Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: ANAeOYHWc7J5iwq6Tmt2X3cARad4WRsYzBOqQsjBzUM=
Subject key identifier: 9D:24:2B:A9:40:27:49:8C:5D:C9:1D:FD:7A:D3:79:38:C6:82:F9:2F
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 01976A73A27983FF089B0C111F843DF27054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 132F
Signing time: Fri 13 Jun 2025 18:00:52 +0000
Manifest this update: Fri 13 Jun 2025 18:00:52 +0000
Manifest next update: Sat 14 Jun 2025 18:00:52 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: /vhV4rtJyCk/F4zZXKADLSBZVQmGW7sZFwfTXq6gWhg=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:a2:79:83:ff:08:9b:0c:11:1f:84:3d:f2:70:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 13 18:00:52 2025 GMT
Not After : Jun 14 18:00:52 2025 GMT
Subject: CN=9d242ba94027498c5dc91dfd7ad37938c682f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:aa:65:bf:4f:d3:5b:22:2c:7b:5c:84:d7:
fd:23:53:b1:59:b3:41:f5:07:1e:20:68:4c:0c:9f:
ff:a7:1e:4c:0b:13:64:e1:95:e6:fa:e3:bb:e4:87:
b2:d8:44:85:57:e4:76:66:58:33:57:d8:2e:43:d4:
f4:b4:33:41:13:6c:a2:05:23:b7:ce:32:0a:28:a6:
9a:14:ec:43:b5:fb:f0:a1:1f:bc:33:c7:46:00:99:
76:49:af:ee:ce:b5:7a:1a:81:51:4d:1a:ea:07:2e:
9f:1e:37:f0:10:54:4f:ff:92:43:02:5b:7c:a3:68:
99:38:d0:d1:26:89:ff:27:96:88:e1:61:ef:0e:47:
76:7c:74:90:7d:bd:92:3e:85:ae:6c:cd:e5:95:95:
50:bc:c3:9b:94:ba:11:3d:a8:9d:e4:f3:b4:4e:37:
10:0f:e8:79:aa:69:a7:12:ba:0f:c2:32:01:eb:74:
b4:43:72:4d:28:fd:fd:0b:3c:6c:41:50:1b:5d:4c:
5b:2b:d9:b9:a3:1e:79:bf:2b:ba:de:b0:6c:ee:4d:
09:6a:18:85:29:d1:d7:6d:9c:4a:23:fd:ac:6d:aa:
21:4c:d8:e9:db:0e:01:8f:1d:38:01:98:33:2a:7d:
0d:9d:5a:7c:51:29:11:bc:fc:6b:2c:13:75:18:ab:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:2B:A9:40:27:49:8C:5D:C9:1D:FD:7A:D3:79:38:C6:82:F9:2F
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6a:af:0b:ee:6d:f6:c3:f7:b9:0b:7a:7f:26:36:51:8e:13:
e0:6f:f4:6d:4d:21:b2:f1:3f:2c:c2:a5:37:cf:1d:8f:92:6c:
72:6d:9d:e3:44:17:6e:a7:32:56:77:75:41:6e:d3:91:fe:95:
62:1d:6b:0c:42:0a:01:11:55:fd:41:1b:ba:d2:2e:20:a8:c9:
5f:a5:98:86:ae:fb:2e:64:a0:fe:03:86:47:74:d9:6d:65:46:
81:cf:5d:f2:73:14:6f:52:c4:81:b9:69:71:24:95:fe:37:33:
a5:5f:f9:85:30:3f:87:b4:96:c7:a0:0b:e8:81:69:f6:96:02:
05:1f:67:cf:9f:b5:25:7b:da:e7:82:4b:51:29:33:3e:5e:4c:
34:4c:ea:8a:88:86:7c:d3:fc:85:28:52:71:e5:1d:5c:d0:52:
b6:4a:72:a6:1a:f1:66:d6:6b:a9:52:96:80:1c:e4:06:88:44:
47:71:95:9c:55:ab:f1:84:29:67:4d:02:ec:32:b3:71:dc:5c:
da:e7:ef:3e:7c:a5:c8:c7:b0:9b:d5:52:a4:7c:9c:2b:d1:90:
b0:58:8a:da:28:b1:de:46:83:6c:53:03:e3:33:42:5e:96:3c:
9b:b6:75:3b:71:cf:54:48:0b:8d:8c:92:83:14:bd:af:a5:e9:
36:bb:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:38:54 2025 by rpki-client