Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: lshb4/iUCCTnv/suzgcCFdIM2c32UPCNfcaArG1aKYI=
Subject key identifier: 29:E3:67:2C:A5:B5:D4:98:12:C7:29:27:C7:BA:27:F1:62:0A:8E:5D
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0199244403662CC4CC666CC89CE42E3BBEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 027B
Signing time: Sun 07 Sep 2025 13:01:00 +0000
Manifest this update: Sun 07 Sep 2025 13:01:00 +0000
Manifest next update: Mon 08 Sep 2025 13:01:00 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: PcZuHJ3Z8wgK/+zN+Lg+ncYBJvfBQTn+Q0XddQuEAvM=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:03:66:2c:c4:cc:66:6c:c8:9c:e4:2e:3b:be:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Sep 7 13:01:00 2025 GMT
Not After : Sep 8 13:01:00 2025 GMT
Subject: CN=29e3672ca5b5d49812c72927c7ba27f1620a8e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0f:92:d0:98:e4:e5:f7:dc:ed:c5:18:38:2d:
a1:06:62:e7:bc:4f:dd:8d:19:df:c9:7b:bc:7f:da:
52:59:73:5e:d1:9f:d0:b4:f8:6e:28:b7:52:8c:1f:
70:8e:3c:e7:19:54:1f:0c:51:c0:c2:e1:3c:c5:26:
60:e5:68:67:a7:8d:08:79:6a:2a:b5:75:eb:77:3a:
a1:77:a4:39:f6:b2:a2:29:64:08:ac:d1:eb:ec:8e:
b1:23:12:e5:64:1c:c9:47:11:d0:56:4e:ae:42:5a:
04:50:3a:10:5a:4c:c8:bb:e8:39:bd:0f:6a:0e:14:
f2:12:3d:7d:fa:01:cc:74:36:db:62:14:8f:7b:d1:
4d:f5:73:02:77:1d:f8:9c:6b:88:b9:d1:39:eb:10:
5c:65:df:22:a4:98:68:07:77:8d:cd:13:7b:ab:82:
7e:7e:cc:7b:fc:0c:55:9d:6e:03:26:62:cf:dc:ce:
1f:b4:f6:3c:93:bb:7d:d1:83:16:82:d0:f5:89:4d:
11:05:7f:5c:91:84:ed:31:7b:b1:c5:f4:2b:d1:2a:
46:65:6e:9a:47:43:63:6e:ca:1e:74:1d:a3:c8:0a:
90:4f:da:98:69:c0:36:65:92:3f:41:09:33:5b:94:
f8:d5:9f:f7:ac:25:ce:da:50:40:13:7c:68:9b:ba:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:67:2C:A5:B5:D4:98:12:C7:29:27:C7:BA:27:F1:62:0A:8E:5D
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:00:9c:ed:5c:67:f4:7b:4d:83:88:88:8b:89:a7:80:3a:
0d:88:ff:08:59:17:0f:7b:4b:0d:37:cd:2f:6d:33:1c:45:18:
1c:56:b7:7a:e2:bb:a6:c3:ac:2c:84:15:43:ed:3e:2f:73:0b:
3a:35:df:72:e4:b8:52:4d:fb:dd:3e:84:a3:8c:07:d5:d6:f9:
26:95:0a:e2:52:df:a7:50:81:29:cf:8f:db:f2:a0:47:6b:b2:
61:2a:a1:d1:a4:85:33:ed:f7:ab:8f:0e:0d:67:b0:0d:01:ef:
8b:1c:1e:61:ff:23:7b:fe:6f:9b:f3:eb:51:66:14:74:18:5d:
c1:c0:3c:96:3b:77:71:73:57:2e:b7:38:db:d8:ea:63:6c:31:
23:56:d6:96:9c:33:ea:77:f1:ae:07:c8:64:29:12:5c:4a:31:
63:5d:0a:6e:b3:f6:35:de:bc:18:99:f9:07:ff:a1:4b:1b:40:
f9:53:1c:11:a4:be:f4:31:90:e3:d6:73:38:4f:fb:bb:d0:28:
6d:9c:48:43:51:72:a9:01:e4:2b:c8:5e:e0:e7:d1:c0:f7:30:
ae:bd:a3:64:75:e6:78:39:42:89:5f:50:d3:5a:46:2e:16:ed:
76:a4:dd:74:38:0a:00:50:4e:dc:18:68:ee:37:96:1f:3a:d3:
50:a3:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:35 2025 by rpki-client