84:4C:DE:58
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 019A4F2B8AE26549BB1490E7A3ECFC5B8B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0C65
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: fhuChGrCMuvH53vI6NTMabWIyCXJVVVeYrt1yMlOzGI=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8a:e2:65:49:bb:14:90:e7:a3:ec:fc:5b:8b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=47be58732623225df798d41b56d0de73844cde58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:d5:3d:d7:ad:d4:08:12:5e:08:ab:e2:64:
48:8e:17:4b:d5:81:9a:34:71:4b:51:a9:05:40:cb:
50:ba:2f:c9:eb:70:40:99:c4:90:c5:2f:11:0d:73:
60:9f:3c:58:3d:17:49:80:e7:be:d7:5f:e8:34:cb:
05:6c:7a:77:2f:da:76:ab:7b:6a:f7:5a:d1:ff:d0:
e6:66:dd:8c:71:f9:ee:5d:98:6d:25:66:52:68:0f:
8f:67:53:6f:5b:82:af:fc:83:24:c7:f7:64:2a:9f:
60:6c:24:75:f1:96:1c:43:34:a4:e0:a0:cc:76:c6:
38:13:a0:6f:42:04:d4:da:d0:ae:f2:f6:f5:b3:74:
c0:a9:19:45:91:bd:d8:6c:f1:3f:09:1e:73:0b:42:
32:ae:89:10:22:6a:ce:8e:ff:4b:21:1b:7b:1c:c1:
08:fa:d8:9e:95:75:99:ac:3b:f5:e0:ef:7e:ed:1b:
ec:10:e2:2e:6d:5e:05:17:ca:fa:50:d5:f1:eb:90:
3d:d1:83:eb:f7:6f:b2:76:00:02:44:1c:4e:97:6a:
93:58:86:c7:ac:25:c6:94:3d:c0:a9:4e:03:76:a5:
e3:23:5f:d6:12:73:78:b7:86:a0:53:f0:c6:cf:29:
19:9d:0d:0c:cf:5c:00:36:98:28:3d:51:a8:31:17:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:58:73:26:23:22:5D:F7:98:D4:1B:56:D0:DE:73:84:4C:DE:58
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bd:14:16:e0:54:38:37:21:03:29:d3:4a:c2:8a:03:86:d7:
e1:05:57:e1:35:4f:3e:a3:c4:da:40:28:5a:7e:36:de:ef:84:
6e:8e:27:73:5b:2a:ce:2d:90:9e:7a:10:f8:10:2c:51:11:4e:
c9:4d:9a:cc:b6:1d:34:bd:f4:24:85:ad:9b:08:36:c6:24:9d:
08:b6:08:e3:a2:3a:56:79:5c:8d:1c:e3:ff:d6:cc:c4:f7:1f:
14:fe:cb:06:b4:ea:f0:ca:59:de:a7:ad:3f:16:86:88:a5:9f:
2d:44:4f:f7:e8:af:81:b6:c7:7a:3d:8c:f5:a6:96:c3:47:63:
bf:93:40:8d:cc:d2:33:64:70:9c:98:2f:18:49:97:b5:49:2c:
3d:e2:d2:ff:bb:73:5d:46:09:be:36:3c:27:96:43:a0:bc:c9:
d7:60:09:c3:51:ef:4c:06:7a:bf:42:b3:43:b2:b1:12:6a:d9:
73:c3:13:09:c8:ea:73:ca:37:25:bd:41:41:c9:c5:56:0a:90:
ab:80:3b:87:e4:07:be:27:e3:26:72:4d:ab:45:f8:73:6e:04:
4b:cd:ae:57:2a:ec:f7:22:12:f8:7b:ad:4c:55:8a:7c:63:00:
ff:41:55:be:70:fc:b7:0b:15:11:bd:ca:48:34:84:9e:00:89:
9b:46:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:04 2025 by rpki-client