Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: Klss8vV9UkAhDuizpB65noWKqFZ2vyDONx93LQ/l2WA=
Subject key identifier: C9:7E:91:68:E9:CF:65:63:48:D5:1C:8C:BB:EE:F1:20:AC:A9:53:39
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 019747B0B4D0128287EE359BE6DD9510CB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 00:00:52 +0000
Manifest this update: Sat 07 Jun 2025 00:00:52 +0000
Manifest next update: Sun 08 Jun 2025 00:00:52 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: Cc1KY5sntoapquw/+OjtiFNPqhBm7eH4h9QSo6wZwLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:b4:d0:12:82:87:ee:35:9b:e6:dd:95:10:cb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Jun 7 00:00:52 2025 GMT
Not After : Jun 8 00:00:52 2025 GMT
Subject: CN=c97e9168e9cf656348d51c8cbbeef120aca95339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:e5:4d:a4:fd:07:26:5c:e1:2f:b3:9f:13:
32:20:fe:38:c5:bf:de:f6:49:27:e3:e2:6b:a8:d1:
a8:9f:77:64:85:5f:a7:88:8d:3a:c9:7a:b3:b8:f4:
1b:6a:a5:6d:c8:5e:a8:36:62:e0:f4:ef:d5:18:ae:
1f:d4:52:64:3d:67:6b:6f:99:84:9d:04:96:ec:b8:
54:f7:46:1a:10:cf:9e:e8:e9:55:29:d9:4b:6a:0c:
8a:69:46:5c:92:fb:92:72:4a:92:75:49:98:cd:11:
27:75:88:4a:7e:f7:51:0f:f8:7f:99:e3:da:a0:3b:
44:24:82:9a:4d:00:f6:dd:e7:9f:a3:94:09:e4:e7:
44:6a:14:53:f5:e2:6c:a6:e6:42:2f:03:38:39:28:
11:56:ec:3a:62:32:38:2a:31:a7:42:16:ea:29:2c:
85:af:f6:be:b4:d7:8b:ad:b7:b1:d2:08:12:4f:53:
d2:e9:8d:5c:13:26:19:eb:23:e1:02:50:6e:60:fa:
55:2d:8e:be:9e:af:6e:66:b4:b8:dc:df:f3:ad:b9:
98:1a:f1:0d:17:c9:85:aa:a6:b7:85:96:dd:e5:2f:
71:65:8f:0f:c4:c3:49:81:55:e4:fe:ac:c8:91:46:
6c:02:9c:c1:ff:6d:78:a4:40:14:a4:15:9a:ca:cc:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:91:68:E9:CF:65:63:48:D5:1C:8C:BB:EE:F1:20:AC:A9:53:39
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:71:82:ed:11:ef:5e:c7:12:99:61:e2:4b:af:16:31:18:45:
f5:6b:7d:d9:e3:50:33:6f:86:cc:78:b0:8b:a4:03:b3:61:b6:
fd:3d:1a:ba:f3:cb:f5:66:d3:35:bd:ec:89:de:18:55:18:f9:
90:c3:3b:58:d9:13:fd:08:3b:7d:25:f0:51:11:43:a4:73:92:
2c:4a:a8:c6:f7:71:89:e7:9f:ec:12:f8:ca:8f:74:4f:16:ae:
54:68:3f:07:ed:93:c9:9d:99:b8:e8:ec:98:89:65:8f:c2:2a:
4a:f3:1a:42:3a:e5:12:d5:a1:9a:6c:71:a0:34:7f:16:c4:45:
ce:20:77:1d:5a:85:29:8e:fe:ff:3a:4c:80:65:ee:7c:f1:e3:
e4:0a:dd:5e:ed:bf:79:66:7c:27:8f:67:c8:13:22:7d:a9:28:
28:93:2e:08:79:b6:3d:46:77:5c:35:b5:a4:9e:99:66:5d:a7:
3b:56:db:2c:be:0f:e0:31:2b:26:db:fe:53:be:9d:27:98:54:
88:1b:b3:af:02:63:c8:5d:62:1c:e5:c1:b5:05:9f:b7:b8:75:
19:77:1b:e0:b0:b2:c5:83:ce:b2:f7:54:de:4a:a5:16:9c:9c:
28:c9:54:be:f9:bb:ed:ae:f7:cd:0b:34:c1:cd:73:ec:65:55:
21:e1:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:32:14 2025 by rpki-client