Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: jxoI2TajElR+KMiGKeaQNZ8MDYtwJsbIrigkadNtJuc=
Subject key identifier: A1:E4:24:A3:8E:70:9C:E5:1C:48:1E:25:95:99:ED:DE:D2:7D:49:86
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 0197DA76324D8970FDAE7D175E63808F8B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 149C
Signing time: Sat 05 Jul 2025 12:01:08 +0000
Manifest this update: Sat 05 Jul 2025 12:01:08 +0000
Manifest next update: Sun 06 Jul 2025 12:01:08 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: TWaRU7QIZdhwbBow7XmIq20UPrVbIJ7Blcwh/GmFSTE=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:76:32:4d:89:70:fd:ae:7d:17:5e:63:80:8f:8b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Jul 5 12:01:08 2025 GMT
Not After : Jul 6 12:01:08 2025 GMT
Subject: CN=a1e424a38e709ce51c481e259599edded27d4986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:2d:97:92:bd:84:d3:61:84:45:b6:ff:02:
e5:75:8e:b0:18:e5:0a:11:55:f8:b7:49:05:c8:c7:
dc:75:f4:bb:ce:ed:89:88:92:cb:d9:88:20:d3:ed:
bc:6f:85:25:b6:b9:33:d7:86:fc:74:1f:55:0a:9d:
4e:1e:ac:1d:43:a8:aa:26:97:0d:a6:a9:d0:f9:27:
5e:00:38:75:ae:f6:70:25:9a:bd:2c:7b:71:ef:b1:
6c:bb:cf:c3:f3:ce:a5:a7:c2:ef:96:1f:3e:52:cb:
5c:d0:5d:97:de:b7:07:2d:e6:16:e5:e7:01:08:6b:
b4:1e:96:25:64:19:7e:ce:cd:f7:2b:5c:1d:8d:d8:
a0:e7:86:1e:ea:bd:b5:0f:01:68:6b:a4:23:ad:ee:
5c:19:07:1e:e7:06:b3:66:ba:c9:89:85:0e:5e:21:
92:f1:55:8a:ae:d1:5d:35:23:69:e9:40:20:3c:f1:
52:a5:d6:2d:71:c1:db:55:79:d0:24:41:74:8f:89:
28:8f:6c:6f:82:29:06:47:95:88:8a:e6:3c:de:b0:
0d:c1:14:fd:84:30:09:67:bd:55:c9:ef:54:a0:2e:
54:2d:39:d9:3d:2f:ae:10:96:21:75:3e:cd:6b:fc:
3e:bf:5b:24:81:2f:1c:c8:98:a8:4f:3e:a2:af:54:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:24:A3:8E:70:9C:E5:1C:48:1E:25:95:99:ED:DE:D2:7D:49:86
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:76:79:9f:b4:49:21:21:59:84:8d:c3:72:04:a1:7b:04:
81:10:ea:01:7a:f3:48:51:3f:a2:dd:8e:dd:b9:ba:56:ab:cd:
b4:fb:6e:38:53:41:2f:23:ab:f1:95:8d:1e:9f:e1:58:2f:f9:
81:40:14:5f:63:c2:47:57:46:eb:5d:ed:30:81:93:73:92:c6:
35:0f:80:42:fe:33:fe:2f:e8:06:0b:df:ef:ca:29:a6:ad:4f:
72:e3:93:56:33:ad:9a:a2:f7:d2:65:c1:21:4e:05:52:66:3f:
c3:aa:67:e6:60:7e:1e:5f:ff:36:28:d9:a4:c2:8a:27:65:48:
46:ef:ea:ad:cb:36:d8:61:43:96:be:40:67:64:98:a2:40:10:
79:b4:46:0d:ce:68:3e:43:94:e5:94:b6:55:c8:58:c4:07:31:
96:3a:e7:de:17:dc:59:43:d2:ae:f6:08:b1:17:18:0a:2e:b6:
b4:da:f9:2f:b3:01:b8:eb:ca:ae:f4:61:4c:0b:4c:fb:c0:d7:
a1:e2:7f:d8:54:d0:21:3d:cb:3f:6a:2e:bb:e0:f5:65:54:66:
66:3e:ed:0e:21:eb:95:f7:23:d8:8e:30:0e:d6:e5:89:6a:40:
66:a1:ff:46:c6:5a:c0:65:24:e0:ef:92:56:9c:e3:93:02:2e:
ca:c4:87:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfadjJNiXD9rn0XXmOAj4ssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw
ZGE5MzIwHhcNMjUwNzA1MTIwMTA4WhcNMjUwNzA2MTIwMTA4WjAzMTEwLwYDVQQD
EyhhMWU0MjRhMzhlNzA5Y2U1MWM0ODFlMjU5NTk5ZWRkZWQyN2Q0OTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSwtl5K9hNNhhEW2/wLldY6wGOUK
EVX4t0kFyMfcdfS7zu2JiJLL2Ygg0+28b4Ultrkz14b8dB9VCp1OHqwdQ6iqJpcN
pqnQ+SdeADh1rvZwJZq9LHtx77Fsu8/D886lp8Lvlh8+Ustc0F2X3rcHLeYW5ecB
CGu0HpYlZBl+zs33K1wdjdig54Ye6r21DwFoa6Qjre5cGQce5wazZrrJiYUOXiGS
8VWKrtFdNSNp6UAgPPFSpdYtccHbVXnQJEF0j4koj2xvgikGR5WIiuY83rANwRT9
hDAJZ71Vye9UoC5ULTnZPS+uEJYhdT7Na/w+v1skgS8cyJioTz6ir1RXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHkJKOOcJzlHEgeJZWZ7d7SfUmGMB8GA1UdIwQY
MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt
MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx
LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFd2eZ+0
SSEhWYSNw3IEoXsEgRDqAXrzSFE/ot2O3bm6VqvNtPtuOFNBLyOr8ZWNHp/hWC/5
gUAUX2PCR1dG613tMIGTc5LGNQ+AQv4z/i/oBgvf78oppq1PcuOTVjOtmqL30mXB
IU4FUmY/w6pn5mB+Hl//NijZpMKKJ2VIRu/qrcs22GFDlr5AZ2SYokAQebRGDc5o
PkOU5ZS2VchYxAcxljrn3hfcWUPSrvYIsRcYCi62tNr5L7MBuOvKrvRhTAtM+8DX
oeJ/2FTQIT3LP2ouu+D1ZVRmZj7tDiHrlfcj2I4wDtbliWpAZqH/RsZawGUk4O+S
VpzjkwIuysSH4A==
-----END CERTIFICATE-----
Generated at Sat Jul 5 18:19:41 2025 by rpki-client