Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: /t+vcsGL1nks0sM0RfVDm6BBJQPHEiwLikIcLXmtNPU=
Subject key identifier: 35:AA:B3:37:A5:80:AD:D0:46:E2:66:F5:5F:C5:F2:1B:71:8F:B4:A9
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 01965D966562E51B1880EB897AD9F7B93DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 20
Signing time: Tue 22 Apr 2025 13:00:59 +0000
Manifest this update: Tue 22 Apr 2025 13:00:59 +0000
Manifest next update: Wed 23 Apr 2025 13:00:59 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: U5gVyWOFjMcsypc5/5phWdZN+JMqHUoq2vzENvFQRW8=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:65:62:e5:1b:18:80:eb:89:7a:d9:f7:b9:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Apr 22 13:00:59 2025 GMT
Not After : Apr 23 13:00:59 2025 GMT
Subject: CN=35aab337a580add046e266f55fc5f21b718fb4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:c8:d9:f8:bb:6f:b2:7c:8e:93:cb:a6:32:
3b:25:52:f4:07:7e:89:58:d5:30:04:de:9b:dc:39:
fa:fb:f5:b2:6f:9a:1c:7c:93:a9:a1:56:bb:ef:72:
57:15:c0:58:c3:6c:67:3f:de:37:77:d1:8e:fc:c6:
c6:72:c8:e5:fb:41:2a:52:c5:56:ae:16:a8:19:12:
f6:32:7f:fe:11:28:1c:98:f3:80:94:dc:26:05:af:
f5:b7:64:02:68:63:34:5c:c7:70:de:86:cb:ce:1c:
08:fd:f1:19:74:09:4c:70:6f:57:08:1e:c9:95:71:
07:37:2e:73:6c:79:58:33:49:dd:55:90:bd:fc:a1:
d6:63:58:7a:f1:1f:74:1e:93:86:d8:a0:da:5c:88:
67:68:13:6b:95:2b:3f:32:1b:00:b8:24:d7:e8:4d:
20:1e:6c:c1:27:7f:a9:24:ac:56:e1:29:e1:b2:8d:
93:a2:46:81:b7:61:6e:fd:76:3f:49:65:67:9b:74:
15:a2:fd:00:44:cb:ad:7f:71:d5:ed:86:3e:6e:c2:
bf:30:7c:89:4e:fe:3f:0e:a2:59:56:74:d4:4c:07:
c9:48:bb:78:d2:e4:2d:81:fe:2e:f0:e9:ef:cd:74:
15:fc:06:33:26:6a:2a:d3:32:47:fe:1f:b2:14:fd:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:B3:37:A5:80:AD:D0:46:E2:66:F5:5F:C5:F2:1B:71:8F:B4:A9
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:50:0c:81:9b:1a:26:e2:be:e9:11:e6:42:f0:b1:56:b5:
9e:ad:55:8e:b0:e9:e0:b1:6c:01:67:09:4e:c3:c9:5c:4e:fa:
ea:16:7f:49:48:a1:a2:6a:f5:15:b0:da:1b:14:49:cf:15:a9:
56:62:05:0b:bd:f0:a7:49:cf:c9:03:ba:f2:1a:ea:ac:95:5a:
ab:f7:c0:ae:1b:d8:9f:38:1f:c2:47:62:84:67:49:75:eb:fd:
bc:22:bf:15:e9:d9:45:7d:e7:a4:32:68:3b:92:fb:91:54:1c:
a2:69:c3:1e:08:4d:e2:2d:1a:5f:b7:98:26:7b:e9:55:fd:1a:
52:a4:47:51:ff:28:26:49:5a:35:e2:89:9b:fc:32:5d:fc:6a:
b4:47:58:a9:0f:77:b3:04:d2:fd:60:7f:da:a6:2b:75:23:5b:
d9:85:2e:39:2e:4c:61:0d:a1:15:6f:a4:23:5d:67:68:fc:f6:
87:ec:5d:85:f5:32:1c:1e:b6:bf:90:2b:74:55:a4:61:1b:e0:
64:2b:39:02:d3:9c:b2:b5:af:87:79:cb:35:e3:fe:29:8a:41:
dc:f1:98:5f:99:de:23:27:c1:1f:3f:29:3f:8b:bd:86:d8:98:
19:47:ff:d0:7d:d2:0e:19:f1:c1:63:80:12:33:48:18:86:cc:
d0:c9:7b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdlmVi5RsYgOuJetn3uT3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjQ4NzM4NDJhOTA0ZjFhNjk3MjAxMzkzZTdiYTYyNjg0
MmY0YWYwHhcNMjUwNDIyMTMwMDU5WhcNMjUwNDIzMTMwMDU5WjAzMTEwLwYDVQQD
EygzNWFhYjMzN2E1ODBhZGQwNDZlMjY2ZjU1ZmM1ZjIxYjcxOGZiNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuXI2fi7b7J8jpPLpjI7JVL0B36J
WNUwBN6b3Dn6+/Wyb5ocfJOpoVa773JXFcBYw2xnP943d9GO/MbGcsjl+0EqUsVW
rhaoGRL2Mn/+ESgcmPOAlNwmBa/1t2QCaGM0XMdw3obLzhwI/fEZdAlMcG9XCB7J
lXEHNy5zbHlYM0ndVZC9/KHWY1h68R90HpOG2KDaXIhnaBNrlSs/MhsAuCTX6E0g
HmzBJ3+pJKxW4Snhso2TokaBt2Fu/XY/SWVnm3QVov0ARMutf3HV7YY+bsK/MHyJ
Tv4/DqJZVnTUTAfJSLt40uQtgf4u8OnvzXQV/AYzJmoq0zJH/h+yFP3Y9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWqszelgK3QRuJm9V/F8htxj7SpMB8GA1UdIwQY
MBaAFCC0hzhCqQTxppcgE5PnumJoQvSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMt
ZWY1YmE1NGFkYjU5LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMtZWY1YmE1NGFkYjU5
LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNtQDIGb
GibivukR5kLwsVa1nq1VjrDp4LFsAWcJTsPJXE766hZ/SUihomr1FbDaGxRJzxWp
VmIFC73wp0nPyQO68hrqrJVaq/fArhvYnzgfwkdihGdJdev9vCK/FenZRX3npDJo
O5L7kVQcomnDHghN4i0aX7eYJnvpVf0aUqRHUf8oJklaNeKJm/wyXfxqtEdYqQ93
swTS/WB/2qYrdSNb2YUuOS5MYQ2hFW+kI11naPz2h+xdhfUyHB62v5ArdFWkYRvg
ZCs5AtOcsrWvh3nLNeP+KYpB3PGYX5neIyfBHz8pP4u9htiYGUf/0H3SDhnxwWOA
EjNIGIbM0Ml7KA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:51:10 2025 by rpki-client