Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: G0C2oFV2x50dqAoCb9K0xox2spM4z647Ik5m2B+R6cY=
Subject key identifier: 83:75:BB:33:FD:AF:F1:51:FE:30:EA:E2:18:E6:EA:26:87:E1:6A:36
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0197B745125E3D1B0FF34D7D10D2B948CAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 01BE
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: PMwKCRvZ4S4YFR7Vd9J5KARqxtF5nh0NsLuc03V/mpM=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:12:5e:3d:1b:0f:f3:4d:7d:10:d2:b9:48:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=8375bb33fdaff151fe30eae218e6ea2687e16a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:43:7f:89:ba:92:71:d0:8e:9b:64:56:38:
78:cd:08:37:bc:84:1c:63:03:eb:5b:bc:49:7d:03:
9a:bb:20:ff:06:3b:0d:5e:63:39:6e:51:5a:02:ea:
9e:af:2a:36:4f:fc:54:e6:4a:1e:0e:6b:e9:d6:84:
eb:7d:39:02:41:9a:b5:3a:ad:a8:3f:f8:a5:71:83:
07:0e:ec:bb:2c:c8:08:ef:fb:2c:95:8f:bf:a3:38:
f5:d7:ff:94:99:12:9c:55:f8:c4:d3:92:65:64:0e:
92:e6:ff:24:51:d6:48:6b:da:73:93:a5:9b:39:73:
7d:13:9c:85:6a:a0:ca:10:53:70:0e:ea:b4:0c:08:
0b:a5:8f:0c:d4:5d:ba:bf:8b:d2:3f:40:51:48:70:
f6:28:b2:f1:05:95:fc:2c:7f:38:b7:27:98:fd:be:
df:8b:6c:79:83:8b:67:82:52:f2:1c:08:47:e6:f3:
0b:0f:72:8a:a7:e3:4c:b5:f1:45:e3:91:a3:1e:48:
91:3a:18:0b:4c:a3:d4:f6:f2:fe:2d:86:48:0d:4c:
4a:1b:ce:3f:4d:94:f3:6d:66:39:fb:ce:e0:3e:56:
11:af:dc:3d:ec:04:e9:b6:c4:9d:3a:20:96:3c:12:
57:22:63:c1:17:a6:62:d9:15:62:31:67:7f:80:46:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:BB:33:FD:AF:F1:51:FE:30:EA:E2:18:E6:EA:26:87:E1:6A:36
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:72:c0:b3:88:5a:88:83:c3:ac:12:f1:45:77:e2:1a:2c:
2c:f1:89:0d:08:9f:8f:20:a3:8e:93:23:f6:6e:59:cd:03:43:
00:46:01:8b:3e:51:41:d7:fe:d2:68:a7:9e:76:8f:42:47:59:
91:03:a5:d2:b5:e7:85:f1:be:86:bf:84:a9:94:2a:c7:52:b4:
0f:5a:6c:e8:00:52:3f:09:53:b5:ab:a1:ba:69:35:90:71:bc:
be:cb:d5:d0:9e:4d:0f:f8:87:21:0e:63:2e:cb:80:13:3f:62:
50:6d:75:c5:7f:07:95:41:48:1d:c8:d3:b4:df:72:24:f0:04:
fa:80:8a:e8:27:07:20:82:13:30:29:29:a7:74:12:dd:47:42:
a0:92:e9:61:84:1f:fb:ce:33:9c:84:81:0c:17:ff:f8:ef:52:
8e:5a:d6:b6:87:d7:26:27:4f:dd:e3:e5:50:54:c7:e6:7e:d2:
87:d6:50:35:f7:27:53:eb:16:3b:75:a2:78:29:ed:6a:ea:d4:
05:c9:0f:f6:d1:e3:2a:11:a3:bd:be:f6:b8:6e:90:00:b3:9f:
e5:7b:d1:35:0d:0f:e7:ae:4c:96:d1:13:c2:6d:ab:8a:fd:b3:
82:57:be:ff:da:76:bb:18:25:b5:f6:73:f4:cd:6e:30:00:75:
6a:88:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:10 2025 by rpki-client