Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: vi/Rd6woXJjowEnsb/cDvwjBfz2DezBitsk6ZVXnKa0=
Subject key identifier: C9:3E:F6:4B:D4:40:1E:3B:72:97:A6:E5:59:15:FB:EE:C8:88:57:82
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 01975EDD341FD016CA6139346EF77E734831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 1329
Signing time: Wed 11 Jun 2025 12:00:44 +0000
Manifest this update: Wed 11 Jun 2025 12:00:44 +0000
Manifest next update: Thu 12 Jun 2025 12:00:44 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: hVtDqw4hhpCwKof6I5Us6sGtIVVBhGNKWp45MRB2ib8=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:34:1f:d0:16:ca:61:39:34:6e:f7:7e:73:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 11 12:00:44 2025 GMT
Not After : Jun 12 12:00:44 2025 GMT
Subject: CN=c93ef64bd4401e3b7297a6e55915fbeec8885782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:0b:32:6e:fb:e9:e1:63:52:2d:15:a6:d6:
74:9b:09:c1:7c:bd:4d:d0:cf:1a:87:53:1f:84:90:
64:03:45:20:55:0d:87:bb:db:64:41:ad:e8:23:62:
c1:bf:c6:9c:c1:dd:2e:fb:ea:48:05:73:42:2f:25:
b7:b6:1c:92:a3:51:1d:ee:23:f3:58:91:8d:bf:b8:
e6:de:07:37:46:84:82:9d:82:d5:73:9f:0b:60:58:
30:60:ab:d9:a0:7d:bb:b3:da:94:73:95:2e:19:93:
f9:f1:fe:e4:34:b2:2e:26:de:03:44:0c:3f:1c:0e:
b1:e9:cc:dc:4d:fe:5b:30:4c:38:89:4d:43:70:c4:
9b:31:db:98:c2:b6:75:23:48:01:e9:86:d9:66:af:
d6:f5:8e:5d:b9:48:50:3e:04:79:a0:bd:74:40:8a:
32:b0:f9:4f:29:b9:76:fb:5a:c5:73:97:cf:e3:c0:
10:f6:d3:bf:c2:fa:1a:f5:a4:3a:93:ba:ad:64:60:
6e:35:e1:9d:cd:6d:2a:c1:93:67:80:9a:99:ea:2c:
70:a8:5c:54:f6:19:f1:04:cf:72:87:f7:9f:f3:29:
cf:f6:8c:48:f4:6b:2f:c8:2e:5b:28:05:19:1a:78:
39:2a:f6:23:e7:75:2c:13:87:13:41:ab:2c:3f:7d:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:F6:4B:D4:40:1E:3B:72:97:A6:E5:59:15:FB:EE:C8:88:57:82
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:e2:f9:92:e3:f3:ab:52:18:9d:af:71:05:44:b9:5d:3b:
10:9a:2e:e9:76:52:ba:1f:5e:2f:37:38:2d:1b:33:5d:c4:d0:
19:1b:1b:f3:6d:ea:dc:fe:72:d4:9e:c3:2a:82:4d:31:a4:69:
45:a0:da:a9:91:27:8a:f6:2c:b6:45:09:d7:a0:b7:41:13:65:
2a:ee:3c:92:74:fa:77:75:58:c0:cf:f0:0c:41:9a:b0:00:04:
d2:72:67:ba:3b:92:d0:36:32:50:1e:d3:82:ee:aa:a4:ef:e1:
76:ae:7b:81:ec:a9:89:95:ef:16:d7:73:98:c7:aa:c9:94:63:
a6:46:e0:e8:61:94:1f:83:5e:ee:13:66:aa:29:45:4e:07:c3:
f9:1e:d9:86:5b:52:68:50:21:04:48:72:0e:77:5c:3b:b2:8c:
e6:a0:68:49:95:03:67:8f:ca:d4:5b:a3:cd:1a:db:13:24:94:
e2:29:dc:44:b4:f1:1d:50:c4:f8:ab:4c:ea:7b:b1:af:62:ce:
d4:5a:e1:ff:b5:3b:27:3f:0c:19:39:f7:78:b1:88:8d:c4:06:
f7:fa:56:99:41:37:a7:13:2f:71:eb:91:49:c8:23:8d:a5:9d:
e0:0c:24:44:64:fb:c1:09:b5:4b:aa:4c:ff:49:96:ec:bb:24:
63:d8:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:09:04 2025 by rpki-client