Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: PC1QDMu75sxYF3NVm3MqY531SSNuzjM3nizn8jYeKh8=
Subject key identifier: FB:F3:3A:C6:56:A2:2A:12:5C:31:62:15:DC:2E:20:12:89:BB:EB:D3
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01984664675247AD62B1FC597EF55DAE9C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 07ED
Signing time: Sat 26 Jul 2025 11:00:41 +0000
Manifest this update: Sat 26 Jul 2025 11:00:41 +0000
Manifest next update: Sun 27 Jul 2025 11:00:41 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: ihQwN/UqHrh8OmpcoFAveEZb3bY7pePsFmTBNX/Wk6c=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:67:52:47:ad:62:b1:fc:59:7e:f5:5d:ae:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jul 26 11:00:41 2025 GMT
Not After : Jul 27 11:00:41 2025 GMT
Subject: CN=fbf33ac656a22a125c316215dc2e201289bbebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:35:6b:92:db:29:a5:8a:17:78:26:6d:16:
28:a7:fa:ca:18:da:d3:7e:b2:06:82:76:e6:b4:5b:
20:49:7c:b2:6f:08:6b:09:64:eb:a8:58:4f:38:f6:
73:e4:bd:ca:1a:eb:6d:f0:b9:6a:cc:6f:f8:8a:c4:
71:d4:bd:d4:8e:99:f6:fa:1f:37:15:70:ee:28:d6:
b9:a2:92:7f:75:df:1e:c9:6e:83:c0:86:b0:25:b2:
62:7d:96:a0:e2:dc:36:93:31:cf:e1:50:1c:cb:63:
04:50:d7:09:ae:b6:c5:f7:5d:03:fd:5c:10:8c:ef:
17:b5:00:0a:48:ee:60:e2:4d:25:cd:13:03:24:4f:
0b:d0:3e:cf:27:0a:d4:7b:77:95:de:83:11:21:dd:
4b:64:c3:d7:c2:5f:37:35:d3:aa:90:5d:e2:22:b9:
3e:5e:21:4e:65:5b:18:69:28:ba:08:9a:2a:1a:27:
45:d0:70:a1:1c:44:38:ea:70:bf:2b:06:f9:02:01:
2e:4b:e0:9b:6e:ba:24:f9:f6:9a:22:2a:96:af:93:
2f:df:ab:1d:45:7e:50:99:93:1c:81:48:c8:ed:8c:
7c:ad:4f:f5:91:f7:ae:07:29:94:70:3e:a8:73:c8:
fe:e4:2a:b2:48:1d:02:19:a3:dc:69:2c:6e:92:3f:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:3A:C6:56:A2:2A:12:5C:31:62:15:DC:2E:20:12:89:BB:EB:D3
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:03:97:35:af:be:28:64:5e:7e:37:26:cb:8a:ed:b3:a4:17:
6e:24:02:07:75:f2:7b:e5:9e:e3:eb:29:ea:67:e2:52:f2:5e:
ed:4a:59:43:7a:ef:09:21:73:62:25:a9:9f:be:80:44:f4:0f:
7f:52:a6:31:2c:9c:31:11:90:4b:30:eb:cd:59:95:bf:a9:04:
42:76:82:05:a8:a6:e5:46:26:5f:eb:f0:c2:5d:4d:fb:7e:97:
ef:cc:a6:87:22:af:17:09:4e:b8:5a:a3:d5:ac:0f:bf:1e:ee:
2d:5c:0b:11:a7:f7:9d:06:3a:45:0e:1c:f0:27:8c:b5:93:85:
b8:41:1d:5a:0c:cc:f7:1c:05:57:40:40:54:90:63:cb:8e:2f:
05:3b:8e:7b:d5:cc:38:df:b5:73:43:d1:8a:4d:66:9c:25:94:
c1:21:65:d2:50:e0:2a:0b:27:85:e5:d9:f4:85:ef:ec:8a:6f:
5b:85:f8:4c:f3:a7:cb:55:a3:1f:ad:fe:8a:99:76:5c:65:b7:
d3:a4:51:8b:84:71:e8:78:6e:80:45:e1:12:04:ba:ee:3d:a0:
3b:60:db:bc:19:10:b6:5d:fa:61:04:84:22:c9:bd:e1:28:88:
c9:a7:1b:c1:48:2c:37:f4:ab:d4:0c:b8:ea:39:28:b9:97:50:
bc:c8:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:29:41 2025 by rpki-client