Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: 1P7wEzCe9N3fuJP60q2/40WR+G3IDTWLaEhRnc9FMfw=
Subject key identifier: 1F:0D:FD:7F:74:C8:A9:66:A4:95:E8:6B:24:DD:30:44:EA:55:2B:7D
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019768853DA67B9DF38F0FFEE75FC260FBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 132E
Signing time: Fri 13 Jun 2025 09:00:51 +0000
Manifest this update: Fri 13 Jun 2025 09:00:51 +0000
Manifest next update: Sat 14 Jun 2025 09:00:51 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: LasSoA5DRoDTYmAx+ozbu6VYCeSj90/BSJ0DZi/hqp8=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:3d:a6:7b:9d:f3:8f:0f:fe:e7:5f:c2:60:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 13 09:00:51 2025 GMT
Not After : Jun 14 09:00:51 2025 GMT
Subject: CN=1f0dfd7f74c8a966a495e86b24dd3044ea552b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:67:8f:28:3a:83:f2:a4:16:a7:df:79:03:
11:2e:f7:2a:23:9e:65:a2:9a:fa:76:21:86:65:59:
db:4b:ae:72:6d:d7:e6:19:89:b7:e7:1d:6a:9e:43:
23:18:05:41:8e:47:ab:c5:35:d7:65:66:10:09:78:
66:79:0f:75:90:20:15:c8:5d:74:c8:7a:91:35:62:
3f:e1:e3:35:f7:b2:f8:57:89:9d:d5:e8:38:b9:a6:
ba:bc:ec:df:1d:68:19:f0:88:f8:e2:e7:ac:19:30:
18:b2:8c:b9:1b:36:ee:4e:3a:6f:15:6b:7e:ab:bc:
30:63:72:7a:0d:0d:31:12:19:03:4f:9c:de:8e:45:
44:9c:9d:f4:47:6f:ca:f9:f3:d7:56:60:64:05:88:
5b:1a:0d:c8:e1:4b:ab:07:de:ec:23:2f:75:25:62:
32:00:2f:ed:27:7e:d1:8b:72:b0:05:34:a0:16:66:
0a:61:d6:97:66:b1:a0:03:8b:5e:d7:c8:a2:61:f9:
a0:12:c4:c4:9f:68:a2:a3:72:dc:07:3d:9f:6d:36:
ed:df:b6:92:ad:74:71:2a:09:01:df:87:67:5f:b3:
c3:99:7f:b5:4e:64:a1:6c:80:ce:00:88:3f:43:95:
a7:4c:53:ae:01:86:cb:bb:24:2b:8e:11:b9:47:90:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:FD:7F:74:C8:A9:66:A4:95:E8:6B:24:DD:30:44:EA:55:2B:7D
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:46:c1:2d:01:a0:cb:8d:12:e9:49:29:de:ed:2a:fe:10:
9a:27:cd:95:2b:74:9f:df:69:b5:42:16:08:aa:9d:2a:91:23:
3d:71:dc:b5:ef:c7:21:3a:3a:4d:bb:9d:6e:b9:9f:43:06:39:
4b:78:76:90:f5:57:bc:42:ef:07:22:21:68:04:43:44:3a:af:
48:a2:30:b3:d8:de:6a:ce:5b:a0:61:5a:a8:41:15:35:c3:fb:
b7:c3:9c:ce:12:63:67:a6:46:3f:b0:5f:80:19:3b:a4:ce:2d:
a4:67:16:5e:6e:a5:32:b2:6c:b7:1c:9f:08:e8:47:69:0b:17:
8e:10:bd:26:5f:d6:a7:dc:1d:67:2c:e0:31:40:7e:e3:5a:17:
b4:8d:cd:ed:a9:c4:c7:ee:23:44:e1:84:2b:99:b5:0a:18:d2:
fc:28:7f:47:7e:04:e5:12:72:78:1a:72:3c:54:1a:19:f6:69:
9c:1d:1d:96:70:ac:9d:38:c2:76:39:6a:a0:e1:ab:f1:ac:44:
12:00:6a:5e:54:da:71:32:b5:e1:07:c9:d4:1a:bf:7a:59:0f:
6c:e2:55:e0:fc:6e:ea:42:9d:44:60:73:c1:2e:07:90:ed:dd:
23:b7:57:c6:70:8e:49:b0:c2:b9:48:ad:c2:9a:d3:b8:d5:4c:
59:08:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:22:49 2025 by rpki-client