Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier: s48bIiBrFbiEvF7akZVBgLNRVmjA2GXcc582Vy1W8hY=
Subject key identifier: EC:00:88:12:51:DD:12:06:37:AA:9F:4E:C1:00:47:7E:81:8D:B7:98
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 0196C2A6D15CB155BBDFE1475E8182CD7D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 04:00:34 +0000
Manifest this update: Mon 12 May 2025 04:00:34 +0000
Manifest next update: Tue 13 May 2025 04:00:34 +0000
Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: 8Dc9c5eInG9TRHFmFc+CANCUAFxXPVDJAqEkjLq2v3M=)
3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:d1:5c:b1:55:bb:df:e1:47:5e:81:82:cd:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: May 12 04:00:34 2025 GMT
Not After : May 13 04:00:34 2025 GMT
Subject: CN=ec00881251dd120637aa9f4ec100477e818db798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:34:e0:22:ed:f9:7a:80:83:6a:a6:f3:f1:
73:d5:3a:37:85:19:56:00:5c:8d:85:48:42:66:08:
e8:54:e6:7d:7c:ca:a5:60:b9:f6:74:8e:1e:3a:54:
5b:dc:fd:c3:20:8c:c0:57:01:0b:16:d5:4f:23:36:
23:b2:77:9e:f5:37:51:50:46:1d:be:9f:dd:fe:3d:
d7:d9:25:68:ab:a0:66:ba:0d:30:11:0f:1b:05:dc:
31:31:fd:08:3d:a3:df:66:66:36:63:83:27:26:af:
6a:c2:e0:7b:a5:25:ef:54:de:de:25:8e:77:69:5a:
e9:10:a6:ab:63:d8:98:b9:e4:1b:07:fc:d2:d1:dd:
25:19:41:e9:33:4a:df:41:23:c8:db:8f:d5:28:d9:
0d:86:a6:93:e1:09:4c:b3:73:a1:13:06:d7:cc:90:
4d:2b:88:4a:b1:cd:3c:f4:13:fe:ec:a7:3a:41:d6:
95:f4:cf:69:8c:da:e5:0f:36:fb:cd:8a:e6:af:4f:
c1:41:c9:94:83:e2:eb:92:48:bf:89:3d:67:c0:3a:
29:c8:da:3b:5e:be:b1:fb:bc:54:27:dd:be:d1:b6:
47:71:b0:ed:d2:45:b1:4a:e2:3d:40:f6:25:1b:5b:
03:84:9e:fa:36:f5:00:b1:78:39:1f:92:a8:90:0f:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:88:12:51:DD:12:06:37:AA:9F:4E:C1:00:47:7E:81:8D:B7:98
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:95:cf:01:aa:80:9a:ce:00:c9:6c:c4:e1:67:7a:54:f8:
fd:31:38:86:a3:4b:68:e3:79:e0:60:8f:13:0d:f6:91:cb:54:
83:da:72:b4:7a:fc:fe:b3:65:52:4b:4a:c1:66:56:06:17:d0:
a7:fd:c3:61:f5:d7:e0:81:91:0b:69:2c:5a:9d:9f:91:bc:2b:
8e:53:bb:0a:5e:0d:7f:d1:c0:fe:fe:df:1b:f7:e1:93:f6:8b:
a1:ff:9a:9d:30:81:23:4d:ac:3a:0e:85:5c:ea:d0:ab:e0:81:
aa:c1:8d:c5:73:3a:ff:25:a5:3f:bd:29:58:4a:d0:f7:96:01:
19:62:5a:43:94:8c:89:54:69:0d:e9:94:e2:79:f8:03:fc:f2:
97:1b:21:ef:5d:70:e0:da:39:1a:0c:02:06:31:21:92:03:06:
7d:50:73:20:44:e9:bb:1a:ab:15:a9:5c:69:fb:1e:e0:e8:ed:
fe:dd:03:53:59:da:65:a2:52:8b:8e:32:93:47:17:d2:67:ec:
f5:95:52:a4:32:b7:0c:e8:cd:a7:70:c0:9e:02:7c:ee:ba:a6:
c6:a6:51:1f:49:3b:fb:0e:42:9f:73:68:4a:a9:c6:3c:92:a2:
d6:cc:4a:5a:d7:84:17:75:aa:70:0c:fd:61:22:21:e8:c0:45:
87:82:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:42:25 2025 by rpki-client