Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: Xy2OQPg4wOXsGvh4bENofrlH82N4ni6T9RwuaYOBToo=
Subject key identifier: 0C:CA:7A:61:0D:C1:19:A7:3F:F1:E1:C7:13:97:23:2C:55:70:0D:F8
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019A4D73E690509B5AC73DA86A4DAF5DC130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0640
Signing time: Tue 04 Nov 2025 06:00:32 +0000
Manifest this update: Tue 04 Nov 2025 06:00:32 +0000
Manifest next update: Wed 05 Nov 2025 06:00:32 +0000
Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: hpjPWxncxsMUj1oNj0VEF/ojCkgrPvLsg013JBbCS/E=)
2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e6:90:50:9b:5a:c7:3d:a8:6a:4d:af:5d:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Nov 4 06:00:32 2025 GMT
Not After : Nov 5 06:00:32 2025 GMT
Subject: CN=0cca7a610dc119a73ff1e1c71397232c55700df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:a3:a4:91:aa:3f:2b:cc:8b:54:68:9e:4e:
3b:57:3c:d0:b6:76:f3:e3:22:14:64:6e:cf:32:38:
5b:a5:87:2b:c6:55:42:15:95:ca:92:5f:69:e0:10:
e2:b0:ea:cd:4e:eb:b5:b1:09:dc:b8:66:ff:a7:19:
72:ee:a0:98:a7:4c:cf:2a:be:12:66:2d:ba:01:7b:
da:f3:bf:3b:ed:07:d4:1e:ae:b6:b4:83:02:5a:6d:
6c:04:7b:ef:cf:20:b3:fd:cc:dc:1e:ae:ab:f4:02:
90:bc:2e:bf:00:b4:71:fd:cc:3d:71:60:b7:4b:6b:
93:06:75:1a:92:da:d6:79:e8:3f:2e:33:20:bd:cc:
73:b8:65:fc:76:5f:3a:d2:24:22:7a:15:fa:9c:ee:
36:b0:cb:e0:14:f3:89:ea:19:8e:7b:f9:2c:8b:b2:
75:82:49:6e:ba:85:17:f2:c3:78:a0:52:95:ba:00:
aa:b9:9a:7f:36:c7:0f:e5:10:71:82:d4:99:07:f6:
d4:56:ae:6e:94:1a:1f:0b:35:c9:40:b3:77:ea:84:
14:3f:aa:79:d3:66:b4:8c:cd:08:09:28:e5:4a:f2:
c3:0a:52:33:a5:3b:09:92:83:d3:da:b6:c5:e5:4c:
9a:d4:a1:10:c3:31:80:f3:20:ff:8a:cd:13:36:01:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:7A:61:0D:C1:19:A7:3F:F1:E1:C7:13:97:23:2C:55:70:0D:F8
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e7:d9:19:a4:95:73:b8:9e:9e:67:82:89:b3:f1:9a:04:2b:
d5:dc:98:6a:c8:a0:d8:4e:af:2f:7e:3f:41:5a:f7:d7:1a:26:
89:87:59:90:8d:ea:81:a6:2b:07:07:30:41:ad:45:4b:3b:69:
ab:96:fe:16:96:62:77:57:e5:27:1a:9d:ae:70:d3:6b:de:fe:
ea:23:11:c7:5c:aa:f5:7b:a3:e3:08:4f:63:58:a9:4f:9a:2b:
f0:55:29:2f:b0:b3:f7:cb:71:b0:63:c0:32:bb:77:be:0a:44:
b8:47:aa:95:05:68:94:62:4b:be:69:50:a3:5e:9e:44:1e:82:
e4:23:11:48:8b:df:77:eb:de:db:56:fa:38:86:dc:83:b3:92:
74:85:bb:ef:af:d5:41:9f:da:8d:9c:9d:6b:8a:61:1f:28:22:
3f:f5:ec:c5:0b:c9:60:e4:96:16:0b:0a:5d:34:f1:1e:5e:c2:
46:61:49:48:49:45:f7:dc:a8:c2:0c:d9:cc:2f:c8:81:1c:09:
db:0e:6a:74:85:2a:c0:f3:33:b6:af:25:e5:08:57:8a:e1:4d:
d9:6f:e5:8c:cb:58:1c:cb:02:a5:33:96:c9:58:da:98:c8:0f:
9d:90:a5:77:13:a9:01:c4:83:b3:4d:ed:1c:a1:2e:6b:d9:fb:
7c:9a:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:57 2025 by rpki-client