Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: ezJKII4Rcp2WgKP0kM8+VUg4TZcVlh+iOjAtk5PSt34=
Subject key identifier: 3B:96:43:9E:3D:7F:E6:22:EB:E7:27:87:81:83:13:63:F8:A4:5C:AC
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019759127C13D986429DFF32A07856D8A272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 1326
Signing time: Tue 10 Jun 2025 09:01:12 +0000
Manifest this update: Tue 10 Jun 2025 09:01:12 +0000
Manifest next update: Wed 11 Jun 2025 09:01:12 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: ALgxwOGjKu3JFVrLyOyZku7OSB2ZKjhWBrePzIXrL80=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:7c:13:d9:86:42:9d:ff:32:a0:78:56:d8:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 10 09:01:12 2025 GMT
Not After : Jun 11 09:01:12 2025 GMT
Subject: CN=3b96439e3d7fe622ebe7278781831363f8a45cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:b6:5e:07:55:8c:f4:2d:0e:15:ff:4f:ef:
5e:90:52:32:1a:ab:37:b8:b7:f8:2d:84:72:d5:f3:
1a:f0:85:18:e8:20:a5:4a:66:e7:3c:ae:63:53:41:
86:7e:46:d9:1c:13:2f:82:39:e8:3f:6d:fa:c9:22:
e3:00:b4:01:aa:f3:52:82:82:eb:5e:73:d7:36:5c:
17:81:d6:5a:d5:7d:36:c0:de:b6:ee:4e:db:9e:92:
b2:6f:6d:bd:f8:99:c9:64:fb:61:52:74:e6:b5:f1:
66:f8:1f:a4:4c:fe:bc:b4:9f:ee:5b:ec:a6:1a:70:
5e:fd:0d:6f:1b:1f:61:74:c3:d2:56:81:3d:d3:96:
f1:f4:29:09:95:fd:d8:e6:61:9e:d6:ba:65:6e:e6:
38:b7:25:0e:78:94:16:8c:24:5d:6f:0a:c2:5f:46:
68:ce:39:61:54:a4:c2:ee:fa:50:b7:d4:92:4e:42:
13:a1:cd:e9:d8:98:0c:d3:1e:d6:45:c2:23:91:8d:
c6:00:97:8a:e1:95:3f:4d:ee:20:fc:6e:2d:f1:52:
95:90:d8:55:94:81:e7:09:10:e1:15:b8:85:4f:2b:
a0:94:5d:0f:e0:5e:4e:dc:9a:0c:5d:d7:48:cb:b6:
18:d7:be:2b:95:5e:ad:e7:19:15:30:d0:4b:6a:06:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:43:9E:3D:7F:E6:22:EB:E7:27:87:81:83:13:63:F8:A4:5C:AC
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:89:c9:1d:ce:3a:65:78:94:f5:0e:70:09:e0:3b:da:86:
71:d4:ff:bf:b8:39:a7:fa:2d:5f:9c:67:0f:67:87:13:0b:2a:
10:2b:16:83:81:9f:35:a9:a6:80:38:60:36:35:a3:ea:cc:c1:
4d:ef:98:34:65:db:39:9a:08:dd:aa:ac:25:24:24:08:7a:26:
42:ad:68:7b:7f:7b:80:c4:d8:91:3b:0a:a9:0c:46:16:f4:22:
f6:7a:81:0d:61:cd:d3:5b:f6:b6:a6:9b:cd:ed:b2:1b:ed:7e:
6b:a0:33:fb:21:23:ac:61:77:f9:60:f8:7a:91:b7:58:11:61:
cf:04:3f:88:42:da:fb:23:6e:60:b8:82:a1:20:e1:30:51:be:
02:dc:09:3f:c2:5c:8b:41:d2:12:97:9b:e5:56:4b:d0:25:ba:
45:70:cc:83:43:aa:cf:aa:98:e6:32:1c:81:40:d3:d9:20:0d:
42:ed:6f:a3:58:02:32:34:6c:17:6e:3d:fe:e5:f8:7a:e7:70:
e7:b5:01:7a:ca:4a:0b:cb:64:23:5f:6f:46:c2:2d:31:77:b5:
c9:42:8d:f8:d6:94:bc:df:71:4e:ba:cb:4e:72:4d:25:40:e6:
b2:0d:38:9c:df:75:05:1b:82:d9:c0:44:33:fc:9a:c3:a5:2b:
d7:cb:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:43:58 2025 by rpki-client