Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: SFYkUXfRaZyVaJ7N477JygIaLN1o6HeHXXsEa2oAMhI=
Subject key identifier: 40:BE:EF:0C:F5:67:C7:E9:A5:58:37:56:78:1A:02:F9:98:E1:D3:F3
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 01975B009557DC3F90B63ECEB1033278C934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 1327
Signing time: Tue 10 Jun 2025 18:00:54 +0000
Manifest this update: Tue 10 Jun 2025 18:00:54 +0000
Manifest next update: Wed 11 Jun 2025 18:00:54 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: qi5U1DffB/suGh/uPZdTcmaVgKAkzvN5beBq99yp0uI=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:00:95:57:dc:3f:90:b6:3e:ce:b1:03:32:78:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 10 18:00:54 2025 GMT
Not After : Jun 11 18:00:54 2025 GMT
Subject: CN=40beef0cf567c7e9a5583756781a02f998e1d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:70:af:41:65:d2:87:7b:37:52:8b:43:2b:
18:82:5a:10:6e:8a:b0:aa:1e:bf:28:49:a2:59:6d:
dc:af:67:43:67:43:4e:1e:74:e1:dd:14:0f:ff:c0:
db:6a:aa:ae:66:e6:38:55:36:f2:a0:1a:70:47:42:
8b:0d:c0:16:ee:a4:e8:46:ac:0c:47:ed:e0:28:22:
96:18:a4:d2:2e:30:8c:4c:66:30:3f:07:35:8f:82:
2a:85:0e:75:3f:2e:cf:2b:10:5f:77:09:ec:2d:a9:
a7:c1:13:df:b3:74:e1:bb:58:77:0f:73:95:a6:65:
12:cf:b6:b8:b4:e8:a1:50:8d:db:50:3d:10:82:46:
73:dc:45:46:ee:1f:28:d0:56:5b:3b:57:aa:7c:6d:
dc:1c:f5:47:5c:36:8f:a0:fb:1e:f6:97:89:0c:e5:
70:5e:98:f0:a4:72:dd:9d:bd:5f:11:cd:54:37:9f:
16:28:73:8a:15:67:31:aa:ba:7e:85:2c:da:02:14:
b3:c0:13:3f:7c:3a:d5:91:a9:1d:6a:2e:3e:08:43:
cf:5e:de:1e:f4:7f:5e:73:a6:9d:8f:af:0c:57:61:
5b:20:57:4d:f7:f7:ca:1c:ab:16:3e:07:61:91:41:
57:67:3e:2f:a1:aa:9c:d0:69:77:9b:1e:56:94:49:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:EF:0C:F5:67:C7:E9:A5:58:37:56:78:1A:02:F9:98:E1:D3:F3
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:a7:2c:e0:2e:30:99:27:e2:51:02:cc:6b:58:4a:d6:b4:
dd:53:bc:82:8c:c1:92:c2:0e:50:6c:e9:e7:de:ab:2a:96:75:
b1:2e:b2:5b:25:96:5c:0b:d3:44:7c:7f:f2:51:b8:64:81:fe:
5e:bc:bc:97:37:cb:99:85:17:30:34:36:85:b7:7f:5e:02:21:
03:88:3b:8b:14:28:98:3b:af:43:61:ea:20:a8:16:c9:fc:1e:
64:9a:1e:0f:eb:33:9a:95:86:33:c6:d7:b9:26:2f:54:b1:d2:
ac:6d:e1:cc:75:11:56:2f:bd:3f:70:cd:4f:66:75:49:9f:be:
9d:fe:53:ae:4a:39:d6:90:43:df:38:d5:b2:8b:ef:ca:60:27:
96:1e:e6:d9:a8:38:18:18:21:41:b3:ae:9d:d7:11:02:ad:23:
41:d2:05:96:d9:dc:2e:96:09:b6:d8:bb:dd:cd:4d:2f:70:62:
70:af:8a:61:0a:10:cc:ba:39:9a:e0:0d:5f:88:9a:64:9a:55:
36:0e:52:dc:71:9c:dc:ad:66:78:8b:f1:dd:cf:99:3f:c2:23:
7a:73:f1:b0:92:2e:02:0f:92:58:9a:5d:f9:ce:1e:8c:07:48:
09:15:f3:9d:03:98:92:6a:3d:c6:05:7b:94:03:05:0d:30:2e:
bb:68:3c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdbAJVX3D+Qtj7OsQMyeMk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTRiY2MwMzI5M2UzYWQwZTE5YTdhM2ZkMWIxY2ZiZDM0
YzA5OTAwHhcNMjUwNjEwMTgwMDU0WhcNMjUwNjExMTgwMDU0WjAzMTEwLwYDVQQD
Eyg0MGJlZWYwY2Y1NjdjN2U5YTU1ODM3NTY3ODFhMDJmOTk4ZTFkM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Fwr0Fl0od7N1KLQysYgloQboqw
qh6/KEmiWW3cr2dDZ0NOHnTh3RQP/8DbaqquZuY4VTbyoBpwR0KLDcAW7qToRqwM
R+3gKCKWGKTSLjCMTGYwPwc1j4IqhQ51Py7PKxBfdwnsLamnwRPfs3Thu1h3D3OV
pmUSz7a4tOihUI3bUD0QgkZz3EVG7h8o0FZbO1eqfG3cHPVHXDaPoPse9peJDOVw
XpjwpHLdnb1fEc1UN58WKHOKFWcxqrp+hSzaAhSzwBM/fDrVkakdai4+CEPPXt4e
9H9ec6adj68MV2FbIFdN9/fKHKsWPgdhkUFXZz4voaqc0Gl3mx5WlEl6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC+7wz1Z8fppVg3VngaAvmY4dPzMB8GA1UdIwQY
MBaAFCJUvMAyk+OtDhmno/0bHPvTTAmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAt
NGUzNDdkNTUxYzNmLzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAtNGUzNDdkNTUxYzNm
LzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACO+nLOAu
MJkn4lECzGtYSta03VO8gozBksIOUGzp596rKpZ1sS6yWyWWXAvTRHx/8lG4ZIH+
Xry8lzfLmYUXMDQ2hbd/XgIhA4g7ixQomDuvQ2HqIKgWyfweZJoeD+szmpWGM8bX
uSYvVLHSrG3hzHURVi+9P3DNT2Z1SZ++nf5Trko51pBD3zjVsovvymAnlh7m2ag4
GBghQbOundcRAq0jQdIFltncLpYJtti73c1NL3BicK+KYQoQzLo5muANX4iaZJpV
Ng5S3HGc3K1meIvx3c+ZP8IjenPxsJIuAg+SWJpd+c4ejAdICRXznQOYkmo9xgV7
lAMFDTAuu2g8Jg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:40:39 2025 by rpki-client