Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier: fLZ5Fl8swLMW9lYRkDWtfRj9H7P21sd+fveTPiW0gD0=
Subject key identifier: 1D:A9:F4:11:72:8B:B1:D8:B1:72:33:71:A3:16:2A:42:50:35:FC:42
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 019749D5F36DC460A89763CED0FD4142CA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: jOzmYFux/YbwxbtHk9xrJMvo7JWPsB9qFu/tbtCklRE=)
3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f3:6d:c4:60:a8:97:63:ce:d0:fd:41:42:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=1da9f411728bb1d8b1723371a3162a425035fc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:d4:75:e7:6d:a8:c8:80:c5:f1:06:90:6d:
a5:78:6c:76:96:2a:6e:a3:93:35:df:7f:82:0a:ff:
08:af:6f:97:05:49:6f:f5:dc:84:32:00:8f:7d:58:
97:03:0d:96:46:00:31:39:fb:86:45:bd:39:90:4d:
a5:aa:16:ca:8b:43:b5:34:62:1b:36:f5:62:a3:b1:
4b:08:a5:a7:7a:ac:da:1a:6d:c1:6c:af:53:7e:49:
b2:df:27:63:8c:d2:d9:9e:5a:32:62:e1:51:14:a1:
dc:4c:ff:89:05:41:a1:96:f8:8f:bb:05:52:07:0b:
cb:7f:04:8c:8d:b7:89:75:c2:e8:55:9b:b8:1c:1e:
c3:0c:b3:87:25:90:97:e3:c4:19:e2:d4:0d:d9:db:
b3:86:2d:60:f9:01:a6:ae:9a:1c:0e:4f:86:1a:e3:
86:17:e9:2f:67:f2:d9:7a:2b:49:d8:7d:c7:76:ea:
1a:cc:3f:d3:77:4a:d8:c0:6d:a3:6b:d4:fe:15:4d:
d0:ec:8b:a1:7c:09:cc:70:b6:70:4d:1c:f3:56:9e:
f6:bd:5f:4a:d2:28:1b:c0:88:f2:96:1e:7d:6c:29:
00:3c:be:07:a1:99:ee:99:3d:ef:a1:72:f9:3f:21:
ff:48:0e:22:d7:9e:17:8c:14:01:12:d4:9e:dd:ab:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:F4:11:72:8B:B1:D8:B1:72:33:71:A3:16:2A:42:50:35:FC:42
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:28:cf:c4:87:23:81:d8:b0:00:59:39:72:bc:b7:56:e4:
02:76:d9:94:c8:22:3e:44:e0:c9:c3:6d:8b:06:01:c7:21:a6:
ba:83:14:19:cb:00:96:b4:34:87:fe:e3:33:88:77:60:27:0e:
f8:54:a9:84:56:7d:30:57:66:d2:70:fc:33:66:26:ee:60:86:
27:3b:cf:7c:10:5f:cb:ab:49:f0:c2:12:80:99:dc:18:43:e5:
7d:7b:3f:70:e4:14:79:5a:f9:27:e9:b2:24:c0:05:80:31:af:
79:fe:d7:d6:3d:6c:a8:70:fb:90:06:17:53:a2:91:ec:9f:46:
cb:af:4c:8e:1f:79:b3:39:3e:69:64:80:42:56:93:22:33:56:
66:b0:d4:60:b9:6f:89:43:76:3b:82:ef:c9:52:0c:0f:41:f2:
09:f4:45:d8:40:72:f2:b0:a7:85:43:5f:0e:56:2f:ac:c7:5d:
9b:99:bc:da:6b:0e:4a:60:af:d9:4e:40:bd:cb:8b:95:c0:fd:
82:71:d4:65:05:6d:02:ac:44:3e:6e:9d:3d:94:1f:35:e8:18:
fa:91:f6:b5:e6:69:b8:4c:6d:11:b0:3d:0e:46:d2:c5:b4:7f:
f9:c9:f0:88:c1:4e:af:ca:82:f2:35:9d:6a:cd:b0:a0:55:7c:
7b:be:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:28 2025 by rpki-client