Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: edG3wp471EJSs8PxYZVIcKqVSq6mEljRI2JqdTtfiZU=
Subject key identifier: 23:2D:BA:36:52:2D:73:D4:EE:56:7E:9B:95:C2:96:44:B3:B9:93:84
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 019A571BC6DBE3466915429BDC773B0D0985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 017C
Signing time: Thu 06 Nov 2025 03:00:29 +0000
Manifest this update: Thu 06 Nov 2025 03:00:29 +0000
Manifest next update: Fri 07 Nov 2025 03:00:29 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: E7Nv/ShB2VmG44Mzlq7xnWqrxnrSo4UHo0pHWpJp9kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:c6:db:e3:46:69:15:42:9b:dc:77:3b:0d:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Nov 6 03:00:29 2025 GMT
Not After : Nov 7 03:00:29 2025 GMT
Subject: CN=232dba36522d73d4ee567e9b95c29644b3b99384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:d7:1a:bd:9d:5c:c6:8e:e7:55:87:0b:56:
57:fa:09:b2:ee:c9:76:a6:b8:9c:2f:8c:89:a7:bf:
bf:00:61:66:23:b5:60:b6:14:91:88:67:a1:2f:77:
af:e7:09:84:00:d1:65:50:1b:b1:9e:f3:8a:dc:63:
d2:fd:f4:9c:d9:be:92:4b:e0:72:dc:d8:64:29:6d:
5f:cb:56:0d:56:8b:1e:e6:9f:f2:d5:bc:25:a4:81:
ae:16:7b:02:3b:46:04:f7:23:26:0f:8d:68:b2:73:
6e:dd:11:b1:a5:f1:0a:75:8c:98:9c:8d:33:9f:06:
50:95:99:e8:79:fb:f6:e8:60:99:ca:06:f4:0a:ed:
2b:09:a5:0b:ab:d1:ef:48:ce:bd:88:5a:9d:95:4e:
aa:49:e5:39:e7:dd:76:29:9b:4d:a9:61:87:26:32:
b8:b6:07:5c:9f:81:60:cf:8c:9d:82:74:19:1c:79:
78:15:72:d5:cc:50:4d:7d:ce:0f:19:cc:58:0f:44:
30:af:cf:0e:ea:4a:24:12:7f:65:33:e0:6d:f4:98:
25:af:8e:bb:8d:35:7b:23:a2:d2:d4:0d:02:f8:79:
f8:87:32:cd:95:51:73:67:cd:0b:29:60:92:77:c0:
5e:1e:dd:87:c4:a0:ee:3a:12:86:58:12:1e:e5:0a:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:BA:36:52:2D:73:D4:EE:56:7E:9B:95:C2:96:44:B3:B9:93:84
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fe:19:b2:28:f1:70:ca:70:4b:53:50:e9:bd:0a:c6:09:8a:
55:69:85:b7:37:64:0d:a8:74:85:5d:e3:33:f0:49:9e:50:9a:
a2:5e:07:a6:19:ac:79:59:54:4c:28:95:56:0b:cd:4f:31:18:
c1:bd:45:a2:e4:08:ed:2b:09:4e:74:b7:0d:10:79:cf:a8:f3:
c6:46:7e:c3:d0:27:70:32:91:0c:7a:60:c6:59:ee:35:4f:d5:
10:40:ab:22:a8:da:92:70:65:b8:68:e4:74:09:26:b7:72:3d:
15:0e:2a:f6:a4:0d:af:c1:87:16:15:78:a4:56:85:0d:9e:4e:
0f:68:1a:1a:e9:8f:c1:0a:d2:c7:72:59:27:97:76:c7:2b:15:
0a:43:86:bd:21:98:13:9f:ac:cd:64:aa:e2:88:71:8a:30:5b:
ba:f3:2d:fa:8b:ea:be:1b:d9:4a:f0:74:48:44:2e:b9:60:b0:
d6:ef:c5:4b:dd:a5:b6:bc:ce:c9:b7:31:6a:fc:35:d4:6a:c6:
03:88:7c:86:b8:32:c6:e5:11:fe:5b:66:24:e1:39:96:f0:25:
d0:86:9b:b7:9c:37:2d:eb:00:72:cd:84:27:7a:06:3b:70:56:
a4:44:81:18:cd:13:25:d9:2c:b3:55:3e:41:ed:ec:dd:25:59:
62:8c:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:40:34 2025 by rpki-client