Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: GCrz7oHnn37N5nHds7SMZZx1dmcRGXcp+K30sDEio2w=
Subject key identifier: 61:1F:D5:BC:69:20:07:CC:AF:37:F5:3D:AF:9A:92:66:27:30:F2:6C
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 0196C64CC6692D4F01F10E25263BA3677B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 140D
Signing time: Mon 12 May 2025 21:00:42 +0000
Manifest this update: Mon 12 May 2025 21:00:42 +0000
Manifest next update: Tue 13 May 2025 21:00:42 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: afoacmvkmdAD1ZKYuB6WRsd88IQyWpCtS5nCz2/RvK8=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:c6:69:2d:4f:01:f1:0e:25:26:3b:a3:67:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: May 12 21:00:42 2025 GMT
Not After : May 13 21:00:42 2025 GMT
Subject: CN=611fd5bc692007ccaf37f53daf9a92662730f26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:ad:ed:73:93:b0:df:9d:03:eb:79:d0:8c:
90:c9:32:b4:6b:80:05:4d:8d:86:56:26:9f:25:78:
b6:ff:96:48:7c:7f:13:3b:d0:36:dc:ff:59:50:ab:
38:57:fd:5c:6f:19:26:4b:04:52:01:33:d9:31:af:
91:7e:61:37:0e:98:90:92:d7:ed:58:85:57:86:0c:
fc:48:b1:76:14:92:e3:0c:d5:c5:ba:fc:1f:bc:36:
05:dd:5b:11:a2:a4:13:f3:19:39:8f:b3:12:44:41:
57:45:ba:06:b6:ac:76:97:ed:aa:ca:27:18:40:f7:
56:df:b6:6d:fa:db:5e:1c:bb:32:84:32:c6:6a:38:
84:5f:87:7b:d5:7f:ef:21:0e:e1:62:5a:3f:88:c2:
fa:20:6c:98:bf:ec:06:56:71:0e:07:72:3e:a9:7c:
bb:46:f1:91:e9:8a:5b:84:21:6b:2f:f9:5b:1e:22:
72:a9:53:9b:42:57:a8:4c:fe:74:63:05:fb:c5:59:
c6:3a:06:56:d7:e2:8d:16:89:e9:f9:98:0f:19:fb:
b1:0d:99:01:86:1c:c7:26:95:8d:ae:c1:6d:cc:ad:
c4:5d:55:a5:ab:58:b3:02:67:63:1e:e2:08:d4:a6:
e3:68:49:5f:87:1c:10:fb:6f:6c:45:ea:2c:23:08:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:D5:BC:69:20:07:CC:AF:37:F5:3D:AF:9A:92:66:27:30:F2:6C
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:39:22:ec:d8:29:34:87:5a:79:2a:e8:03:97:1c:ca:83:
ff:48:ed:61:9b:31:90:45:86:56:81:d3:ca:af:c7:b9:6d:da:
a6:0f:02:0c:64:d9:c1:9a:e0:da:9e:8a:32:56:fa:56:fe:6e:
e7:ca:52:cb:7f:7e:da:6b:ff:c6:a8:50:1f:44:a9:e3:c7:f1:
20:d9:f9:68:97:b6:66:2d:23:b1:f7:7f:de:68:2b:fb:3b:65:
92:39:47:e9:e1:0c:32:d7:f5:6e:e4:43:d9:d1:81:0f:75:b2:
5b:c5:80:e9:c2:c8:83:e7:4c:cd:fc:df:f8:57:38:f4:77:bb:
14:08:5b:47:f7:a7:e9:14:74:46:07:23:68:a1:ea:2e:2d:ca:
8a:08:31:45:8e:f1:82:57:f8:21:d2:1b:cd:cb:fd:6d:10:af:
64:40:6d:9e:17:8f:19:dd:36:75:26:6b:ec:1e:ae:f3:f3:8b:
5b:6c:5d:96:36:d1:2b:35:40:d1:34:f1:c7:dc:06:8d:22:a0:
5f:96:af:a5:d3:64:d5:5e:11:bf:d1:40:ab:19:b0:db:94:c2:
a2:72:a6:d7:6f:89:bc:96:a7:11:a5:15:d9:0e:b2:5b:0c:8b:
be:ae:60:99:91:d7:cb:60:70:68:c7:21:f8:44:20:cb:66:60:
30:33:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:56:02 2025 by rpki-client