Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: 3eyJtBdkER5J0sd8rkKM1M73ox1e4ceA8fHswrCJdw8=
Subject key identifier: 45:E7:B0:5B:2C:2F:D4:05:D3:52:DD:12:8D:D1:D0:76:52:24:0F:85
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 0198D583D6823AA957EB0E03CAA7EAA174EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 151E
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: XrBSZwMw7owdODlT1i3kPyS+NVCe7BCZsGedkob3yY8=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d6:82:3a:a9:57:eb:0e:03:ca:a7:ea:a1:74:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=45e7b05b2c2fd405d352dd128dd1d07652240f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:64:e9:7b:53:47:56:1e:6f:eb:6c:96:bf:
b9:6b:28:f7:7d:13:94:8e:45:ba:2f:cf:0d:10:81:
3c:0a:a7:e6:29:85:c1:00:39:b7:ea:da:39:37:a9:
f8:05:e9:ab:4d:8f:21:c6:1b:88:59:3e:2a:36:e7:
a1:de:8b:cb:64:93:58:8d:9e:16:2a:1e:f4:20:21:
26:79:05:f3:43:0f:ec:3a:8c:a2:fa:e2:e5:2e:6e:
c3:48:ca:11:13:9c:f1:2e:35:65:89:d8:c7:bd:34:
be:19:7d:99:0b:6e:e4:73:a6:c7:22:35:6f:fb:86:
6b:8d:61:4d:68:d0:c5:1e:c1:12:a0:91:ac:e9:84:
07:fb:17:7d:78:d4:7f:b5:64:1d:c3:6a:b2:53:09:
92:20:26:0b:5f:cc:9e:54:96:67:33:69:80:89:b3:
13:e5:6f:8c:0b:60:c3:77:63:80:8f:f4:59:ca:da:
a3:13:51:8a:bf:e9:41:9d:1b:0f:d8:05:37:8a:b0:
a2:b3:f5:6a:41:ea:07:57:b5:f3:15:1a:96:7d:85:
3e:1e:db:ef:e1:8c:13:4c:42:c7:c4:72:ad:1c:a9:
92:a4:2c:1d:0e:b3:58:53:ab:ee:6d:b2:95:b8:69:
9b:c0:a4:3a:b7:fe:47:97:64:34:17:de:9d:23:30:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E7:B0:5B:2C:2F:D4:05:D3:52:DD:12:8D:D1:D0:76:52:24:0F:85
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:78:8d:57:04:36:67:0e:c4:0f:98:19:b5:69:1b:7a:70:
02:b7:95:c9:1b:cc:d9:42:74:2a:d5:fe:55:2a:54:58:1e:53:
dc:d6:42:e7:0c:6a:d7:dc:34:71:94:dc:e1:42:f3:df:13:3e:
48:cc:43:36:2f:7c:d6:29:ef:d1:fa:34:5c:a2:c6:84:92:4a:
af:8f:35:33:3d:d8:c2:42:59:29:a0:1e:a3:7b:bc:cf:ab:ed:
b5:96:17:ea:06:4c:b6:5e:20:c7:65:2b:01:29:e7:da:28:46:
ab:33:4c:0b:ea:08:fd:66:a7:7b:86:80:5c:24:50:22:da:78:
96:62:96:8d:76:90:99:e8:0d:3f:c4:d5:38:23:5c:45:8b:11:
0a:52:06:0f:ce:da:d7:60:53:52:fc:93:0b:ae:f5:34:44:b8:
bb:94:52:f4:15:05:5c:44:25:04:65:66:3f:7f:ba:2f:79:49:
ef:30:28:c5:e3:5a:9a:d7:0a:2b:4b:a7:c4:ff:5c:77:81:89:
9f:b9:98:0a:b8:8c:e3:c0:4d:4c:3b:0f:88:83:ab:7b:5b:7b:
18:be:f5:31:bc:7f:b5:77:6e:ee:ab:4f:b1:fe:5e:da:60:66:
79:e8:0b:f1:4f:1b:94:c9:82:ee:7b:c1:3f:0d:c9:da:2f:79:
2e:23:1f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9aCOqlX6w4DyqfqoXTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw
ZGE5MzIwHhcNMjUwODIzMDYwMDQzWhcNMjUwODI0MDYwMDQzWjAzMTEwLwYDVQQD
Eyg0NWU3YjA1YjJjMmZkNDA1ZDM1MmRkMTI4ZGQxZDA3NjUyMjQwZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtapk6XtTR1Yeb+tslr+5ayj3fROU
jkW6L88NEIE8CqfmKYXBADm36to5N6n4BemrTY8hxhuIWT4qNueh3ovLZJNYjZ4W
Kh70ICEmeQXzQw/sOoyi+uLlLm7DSMoRE5zxLjVlidjHvTS+GX2ZC27kc6bHIjVv
+4ZrjWFNaNDFHsESoJGs6YQH+xd9eNR/tWQdw2qyUwmSICYLX8yeVJZnM2mAibMT
5W+MC2DDd2OAj/RZytqjE1GKv+lBnRsP2AU3irCis/VqQeoHV7XzFRqWfYU+Htvv
4YwTTELHxHKtHKmSpCwdDrNYU6vubbKVuGmbwKQ6t/5Hl2Q0F96dIzA2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXnsFssL9QF01LdEo3R0HZSJA+FMB8GA1UdIwQY
MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt
MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx
LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+94jVcE
NmcOxA+YGbVpG3pwAreVyRvM2UJ0KtX+VSpUWB5T3NZC5wxq19w0cZTc4ULz3xM+
SMxDNi981inv0fo0XKLGhJJKr481Mz3YwkJZKaAeo3u8z6vttZYX6gZMtl4gx2Ur
ASnn2ihGqzNMC+oI/Wane4aAXCRQItp4lmKWjXaQmegNP8TVOCNcRYsRClIGD87a
12BTUvyTC671NES4u5RS9BUFXEQlBGVmP3+6L3lJ7zAoxeNamtcKK0unxP9cd4GJ
n7mYCriM48BNTDsPiIOre1t7GL71Mbx/tXdu7qtPsf5e2mBmeegL8U8blMmC7nvB
Pw3J2i95LiMfvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:16 2025 by rpki-client