Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: zBw215oj3EBBm0PZIn153tNJHmOVBPxVdlmCFkjBXps=
Subject key identifier: 27:E6:91:07:64:EA:5A:E1:3B:D5:48:E5:06:76:C9:B9:38:09:64:EE
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019922C32C3753422815CA665E4EE1C49735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 1413
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: 8daTzLOAXewB3CMlxDNE1i6cqzjR8eSeqSnhVn5JkUg=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2c:37:53:42:28:15:ca:66:5e:4e:e1:c4:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=27e6910764ea5ae13bd548e50676c9b9380964ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:9a:76:ae:80:cb:bd:10:4d:0d:54:03:5b:
eb:f3:09:38:bc:fe:d6:b2:b5:35:fa:27:9c:3e:0f:
d6:85:81:04:c4:0c:04:4a:5c:e3:94:df:8a:83:39:
7f:03:7a:c9:97:7e:68:ba:ee:ee:7e:aa:86:b6:a3:
0f:e2:86:2d:09:9c:f9:2e:b8:26:b7:e8:ee:7f:75:
c4:86:b7:ec:67:86:a4:fd:30:6e:39:84:92:48:14:
9c:65:93:90:d2:71:ac:b3:ba:37:35:31:76:aa:d7:
81:bf:05:b9:ea:21:44:42:bf:46:28:38:5c:8d:29:
d7:26:c9:ae:6f:05:75:6f:8d:fb:45:7f:f0:dc:1f:
1b:6a:14:55:0b:e0:e4:c5:a1:a8:bc:2b:f4:49:81:
5e:a5:49:5a:88:91:f3:91:b2:4e:7f:4f:c1:36:d1:
14:d6:49:23:56:e9:6f:27:f1:62:44:d0:d0:66:41:
ab:ac:06:74:ed:c7:22:03:f3:4f:c3:fb:00:8f:18:
0d:a8:41:2f:93:73:fd:01:58:ea:d3:98:54:1f:ad:
5f:43:b6:42:98:27:73:da:bc:89:fc:8f:7a:80:ec:
8c:4f:2e:39:8f:dc:b1:7e:d8:75:08:84:a5:71:f9:
bd:bb:ad:01:42:89:4e:b6:30:e7:8d:48:d1:9c:33:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:91:07:64:EA:5A:E1:3B:D5:48:E5:06:76:C9:B9:38:09:64:EE
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fc:0c:fc:2e:cb:61:20:a7:8d:69:c8:57:a2:ff:4e:32:f6:
a4:dc:8e:a1:ea:a4:d8:b4:d5:7b:64:83:fe:99:64:6a:92:0e:
f2:04:52:e0:25:f4:23:31:90:73:b0:49:55:10:e0:89:b5:f4:
a9:fc:ab:8a:25:54:7a:04:e3:14:9d:7f:5f:39:41:a6:c3:6c:
e1:fe:46:88:3c:6e:0f:8b:72:d3:d2:85:3e:34:34:73:98:45:
ca:91:21:04:b3:b7:7c:29:43:ae:54:27:bf:dd:41:27:cf:17:
6e:29:52:ec:37:18:60:3f:dd:70:9d:28:2f:61:ad:0a:01:9a:
24:37:bf:06:24:30:c6:eb:7f:1c:0f:ce:a1:db:7c:b8:5e:a8:
5d:e5:9a:bd:5e:da:e3:92:d7:7e:43:fe:4e:02:40:a9:f3:3e:
5b:88:2f:3f:df:4a:dd:29:bc:a3:0b:b7:92:e7:cb:c4:ae:bd:
c0:8c:c0:75:dd:00:10:93:dc:ed:1e:4a:e6:b0:9e:85:b4:4d:
36:97:9a:1a:72:2f:83:79:e8:2d:7e:83:bd:28:ab:2e:fb:57:
ea:d9:2f:19:96:60:90:bd:33:65:37:11:fa:f4:0f:39:2b:8e:
94:3c:8e:e9:5f:ae:1d:7a:f1:af:49:92:ba:b2:7c:49:99:da:
0f:7e:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:21 2025 by rpki-client