Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier: ekFQQN30RSBmlx8YyTyTGrqioUOPZeLXegN/QxWCxxg=
Subject key identifier: 7C:31:3B:53:EB:90:27:D7:4B:2D:BE:D2:F8:A7:D6:92:3A:2E:50:D4
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 0197B7EAA6B242165E592E3F919C62F13605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: R5RbeJgbXn792OLWiw9mdhaFnKH52TUTrusasK+MHxQ=)
3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a6:b2:42:16:5e:59:2e:3f:91:9c:62:f1:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=7c313b53eb9027d74b2dbed2f8a7d6923a2e50d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:99:f6:95:d3:7f:f0:f1:2f:e8:a7:f7:cd:
fa:62:cc:e9:d2:ad:6e:b5:1d:cc:52:ce:73:f2:09:
cd:73:bf:3b:25:5b:2f:00:a7:e4:c1:5f:0a:ff:47:
14:69:ad:21:c8:06:6d:c0:24:7d:cd:ff:c2:5c:b3:
19:bf:fc:5c:12:63:22:50:8c:03:aa:99:69:5d:f0:
fa:e3:73:dd:f9:1e:d3:39:bd:a5:70:99:aa:a7:2d:
c3:fd:2b:5b:7e:d1:d0:60:1b:c7:5a:5e:b2:cb:25:
de:db:4c:f9:14:6e:b7:74:c6:d6:08:ab:b5:d2:ec:
79:c6:c0:6b:0b:6a:c7:d1:a1:d9:35:82:a1:1d:52:
17:76:02:77:f5:92:6c:e2:70:e3:84:96:2d:2a:4d:
b4:05:ae:2d:b2:3d:51:ae:96:6a:a8:aa:3f:ea:a5:
14:87:fa:40:03:8f:a3:20:aa:d3:b2:58:fc:d2:db:
01:8a:77:b7:05:ea:ea:ec:dd:ce:63:c5:d0:ce:06:
0e:fc:0a:67:d2:ee:91:7e:06:05:d8:96:59:60:5b:
78:f2:e0:a6:86:eb:06:dc:aa:98:cb:1a:f1:e4:e3:
d5:1f:b9:1c:e9:c1:67:1f:d9:da:95:2d:bf:a3:d8:
a3:d6:e7:11:be:53:f9:74:27:8e:e1:96:9f:5e:55:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:3B:53:EB:90:27:D7:4B:2D:BE:D2:F8:A7:D6:92:3A:2E:50:D4
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dd:db:31:09:26:81:de:a9:7a:34:7c:8a:11:57:8b:2b:e5:
b3:b7:bc:74:f2:1d:f6:b2:40:75:37:b2:cd:b7:49:98:9d:a9:
13:77:17:02:00:03:e1:de:0e:35:6a:16:c6:6c:61:95:f5:d8:
bb:bf:c5:5e:10:a1:b5:9c:f6:99:f0:e5:5a:8b:a3:60:ac:e1:
38:fc:41:26:49:57:c6:9c:da:56:a8:d8:fb:fe:24:9e:59:7f:
09:33:f5:fd:59:de:f1:05:0b:64:ce:e6:66:d8:82:7d:d1:f5:
c8:4e:e6:9e:69:c4:35:e0:ea:0b:ec:dd:09:60:a3:ac:7c:01:
24:24:57:90:06:84:28:6d:c8:66:82:c2:01:de:84:0e:d6:b4:
34:f7:79:cc:b8:66:50:81:01:dc:17:ec:ea:bb:2a:a4:9b:92:
7c:11:0d:8b:d0:9f:30:11:30:30:ee:a3:eb:32:8e:23:90:43:
70:53:88:92:c5:3a:4d:32:9f:d9:99:63:26:f8:59:e3:85:5a:
64:79:60:63:a3:9f:65:a7:c2:a3:25:f2:22:20:13:e2:57:f3:
07:16:09:f4:ba:b9:22:b6:f7:54:1b:3e:68:91:fd:0b:3b:7d:
72:01:ed:01:f2:77:4e:da:f7:86:16:6d:21:08:ee:06:9d:08:
00:19:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:32:08 2025 by rpki-client