Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: xkPzOb35D8hUpLSAhhVfkoIgDf5S8rguFizLL6slAlg=
Subject key identifier: 4F:80:46:55:B1:E2:4F:F0:00:22:FE:AF:87:38:10:CF:1E:A6:D1:D8
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019760CBD1C84B7A70713803CF748728564B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 132A
Signing time: Wed 11 Jun 2025 21:00:59 +0000
Manifest this update: Wed 11 Jun 2025 21:00:59 +0000
Manifest next update: Thu 12 Jun 2025 21:00:59 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: COMFVJIHM56irDirqv0mxmtBqnsaPNCwobrcqPp+pP4=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:d1:c8:4b:7a:70:71:38:03:cf:74:87:28:56:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jun 11 21:00:59 2025 GMT
Not After : Jun 12 21:00:59 2025 GMT
Subject: CN=4f804655b1e24ff00022feaf873810cf1ea6d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:2a:ab:f7:0b:13:29:a2:93:84:e4:58:c9:
ec:70:66:ce:56:13:eb:aa:61:ad:d9:25:e3:b4:60:
0e:81:16:82:9b:ab:71:dd:db:a7:e2:4b:2c:37:96:
f4:2f:d1:53:df:4d:81:53:b2:ad:84:14:81:59:bc:
74:ca:5b:78:2e:f4:65:ee:26:4b:6f:58:e7:2a:b1:
e9:49:4b:b3:1a:e1:fe:47:34:8d:2d:0c:d6:4b:a2:
b2:e5:dd:b3:fa:2f:00:a8:39:05:12:45:ce:da:10:
fc:68:9f:73:55:ad:c1:f8:2c:c0:90:55:0b:4a:5b:
7a:de:95:fb:d0:19:31:46:80:6e:c8:9c:b7:d1:0e:
40:3a:f7:62:d7:29:9a:c2:fb:a1:56:60:49:ad:fa:
b8:2d:23:66:83:34:dc:54:62:b3:32:ff:58:ff:29:
17:b1:a6:1f:27:e4:01:09:41:59:13:ff:01:e5:dd:
c3:b6:28:22:a5:96:ed:ec:7e:e5:c2:04:66:21:07:
4a:41:c5:7a:63:f1:68:d1:c9:e0:44:1e:f9:37:df:
3f:c1:02:5f:3d:cd:da:43:4f:62:9f:d3:16:8d:3d:
a4:96:b9:63:43:7e:2b:1b:eb:21:35:fc:3b:b9:00:
f6:fe:2f:b9:68:74:a3:09:7f:19:75:66:18:cc:ca:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:46:55:B1:E2:4F:F0:00:22:FE:AF:87:38:10:CF:1E:A6:D1:D8
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:73:87:d9:55:b9:b9:d7:b4:10:d5:84:20:54:9a:e4:89:8a:
cf:fc:ab:53:87:73:d8:77:05:e1:81:7d:5c:8f:07:4a:20:ba:
39:cc:d8:f3:b3:9c:23:ec:68:83:6d:f0:a6:21:ff:f1:6f:1e:
13:4c:05:0a:16:0b:20:f0:0d:40:c9:78:eb:cf:2b:6f:ff:c0:
44:aa:19:7c:ef:e9:a5:90:b0:1e:df:9d:a8:d4:d9:47:d6:17:
c2:30:e3:b2:a0:cc:fa:93:1b:05:39:47:1c:52:2c:fd:09:45:
c4:b8:2b:79:38:ee:64:db:e5:6d:ac:bc:ed:fa:ac:cb:1b:6c:
78:34:e7:56:a7:5e:6f:2e:64:ee:fe:cc:75:be:99:b8:e2:3b:
0f:de:5c:88:2d:a5:56:8c:72:d3:ac:e2:82:6e:b0:c7:86:78:
39:26:35:6c:b7:06:3f:8e:e0:e9:81:fa:2b:30:de:b7:ad:02:
cc:50:3e:5e:05:2b:91:01:23:a8:f2:8f:ac:82:a1:06:cf:0a:
74:d9:0c:b8:59:96:32:32:3c:cb:98:69:e3:b9:23:fa:9e:ce:
20:61:bd:64:21:f4:e5:6f:53:3d:67:b3:18:89:11:49:55:83:
a7:ac:03:86:c0:1d:cd:5a:3e:29:63:38:54:44:8a:df:a4:8b:
3c:ad:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:16:17 2025 by rpki-client