Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier: BITdWvjf35iDdhavvkm5XvLQAzW2W9C9L2LQmkVPhq0=
Subject key identifier: 56:41:2A:1E:51:95:46:BA:83:56:A6:96:D8:A2:78:74:D2:D6:84:F7
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 01984AAEAA88773482867092AE41F1440CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: JLGqiWWsxpSlShm/Kj71uTqgtGa9I/cDWLf5lLCCu6g=)
3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:aa:88:77:34:82:86:70:92:ae:41:f1:44:0c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=56412a1e519546ba8356a696d8a27874d2d684f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:fb:71:89:52:14:da:cb:bf:5b:6d:1b:2b:
c3:06:81:38:a5:3e:0e:08:40:c9:6d:15:ff:32:8b:
a2:a0:f0:5b:a9:cb:09:87:45:2e:b6:09:2e:4a:3e:
5f:91:cb:75:68:c3:48:51:19:32:85:a9:69:22:29:
d7:1e:40:ed:96:e4:f1:7e:69:fc:c2:29:45:86:1f:
5d:9c:c7:7f:3d:84:03:c0:06:04:d2:d8:be:b5:69:
9c:b1:08:a2:70:7e:da:05:d5:c5:f7:a8:0e:dc:b1:
ea:1d:47:45:a3:28:ff:5e:a7:57:4d:1a:ef:b3:95:
98:c4:a4:f1:a0:2c:7d:5a:7b:fd:05:ea:d7:44:97:
be:32:5f:02:91:79:b9:17:db:c5:cd:a8:04:cd:6a:
3d:2a:ac:d7:e7:e9:dd:6b:38:41:95:f4:b0:31:3f:
3f:ed:a5:5a:1e:ae:0b:70:85:10:9c:f6:ae:94:8c:
b1:f6:f2:1e:29:ae:77:a6:8e:a2:94:de:e5:eb:a3:
3a:73:73:59:54:67:2a:63:79:ff:41:4f:f5:3c:a5:
1f:2b:c5:62:26:e5:2c:4b:3d:46:77:3d:a8:d2:f8:
a5:bb:9f:1d:4a:ca:f3:16:9a:a7:1a:1f:90:cd:a6:
94:2a:85:34:85:9c:d5:ca:b2:85:ba:4f:b7:e6:31:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:2A:1E:51:95:46:BA:83:56:A6:96:D8:A2:78:74:D2:D6:84:F7
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:35:fc:75:9f:00:bb:e3:fd:5f:b0:63:9f:fc:34:ac:ec:
08:6e:a1:f9:21:c8:02:2f:47:30:6f:fe:3e:8b:e4:1b:6b:78:
12:0e:f2:80:af:73:c5:b8:bd:0d:4d:12:3b:6c:05:fc:a2:52:
73:6a:c3:c4:e1:d8:83:c5:42:1b:83:34:07:a4:21:ee:89:ad:
21:34:91:65:3d:9a:b6:e4:f6:83:e9:ee:82:c3:81:b6:55:c1:
98:48:32:c0:da:38:28:ea:3c:f3:1f:c8:ca:43:2b:3e:d3:2d:
0c:25:0b:de:b5:bf:71:d5:bf:eb:a3:d4:d2:45:5c:93:67:88:
91:9a:d3:a3:59:fe:ec:db:ce:35:a0:12:19:8d:48:9d:f5:b8:
8b:1f:55:80:40:ff:49:57:71:6c:e8:2a:6f:a6:0c:ea:7f:09:
1d:8d:6f:7a:e5:14:f1:bf:16:d7:d0:4c:03:e0:0a:a9:8c:a8:
69:2c:79:5a:1c:3a:1f:92:69:ee:31:ad:48:b4:0d:f3:05:c3:
6d:1a:5a:63:cc:7c:2a:7d:05:fe:34:41:4a:75:81:82:23:29:
3e:c6:0c:5d:d8:fb:22:67:6e:79:ea:77:67:79:22:35:28:21:
e4:d2:2b:a4:30:c8:42:63:e3:71:1b:f5:5a:af:28:26:3c:ba:
89:75:e9:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrqqIdzSChnCSrkHxRAzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWQ4NmFhYjRjMDk3NGYwYzI3ZjQzZDk2OGRmNDI2ZjUz
ZGY1ZDIwHhcNMjUwNzI3MDcwMDE3WhcNMjUwNzI4MDcwMDE3WjAzMTEwLwYDVQQD
Eyg1NjQxMmExZTUxOTU0NmJhODM1NmE2OTZkOGEyNzg3NGQyZDY4NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHL7cYlSFNrLv1ttGyvDBoE4pT4O
CEDJbRX/MouioPBbqcsJh0UutgkuSj5fkct1aMNIURkyhalpIinXHkDtluTxfmn8
wilFhh9dnMd/PYQDwAYE0ti+tWmcsQiicH7aBdXF96gO3LHqHUdFoyj/XqdXTRrv
s5WYxKTxoCx9Wnv9BerXRJe+Ml8CkXm5F9vFzagEzWo9KqzX5+ndazhBlfSwMT8/
7aVaHq4LcIUQnPaulIyx9vIeKa53po6ilN7l66M6c3NZVGcqY3n/QU/1PKUfK8Vi
JuUsSz1Gdz2o0vilu58dSsrzFpqnGh+QzaaUKoU0hZzVyrKFuk+35jFcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZBKh5RlUa6g1amltiieHTS1oT3MB8GA1UdIwQY
MBaAFIpdhqq0wJdPDCf0PZaN9Cb1PfXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMt
ZjhhODM2ZjAxYjIxLzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMtZjhhODM2ZjAxYjIx
LzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfA1/HWf
ALvj/V+wY5/8NKzsCG6h+SHIAi9HMG/+PovkG2t4Eg7ygK9zxbi9DU0SO2wF/KJS
c2rDxOHYg8VCG4M0B6Qh7omtITSRZT2atuT2g+nugsOBtlXBmEgywNo4KOo88x/I
ykMrPtMtDCUL3rW/cdW/66PU0kVck2eIkZrTo1n+7NvONaASGY1InfW4ix9VgED/
SVdxbOgqb6YM6n8JHY1veuUU8b8W19BMA+AKqYyoaSx5Whw6H5Jp7jGtSLQN8wXD
bRpaY8x8Kn0F/jRBSnWBgiMpPsYMXdj7Imdueep3Z3kiNSgh5NIrpDDIQmPjcRv1
Wq8oJjy6iXXpBA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:52:41 2025 by rpki-client