Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 7OXXuMOHAnzQQhmFCZCJfKQCJdSvRhMC8V2UXamQHxE=
Subject key identifier: F4:01:09:99:4E:AC:99:CB:24:1C:4B:6B:C1:87:E4:31:EC:00:C0:65
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 0197B88F13F88CE6EF6CA0BE4301AB009CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0400
Signing time: Sat 28 Jun 2025 22:01:13 +0000
Manifest this update: Sat 28 Jun 2025 22:01:13 +0000
Manifest next update: Sun 29 Jun 2025 22:01:13 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: 2tIMGOxH1mRCy5CRzaR5kjQ5twZfo0klfzj7K+qda/A=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:13:f8:8c:e6:ef:6c:a0:be:43:01:ab:00:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jun 28 22:01:13 2025 GMT
Not After : Jun 29 22:01:13 2025 GMT
Subject: CN=f40109994eac99cb241c4b6bc187e431ec00c065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:16:c9:e1:52:65:80:b0:ae:d7:a2:13:0f:
fd:4f:74:95:5d:18:04:6d:41:df:84:1f:28:46:2f:
ba:92:92:f8:21:dc:89:18:1d:00:dd:c8:b8:c9:39:
c5:d2:68:30:2a:1c:a0:71:53:5f:90:7c:a6:6e:06:
af:4d:f2:73:e8:60:8b:ac:d5:88:29:2c:4d:b5:ab:
62:57:56:23:15:a7:0f:2f:15:44:6d:18:04:8b:c6:
31:95:78:b3:31:c4:d1:a7:a8:b6:7f:06:46:b9:b1:
ba:f8:ad:7d:a2:87:f8:9c:03:17:f4:df:6b:47:14:
de:ea:85:8c:13:a8:8c:1b:2d:1f:c1:05:2c:7f:86:
12:e9:d9:41:bf:d7:40:47:eb:52:01:11:49:47:74:
08:18:e7:c4:e9:68:15:87:6f:4a:04:b5:5d:ef:23:
bb:f3:52:2d:3c:84:de:bd:99:19:b4:e3:b3:45:63:
3e:84:18:87:b7:dd:d1:ed:c0:f1:dd:e5:89:1a:d9:
70:02:a6:bb:09:3d:13:a0:4a:74:65:c9:02:3f:6f:
dc:8a:c3:e2:9d:a2:a6:2f:e1:2c:e4:a3:e7:7b:88:
03:7a:6d:45:cf:a9:b1:2e:54:34:a4:68:36:3a:2c:
2a:d1:8a:b3:54:47:9b:22:e6:23:83:64:a8:76:c6:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:09:99:4E:AC:99:CB:24:1C:4B:6B:C1:87:E4:31:EC:00:C0:65
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:dc:24:80:21:bb:e4:4f:28:af:62:1d:36:e6:75:5d:cd:
40:87:1f:69:bc:4f:4d:61:34:c9:2b:0a:37:b7:b7:3e:ad:b5:
23:8d:f4:e9:2f:0f:c3:be:2e:0e:6c:51:94:03:74:43:18:16:
36:80:3c:80:c1:86:b8:72:d3:f3:90:a1:46:3a:8e:e9:9d:71:
b6:f3:27:71:ba:df:cf:c3:9a:b2:f1:cd:44:be:bf:22:55:00:
0d:b4:77:66:01:25:eb:ab:e5:88:6d:4a:a0:27:08:a0:b9:d9:
40:f1:62:14:9a:f4:78:54:fd:4c:cc:1d:c0:14:4f:bf:be:16:
86:64:b9:33:a8:cf:96:a3:6c:08:db:a7:d8:d8:54:83:01:f4:
a7:fc:d1:34:f4:e6:1e:7f:4f:47:cd:b1:9e:1b:c6:6a:2f:6a:
a9:37:79:f3:c9:40:55:cc:ec:74:ee:c4:54:a5:af:1b:b6:5e:
f8:d3:90:ff:15:fc:3f:3a:1d:5c:97:58:a9:7f:7f:6c:46:cd:
95:eb:30:0c:7d:29:05:cc:fe:8f:f7:b4:1e:9e:28:28:9c:67:
df:58:7d:b6:82:72:32:b5:36:a2:1a:c1:6d:9e:33:d5:50:12:
c9:39:1e:a3:e8:5c:4b:1d:1e:6b:84:a0:5b:c4:52:0c:4f:56:
6c:b7:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:21 2025 by rpki-client