Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: 2ufX12pLtPGUWlrajL3U1zLwbLP1m/f9xbeEwPzEd/E=
Subject key identifier: 91:E3:BE:27:5E:7D:F1:24:5D:15:91:75:05:62:E3:A2:4D:6F:62:F2
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019A541AB83CB03F8FE5D96298644FF1EDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: AB
Signing time: Wed 05 Nov 2025 13:00:28 +0000
Manifest this update: Wed 05 Nov 2025 13:00:28 +0000
Manifest next update: Thu 06 Nov 2025 13:00:28 +0000
Files and hashes: 1: bvDQqROOqfcLitLUBX84FPsCs1c.roa (hash: 5rWrrkrkVV/HRYCs0+RexUArPHHbqW+EtH7f8xFEtLs=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: 6TeiM11t5SgSWXT+GlnmRDDpz8OSDSTWXQsAed0NsGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:b8:3c:b0:3f:8f:e5:d9:62:98:64:4f:f1:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Nov 5 13:00:28 2025 GMT
Not After : Nov 6 13:00:28 2025 GMT
Subject: CN=91e3be275e7df1245d1591750562e3a24d6f62f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:5a:70:32:96:1a:3c:fa:4b:1b:b0:7c:25:
fe:60:8f:f9:96:5f:8b:75:bb:e9:f0:0f:a9:07:66:
34:ef:98:a8:e5:1f:96:e8:19:2c:b5:6f:03:61:f6:
53:75:73:7d:ed:6b:30:e0:4e:d0:e9:ea:16:d0:1f:
08:2f:06:91:19:61:11:84:c9:56:52:60:3c:63:be:
32:8e:84:6e:06:13:97:a6:80:c9:c9:8c:e4:72:23:
e0:28:b5:67:00:15:dd:7b:fd:09:80:d8:b4:72:33:
5d:e7:ab:14:90:72:e1:11:57:8b:ad:4d:e5:8b:04:
0f:02:d2:e9:0a:d7:e3:5f:fa:59:81:10:1a:db:0a:
e8:86:65:93:58:d5:b2:a1:c2:49:c6:b2:c1:f9:fd:
2d:79:c4:d0:ef:d0:9c:15:79:af:7c:51:a0:7e:d1:
65:32:78:f8:a8:bd:f4:8a:17:01:59:b2:78:a7:89:
ca:63:55:ee:d9:e7:a9:51:f2:70:4f:dc:f9:10:85:
6f:b8:24:84:28:6b:ba:2f:fc:0d:a6:7c:f1:5f:48:
1b:e7:53:d6:d3:57:32:cc:d0:a1:14:9a:92:81:3a:
30:a0:c3:ef:51:d1:6b:a0:3f:07:e4:7a:7f:9c:16:
01:08:f0:8e:fb:bd:2e:b2:40:d4:96:37:df:db:62:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:BE:27:5E:7D:F1:24:5D:15:91:75:05:62:E3:A2:4D:6F:62:F2
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f8:c7:6d:b2:54:5b:d2:84:93:26:8a:28:44:27:3f:e7:c2:
21:bd:30:79:8a:c2:a8:27:76:aa:bd:8f:bf:de:38:5a:f0:46:
ec:41:27:31:9e:cd:4e:fe:b0:08:5e:94:08:f1:88:47:42:1f:
2d:db:53:74:8b:e5:16:af:37:16:09:11:3f:a3:ca:c7:65:63:
1a:fd:14:39:49:30:e0:55:14:fa:66:c0:d0:58:70:8d:9a:fd:
21:b1:d5:59:56:b4:5d:07:a7:0e:ee:a7:f6:c6:dc:2e:a2:7b:
a3:2c:8c:7b:30:16:f1:e5:b3:08:75:23:80:88:a7:22:49:62:
c8:79:dc:dc:bf:3c:30:99:8d:10:aa:e1:5d:02:5f:c0:70:21:
90:fb:8c:3f:5e:cd:67:a0:24:f9:23:87:5a:d1:2f:1c:33:06:
f4:2e:17:ee:b0:5e:7b:09:d7:2a:9f:ff:53:5a:8b:a4:db:72:
3d:d1:0a:19:a3:1d:21:7b:c7:4c:a6:20:c6:ad:a9:d2:b5:aa:
df:24:56:35:7a:31:7b:60:b0:5c:07:be:85:79:ca:ee:17:06:
ee:67:9f:c1:ac:54:b3:9a:b2:36:99:da:a7:99:77:c9:75:b3:
fe:0c:ea:8f:e0:3a:9b:77:40:42:96:b6:62:5d:67:17:58:6b:
9b:90:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:18 2025 by rpki-client