Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: DD+3UUEsW6tV5PifdBvGMkej4AZLRZHGO4XUrv33+G4=
Subject key identifier: 26:FC:99:A9:EF:AF:65:DA:A6:6F:75:F2:67:D8:8F:0C:00:FE:D7:14
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 0199225559073A2BD12C81EA18298D213B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 018F
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: LxgoCm+QMTqx1YvSIT0CZDuPshTAwV5v490D7OT7BZ0=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:59:07:3a:2b:d1:2c:81:ea:18:29:8d:21:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=26fc99a9efaf65daa66f75f267d88f0c00fed714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:08:cf:18:94:a1:fe:9e:4e:dc:06:17:24:
38:a9:8a:55:97:d2:a8:72:95:9b:8b:d1:a9:39:9a:
19:6e:47:7a:65:88:97:2e:e7:eb:fb:92:95:bf:d7:
1f:06:bb:03:ce:6b:7d:e2:c0:44:82:63:22:38:18:
6c:f3:eb:85:5d:b6:1d:9d:b8:f3:e2:4b:9c:d2:b8:
a8:ed:6e:7d:21:a8:0d:93:eb:67:83:6c:9c:41:50:
9f:10:a8:6e:47:89:cf:0c:6e:a7:82:f5:d2:f0:64:
a0:53:01:a6:a4:0d:8a:ca:e8:16:e2:9f:71:1c:3d:
27:dd:e5:2e:80:2c:8a:0b:72:18:56:95:87:a0:ef:
cb:f4:89:4a:54:bf:0d:73:7e:80:86:be:f1:f3:ca:
1b:d7:88:4e:3d:ab:3b:76:62:64:18:86:6b:4f:40:
53:5b:da:aa:1a:12:81:b5:a0:37:3b:92:ee:9a:d8:
a8:67:55:fa:97:15:33:71:3d:0a:95:4b:48:36:d9:
e8:51:a5:cc:95:ba:f5:56:98:4b:ff:b9:45:36:b0:
11:67:33:32:ec:df:b8:91:e3:e8:f7:4f:c0:4a:87:
6e:1c:b6:b3:c4:c8:8e:76:e5:f5:cf:fc:84:2f:cd:
b0:b9:eb:8c:49:5d:01:68:c9:40:34:f3:7d:87:9b:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:99:A9:EF:AF:65:DA:A6:6F:75:F2:67:D8:8F:0C:00:FE:D7:14
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:37:25:48:fe:95:7c:17:ce:bd:0f:ee:31:d2:f0:33:ec:23:
b9:64:ce:a6:40:07:21:bd:41:fc:87:c4:84:2f:70:7f:ed:27:
1d:18:9f:2d:ec:db:c7:2d:ce:92:ee:11:7d:c7:6a:b3:e8:d8:
a7:c2:cc:05:28:af:84:d3:4d:8e:04:81:9a:b7:32:fd:74:4e:
cf:32:c6:95:4d:a8:1b:df:94:2f:71:24:7b:10:d1:76:59:78:
88:35:19:ff:a1:83:bf:ea:ae:b2:dc:3a:43:f0:4e:c0:9d:ba:
e5:ef:f0:78:6c:3c:7e:e4:24:3a:d2:f1:6d:5b:6f:83:dc:99:
98:85:26:37:87:94:fa:5d:4c:4b:3d:1c:13:43:97:42:a0:b8:
33:c0:d3:c8:40:3f:8f:55:13:30:c0:35:42:8c:06:59:12:c7:
dd:2d:f5:65:a3:d2:87:3a:37:3b:23:fa:bb:b1:40:18:11:a4:
c5:3f:2e:1e:4f:ec:2d:d5:51:4a:5c:84:aa:18:fd:ea:31:25:
da:71:1d:83:b9:02:d6:23:5b:0e:0d:05:1d:70:ae:88:0d:38:
05:3f:f9:88:7d:97:e6:b9:4d:3b:bf:66:0e:3c:b1:06:84:e6:
03:27:4a:0f:7a:6a:0b:94:78:7d:f1:97:eb:95:f9:c4:c0:ab:
50:10:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:38 2025 by rpki-client