Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 7cFSAQuuXxrUYa+dh+86Pzn3V9gfFI/cPnWVWZ9kniU=
Subject key identifier: C9:C1:CE:3A:DC:33:8C:5B:D2:66:B9:B6:81:16:28:03:BC:DC:F0:EE
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 0198D66037C418F7F8050291821E642C30E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0494
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: qUT7KYqSJztQuzStXN6Ik4kB630euS6BycenFKjndog=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:37:c4:18:f7:f8:05:02:91:82:1e:64:2c:30:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=c9c1ce3adc338c5bd266b9b681162803bcdcf0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:5c:5f:2b:34:c5:09:6e:67:5a:d8:cf:44:
a0:ca:93:61:5b:30:35:cf:0c:44:04:86:20:86:56:
de:40:23:50:60:68:05:34:6f:12:e3:d2:4a:f2:c8:
f5:ca:2d:d0:7a:19:8d:fc:f8:f8:3a:a5:1f:92:fa:
91:07:80:da:92:e3:00:cd:1e:d3:08:78:86:be:96:
9c:23:04:e7:e1:22:f9:16:74:d7:f4:e5:bb:51:a9:
73:c6:6c:b8:53:6d:95:1c:56:02:7e:85:e3:af:f5:
f8:23:ef:7c:18:93:a4:bd:b0:58:0c:c5:27:ec:3c:
12:cf:61:01:eb:7d:15:4c:48:8e:75:c2:e0:12:5b:
db:06:4a:7d:a2:d0:2b:b3:87:9f:fc:59:30:a9:9d:
21:7b:1e:fc:51:d4:bf:74:65:10:29:58:ed:52:28:
81:0f:d9:6e:cf:df:ae:42:f1:0c:b7:b2:e2:b3:1a:
12:52:00:75:96:c7:e1:33:f5:2b:58:1d:92:82:29:
8c:14:f9:68:5c:98:0c:d2:b4:cc:db:fe:bc:bc:4e:
ea:99:8c:26:31:5e:ea:eb:4a:74:1e:e3:e3:cd:0d:
b8:a7:24:31:c8:e5:5e:7a:98:da:ad:f6:1d:ef:84:
e9:03:be:63:44:27:b6:97:a5:04:79:b8:b6:25:4c:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:CE:3A:DC:33:8C:5B:D2:66:B9:B6:81:16:28:03:BC:DC:F0:EE
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:6d:54:11:9b:b9:cc:2e:95:99:53:fc:28:a5:ba:b4:fb:
97:05:f4:f7:3a:85:20:09:4e:20:85:d4:0f:27:e4:9e:a8:4c:
c0:bd:68:95:14:75:23:67:b2:48:09:df:37:e7:a3:24:28:92:
86:9b:fc:c0:09:4d:68:d4:fd:9d:91:79:3a:24:88:fb:f6:9a:
a0:5e:cd:74:ea:64:d2:5f:2d:84:45:e8:97:ac:83:40:56:b3:
92:1f:59:ee:59:85:cf:48:3f:5f:2b:0f:a1:06:14:b6:7e:64:
f2:21:05:c0:df:a8:96:12:af:10:e2:70:eb:cf:5a:2e:fa:16:
77:ee:90:63:7d:6b:c3:22:86:9b:ce:71:40:85:69:17:fc:c8:
fb:2a:f9:19:aa:f0:b9:8a:1b:ce:98:b9:34:48:d5:1d:48:61:
45:64:bd:b6:7f:87:f8:99:4b:fe:9e:c3:95:3d:ba:fc:7a:02:
bf:c0:4b:7f:69:d9:85:5b:c4:db:39:93:61:8d:13:33:f5:9c:
59:e2:5e:dc:0f:e8:32:46:48:cb:1e:10:ba:0d:35:e5:8a:ca:
47:9d:72:82:c0:ec:11:23:4c:d9:77:50:57:85:8c:7c:60:fc:
51:0d:07:7a:76:94:12:8b:9e:79:6c:b8:f9:35:26:1f:bc:dd:
04:ec:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:34 2025 by rpki-client