Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: KklDEfh2Dg4hygT7wD8e1utl9FgZG+HEN+P2cZoxKK8=
Subject key identifier: D5:90:E9:ED:75:71:84:39:19:28:EC:5F:79:B5:ED:7B:59:54:86:1F
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 0198271050B172070FA76570CE3E5CCABB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 5A
Signing time: Sun 20 Jul 2025 09:00:37 +0000
Manifest this update: Sun 20 Jul 2025 09:00:37 +0000
Manifest next update: Mon 21 Jul 2025 09:00:37 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: wycQr1GM8XMQ5OoUsyB3XcZQYRwdpullKc2lDA1r1nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:50:b1:72:07:0f:a7:65:70:ce:3e:5c:ca:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Jul 20 09:00:37 2025 GMT
Not After : Jul 21 09:00:37 2025 GMT
Subject: CN=d590e9ed757184391928ec5f79b5ed7b5954861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:50:c7:19:4b:3a:43:18:a1:08:09:3b:ab:
e0:48:be:e4:e3:ee:48:ae:fe:da:7c:37:eb:57:94:
17:65:5d:51:59:9f:d5:73:62:c2:a1:ab:c5:8e:bb:
5e:73:56:c3:17:c3:a8:76:f5:03:c8:58:73:db:65:
30:54:ca:3b:d6:7c:d3:0f:2d:f0:4c:02:a2:45:1e:
65:a0:e8:26:f2:07:c1:58:6f:0f:8e:a0:8e:83:de:
22:c0:75:be:4c:c9:a1:e5:b8:67:7b:30:cd:ac:2a:
a7:62:96:05:2a:9a:ed:4e:05:ae:ea:af:8b:96:95:
2a:da:af:45:7a:b8:c0:e4:8a:c6:3b:f7:e4:3f:80:
01:67:6a:f8:92:de:b8:59:52:ff:f4:3c:e7:49:61:
5a:17:01:ae:bc:b0:f5:cc:7b:3d:fc:5c:e8:8c:e6:
5a:e6:ae:ae:9f:03:97:1d:90:85:36:f5:ac:0d:ca:
34:11:5c:aa:71:be:1d:bc:c8:b5:a5:3e:49:ec:8e:
0b:9b:15:78:ba:43:ae:b7:f5:95:89:04:db:66:54:
cb:b4:94:6c:b8:12:b8:14:6d:d9:14:e3:74:b4:7a:
2f:76:98:94:5f:17:b4:9f:0c:ef:54:7b:cc:6f:68:
63:75:ad:25:b4:90:38:9f:d2:97:3c:2b:be:91:e4:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:E9:ED:75:71:84:39:19:28:EC:5F:79:B5:ED:7B:59:54:86:1F
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:10:77:fa:b3:5f:de:e6:11:ee:9f:8a:20:ee:91:18:16:b4:
09:28:93:a1:57:2a:5c:86:c1:dd:4f:14:ba:a2:e7:0e:71:7a:
37:27:9c:b3:44:ec:b8:9f:fb:47:31:a9:44:82:c6:32:35:89:
5b:44:c0:26:c9:d0:30:bd:7b:08:15:43:6b:22:42:7f:ed:3e:
bb:84:25:bb:56:21:37:cb:41:e9:45:3c:23:a8:56:01:97:ea:
ff:0d:11:22:15:0f:f8:8d:ea:7b:b1:93:da:46:ea:59:55:16:
32:3e:06:e3:b9:d5:3d:a9:b7:f2:0e:36:92:4d:24:4a:0c:9a:
29:bc:e4:cd:15:ae:47:8a:79:67:fd:1d:ab:e7:b7:2f:1b:ab:
c0:25:0b:78:c9:d3:ec:0f:15:50:8e:91:b1:76:e0:bc:5a:db:
20:21:d7:44:b8:2a:f1:66:e8:f3:8b:fe:67:da:e4:91:74:40:
ad:19:c8:b2:29:dd:a3:9e:6d:72:ca:c9:80:94:ed:b9:88:c7:
e7:b3:a2:01:a1:1c:4f:b8:37:d8:5f:f7:88:d2:c5:c6:fe:c3:
a4:44:2d:ae:bc:66:75:24:7e:9d:aa:e7:04:f6:48:57:d6:e1:
f8:30:bb:94:24:0d:3b:00:bd:f3:db:8b:2b:84:8d:ad:c8:13:
e1:87:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:37 2025 by rpki-client