Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: ipTatS+Q1V+vmhxGiwkpAbXizttXz1v9ezinDow6U8Q=
Subject key identifier: CD:0C:EB:7E:C8:B5:12:D2:01:70:FE:BD:B3:F9:8B:7A:7F:D7:DF:E3
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 0197B6D74D1ECEF53976E7A81D5FC78D6FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0B0D
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: DlOSTEFZWZpCBNsJCYcaD7LeS4LbVTSpedAdJh/Qn9k=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4d:1e:ce:f5:39:76:e7:a8:1d:5f:c7:8d:6f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=cd0ceb7ec8b512d20170febdb3f98b7a7fd7dfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:b6:7f:ee:e9:67:43:16:95:b9:96:24:4f:
4a:c0:7a:83:cb:11:bb:1a:7a:f4:b5:e4:20:72:5f:
de:62:a5:99:22:97:64:65:19:95:28:c2:f6:15:cd:
17:b6:d8:cc:63:8a:8f:13:e9:3a:61:7f:41:5e:d8:
3e:4d:79:aa:8b:6f:c3:37:cd:08:c9:2f:0f:9d:88:
f8:d1:38:6e:ba:cf:f3:5e:56:64:53:7e:4d:6e:6f:
48:dd:d1:d2:f8:60:d3:b5:90:98:e4:5a:c6:08:0c:
52:9b:c5:c4:9e:04:1e:eb:25:ea:c3:b7:cd:91:21:
35:00:fc:b3:22:81:46:6f:2e:36:05:d3:46:6d:e5:
58:8f:25:47:77:98:60:7f:6c:b5:58:ea:c9:a3:da:
b9:d8:d5:6a:2a:7f:3f:41:b0:97:be:6a:f5:83:ab:
c0:6c:86:94:18:0b:29:39:00:66:9c:92:4f:27:d3:
c4:60:2f:3c:00:ef:f5:3e:1f:ad:56:fc:f9:b6:b4:
25:22:26:5c:5c:a5:3f:2a:de:58:b2:eb:bb:5b:92:
94:e0:b9:31:95:0e:22:ae:51:e1:07:e0:0c:0b:92:
3c:e4:63:f2:5c:3b:09:9c:79:54:a7:ca:6e:dc:ee:
40:e7:48:1a:b3:f5:56:60:7b:8a:4c:45:42:44:2a:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:EB:7E:C8:B5:12:D2:01:70:FE:BD:B3:F9:8B:7A:7F:D7:DF:E3
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b9:ba:97:33:26:d1:7c:d6:da:bd:20:12:12:32:36:97:88:
d6:f0:79:09:dc:ef:43:db:d1:8d:08:b6:f8:7b:a4:ef:92:59:
48:58:a6:14:96:20:fb:d3:4d:d7:95:94:0d:62:37:c6:62:a2:
7a:28:7a:de:4d:b0:bc:1d:6d:bd:21:30:99:3e:b8:08:6a:1b:
f9:dc:89:69:31:9f:26:f8:5e:3e:e7:fc:0c:11:ea:1a:21:be:
8b:1b:b8:8d:e9:5e:cd:10:bd:fe:e8:c7:da:7c:1b:39:20:3e:
4f:64:15:91:9b:57:85:84:75:88:e2:cf:0a:dd:e6:6c:49:40:
e6:e8:e6:42:9b:d8:97:87:3e:c6:ab:df:28:42:f2:fd:9b:47:
b1:d1:28:63:b5:00:5d:0a:50:35:c0:bf:70:e6:83:f3:0a:19:
55:76:f2:65:b8:2d:11:f1:f7:77:6a:33:fa:73:23:88:80:a4:
9c:40:81:88:6a:33:f7:a1:c3:b0:27:c4:7e:f8:da:2d:14:63:
18:ab:4e:56:52:7e:19:9a:69:d6:81:9a:2e:99:a2:d7:82:88:
41:b7:1c:9d:c0:ce:16:53:f5:32:29:1c:6e:fd:1e:80:bd:6e:
84:7d:f1:ce:4a:0a:7c:03:12:66:db:bd:7a:1a:be:9c:76:28:
6e:58:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:49 2025 by rpki-client