Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: n6Cw/57YgzbO2G/R+sjKqR2PYoLOAD2Q4N7cx8UYovw=
Subject key identifier: 1D:E0:F6:44:C8:DD:E4:CF:99:6A:07:5F:28:F5:BD:49:B3:02:46:7F
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019A4DE189A929748DA1A2E95037F205E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0F0D
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: rz/1rPFz7yuPsK4f/vGFPcs+Gww2XehuPr0ozWdrTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:89:a9:29:74:8d:a1:a2:e9:50:37:f2:05:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=1de0f644c8dde4cf996a075f28f5bd49b302467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:ca:8a:5a:7d:8a:5c:f3:7d:cd:f4:ed:16:
f7:56:2b:ef:16:29:10:71:99:7a:c5:82:12:82:1d:
9a:e3:c4:ab:a7:6e:06:31:dd:ad:e5:9c:29:e6:18:
4b:3e:06:0b:7d:95:f4:73:b6:fb:52:82:1c:3b:8e:
c7:9e:59:37:2e:50:79:26:89:e3:1b:cb:24:ff:bd:
04:c6:af:07:9e:db:e1:1b:5d:98:dc:a6:e2:eb:46:
0e:c0:e7:84:a3:cb:68:2f:7c:29:af:51:c2:0e:c3:
af:55:65:9d:a1:7c:17:d5:cf:b7:44:63:e2:2b:91:
b8:1e:f5:80:e5:28:ce:8b:00:e3:bb:30:76:ee:95:
00:88:fe:86:1a:6b:77:99:b9:68:e5:9e:e7:31:d9:
53:9a:95:3f:4d:db:c4:f7:f5:6b:e5:af:40:cd:a3:
d6:44:d0:2c:02:43:f8:c9:0e:e2:f7:f0:ea:06:a2:
3a:e2:8e:a9:17:20:b5:27:e1:5c:4a:27:4f:20:b9:
b6:22:e5:37:1c:8b:fc:39:ce:ab:5f:12:0d:84:6d:
68:98:72:4e:09:f9:e2:bb:51:93:e4:58:86:07:cf:
14:06:5d:df:df:39:37:69:9e:50:c9:9f:b3:8a:04:
80:23:e0:a6:37:20:d3:7d:c1:a1:52:90:fd:e2:67:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:F6:44:C8:DD:E4:CF:99:6A:07:5F:28:F5:BD:49:B3:02:46:7F
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cd:70:b7:a1:52:23:35:70:db:95:98:9c:c6:56:22:82:64:
a2:3e:ea:db:85:49:f7:95:07:22:a0:17:37:e2:f1:f7:34:74:
a3:2c:60:74:e5:e2:83:8d:82:98:74:f2:a5:e2:14:c1:ac:b7:
b1:6b:4b:c4:9c:39:78:37:ef:6f:86:d4:15:46:8e:5a:eb:3b:
42:6e:f0:b1:b2:da:f1:62:26:43:70:b7:e1:2b:05:17:45:be:
81:8e:10:62:cb:02:b8:67:ef:5c:2d:fd:8f:3d:f1:7a:b4:e8:
31:ec:68:e4:ec:fc:95:a3:ad:cf:54:2c:8c:78:b5:82:6a:6e:
d9:01:7d:1d:63:fe:43:3c:65:0b:89:1a:fc:ef:ce:14:ee:53:
31:ac:d8:01:cd:44:9d:13:f8:32:e7:68:ef:e6:5d:a0:36:f3:
ee:c1:c6:70:50:3e:a1:e2:ad:73:82:56:95:db:03:63:57:b1:
91:7a:f0:f8:54:ab:dc:b0:09:9a:73:38:df:d2:47:49:14:d7:
10:2c:0a:82:ef:25:a9:29:26:47:42:ac:0b:3e:97:21:97:27:
da:a9:83:07:bb:1a:d8:3d:9f:69:40:95:ed:cd:68:98:3d:dc:
4a:32:ea:28:8e:b8:09:1a:a9:03:07:fb:5a:10:32:00:e6:44:
5b:06:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:07 2025 by rpki-client