
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: S7aowJsDnMuEQF7jMx25nEkSaYK7ilG+Mc6m/iqAn1c=
Subject key identifier: 82:0C:C9:24:15:1C:5E:D8:28:44:86:F0:6F:63:D1:1D:3E:49:92:09
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019874BE590FCBD9C75DBB7779E8CA416959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0E18
Signing time: Mon 04 Aug 2025 11:01:28 +0000
Manifest this update: Mon 04 Aug 2025 11:01:28 +0000
Manifest next update: Tue 05 Aug 2025 11:01:28 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: DezshNsPERqVyZtrS0pIFy8VQpXwZQuMhKGQF/mpB00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:59:0f:cb:d9:c7:5d:bb:77:79:e8:ca:41:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Aug 4 11:01:28 2025 GMT
Not After : Aug 5 11:01:28 2025 GMT
Subject: CN=820cc924151c5ed8284486f06f63d11d3e499209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:e0:a4:4c:d6:0f:fb:c8:ba:9a:ef:09:0c:
e7:a1:01:7b:27:9e:18:1e:f0:8b:61:ef:d9:af:28:
73:de:27:c4:34:7f:c4:48:f6:15:f6:dc:89:74:5d:
e0:45:27:77:10:81:d6:2f:3e:38:a7:6d:b7:44:19:
bf:21:b0:16:c1:b8:69:25:41:02:06:73:e9:27:6f:
73:3a:4c:91:59:5e:e9:bb:e7:83:bf:f1:35:a6:24:
dc:96:f0:40:e5:77:36:8d:53:05:69:2e:7f:1a:b6:
a8:d2:c6:f0:95:ee:1e:87:e0:9b:71:2d:35:df:6c:
06:cb:57:07:3a:a7:67:09:bb:7e:77:6d:be:6e:ad:
55:b0:37:2c:56:51:50:3a:e5:0c:af:de:98:db:45:
56:d9:4a:55:c4:8a:d1:c7:04:4a:da:79:0b:4a:bf:
34:5e:cb:e9:60:27:68:db:4c:e3:b7:17:72:62:65:
f9:23:a8:3b:c8:4a:ba:82:05:21:b1:af:31:97:c4:
d3:bd:54:1d:1b:7f:40:b2:e2:50:b3:22:2e:7f:f3:
2f:be:89:1a:e0:44:e5:3d:32:88:41:7b:4b:07:71:
2a:e3:24:a6:28:d2:5e:41:8b:64:6d:85:07:9e:2e:
cf:05:06:d6:f3:4f:b2:ec:f3:b8:f6:97:18:04:d2:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:C9:24:15:1C:5E:D8:28:44:86:F0:6F:63:D1:1D:3E:49:92:09
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:5a:06:9c:07:2b:31:4b:d3:26:bd:6a:c3:a0:7a:16:2b:
ad:b5:bf:54:91:4e:62:f2:48:15:49:06:46:1c:4a:90:ad:5e:
46:4f:a8:a3:8b:2b:73:97:d0:1d:c8:1d:86:44:11:0a:fd:a8:
56:20:05:46:9b:9a:94:6f:1d:73:07:58:b9:35:bb:d3:ce:70:
f5:23:fc:2d:69:d5:cc:78:66:1a:64:6e:24:8f:43:ad:47:a8:
93:a1:e4:ce:b7:be:95:b0:f1:b7:d2:85:e0:a7:a3:2d:32:4f:
04:40:65:81:2a:4e:1b:33:59:ec:21:00:c0:88:cd:32:21:8c:
47:d6:c9:78:1f:22:24:27:2a:b7:39:9d:ec:e5:85:43:85:d8:
dc:12:d9:c8:a4:83:38:6d:fa:2c:3f:40:2b:13:60:13:4d:2e:
15:f6:0a:5f:54:e2:e0:42:95:57:5c:dd:e9:f1:b8:01:57:b6:
a0:0f:1c:39:81:c2:38:12:1d:fe:68:95:46:75:db:ef:34:97:
4b:cc:48:0f:73:9d:d0:42:3d:26:70:3a:f7:cb:d6:13:7b:28:
7c:bc:16:e0:c7:35:0d:17:fa:4c:61:59:85:12:5d:3e:e4:0a:
a6:8e:ef:ff:00:38:e9:0c:5e:10:78:ad:de:82:9e:a0:68:dc:
73:82:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:53 2025 by rpki-client