Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: f9mCY2HUQldVv3bc3cHOquAdZZDuVV/1m7LDDmJuns8=
Subject key identifier: 26:2C:C2:0B:58:79:13:F0:71:F6:34:81:FE:E3:AC:83:CE:48:D5:6E
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 0197B7B3781B93F4B53013B3E6A5DA0779E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: 9OXClEXQKLKI01vyC8CcqfW8nE7uM3CeSREkBbzeW4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:78:1b:93:f4:b5:30:13:b3:e6:a5:da:07:79:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=262cc20b587913f071f63481fee3ac83ce48d56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:ef:cb:fa:f6:69:e9:15:e5:a1:cd:c7:1d:
e4:f4:2a:bf:b6:56:83:d3:01:a6:3c:d5:e9:6c:f5:
8c:28:64:53:f6:4a:ad:3f:3c:10:f6:2d:df:c8:f9:
93:84:ce:69:94:51:83:4c:bc:38:e6:eb:1b:63:f4:
39:07:d9:ed:f8:55:02:98:35:ec:73:92:07:56:4a:
5c:45:18:ff:cb:45:74:9c:c7:16:65:b4:05:78:b2:
93:1f:98:c2:6c:c6:b0:5b:1f:aa:f6:09:ca:da:d5:
e7:86:21:a8:2b:99:4a:dc:99:50:77:13:da:3f:c3:
43:a7:cd:3a:8b:d1:9a:89:19:cc:96:5f:d7:8f:a4:
b7:cd:53:08:a9:1a:25:ee:47:0c:16:bd:8b:12:04:
b1:52:7f:90:fb:b7:f4:68:bf:7e:4d:9c:89:d3:27:
9b:12:03:ac:92:be:e7:ab:48:cb:f2:6c:cb:6e:aa:
b2:2c:ab:46:f8:69:b1:43:7a:31:ea:69:1b:25:02:
04:ed:c9:d3:ec:1c:53:cb:72:2c:60:5e:8a:d1:63:
14:9e:da:59:ef:04:d4:fb:cf:d3:0b:17:7d:08:ca:
80:c2:e9:6b:cc:5c:35:65:48:1b:37:5d:6e:dd:ac:
af:99:ea:49:22:f5:81:9e:4b:a3:a9:81:7a:3d:27:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:C2:0B:58:79:13:F0:71:F6:34:81:FE:E3:AC:83:CE:48:D5:6E
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:42:3b:ad:1c:97:ae:2e:74:2a:1e:6e:d9:92:5e:ed:c1:6a:
00:8a:6e:0f:f4:86:b8:5a:78:cb:41:60:c2:21:70:22:3a:33:
68:c4:59:75:50:2d:eb:7e:f9:c6:ea:0e:ee:a7:08:52:fc:43:
73:0a:5d:d3:89:11:70:bf:8a:4b:1f:95:2a:99:29:01:86:a3:
ad:2e:2e:89:04:c6:7f:3e:49:eb:cd:86:c6:8e:de:b6:03:3e:
ce:01:01:15:34:fc:ec:9b:16:f8:d8:84:f0:a2:40:80:31:6b:
30:9e:32:17:4e:58:8e:5c:2b:3a:56:cb:a3:8d:7a:1c:3c:42:
e8:1e:07:d6:25:fe:1e:fe:f6:c9:85:c5:d6:c9:52:77:90:a3:
9f:c2:06:0b:1b:32:84:10:1d:89:e8:50:4e:3e:af:51:e1:c1:
cb:e5:fd:9b:cd:45:c8:04:d8:ed:7b:1d:32:2d:04:5b:cf:8b:
7b:2e:5a:0c:3d:db:ac:ee:dd:2a:76:c1:8c:5d:64:ab:20:3d:
be:68:c0:d9:5d:84:9e:80:69:d7:6c:52:46:35:b5:bf:3b:0b:
b2:c7:b8:11:c2:f1:e0:50:e7:c2:2e:af:a4:b5:f8:41:65:da:
96:53:df:a1:c7:ac:d5:fd:c5:9b:2d:8d:c8:6e:06:d0:e4:8a:
af:b9:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:33 2025 by rpki-client