Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: so3FI4VuNkt4xmJmDVJzbZslyAvG4iLuRQnu3Gl/hXs=
Subject key identifier: 71:08:48:01:23:45:9F:14:A9:9C:E2:CE:2F:A1:B3:98:CF:AC:44:85
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0198D7058600D73BA7DE945BF3ED6EF3147F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 0253
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: WJmkkJaI4zEuKr6kHAyKtxicrptemn9NOWK97U2zCHM=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:86:00:d7:3b:a7:de:94:5b:f3:ed:6e:f3:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=7108480123459f14a99ce2ce2fa1b398cfac4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:72:29:79:7c:03:00:01:5a:03:2c:99:04:
13:4e:d1:e0:6a:29:5c:ac:e0:4b:1f:f7:2b:eb:d8:
0c:95:e8:f5:76:be:87:99:c0:21:2a:9d:29:89:69:
95:ea:c6:cd:69:e1:6e:d6:dc:fc:00:c7:70:85:c0:
e8:ec:2d:0c:ee:a4:10:e6:4e:85:0a:ec:43:20:9d:
4f:59:42:60:90:d3:38:ef:09:50:be:2e:48:2d:1c:
02:cf:8c:e4:88:f0:ce:dc:65:f6:15:2f:c0:72:af:
c0:75:4a:67:f2:c7:80:b0:02:16:7e:c9:a9:80:14:
74:23:77:1a:a5:31:05:c6:5e:bc:87:e4:84:42:a2:
6a:e3:0a:c7:ff:a0:93:0a:66:a3:29:c6:1b:9c:03:
39:f9:cd:de:95:d5:bb:41:b3:80:a8:e4:c6:af:ed:
75:2f:ad:16:1c:64:81:00:6f:f1:b1:2b:b2:26:4c:
4c:dc:b2:77:64:ad:6f:c9:dc:eb:aa:33:ab:b1:75:
65:42:c2:e2:49:c2:8f:2b:0d:51:76:96:14:11:02:
f9:a6:2f:e9:08:87:66:fa:fc:97:99:ff:e1:fc:13:
ca:8f:81:fe:d8:4b:58:fb:3c:85:51:f9:ed:b7:4e:
88:cb:70:27:2f:be:f4:c7:21:98:29:43:98:75:09:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:48:01:23:45:9F:14:A9:9C:E2:CE:2F:A1:B3:98:CF:AC:44:85
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:37:ff:16:1e:75:7f:0e:f8:16:9c:50:f7:4c:62:a8:39:42:
02:9e:c6:d1:b3:f7:44:9e:dd:0f:ba:67:44:bf:30:0f:8f:ce:
c7:f5:d7:2c:85:cb:c6:fc:30:db:96:4f:40:42:f9:db:d6:e0:
9c:8f:dd:fb:51:3a:bf:8b:d0:46:59:b3:10:24:26:df:61:b6:
b8:b7:68:af:f5:a0:1c:5b:ee:72:01:d4:49:eb:97:5b:75:e0:
bd:b3:01:f0:69:99:62:6f:7d:81:e8:e8:15:f1:b6:26:73:b9:
81:46:22:70:2d:24:3d:72:86:5a:4c:9a:5c:03:60:62:97:45:
56:20:10:44:8d:d1:d9:fa:c0:3c:41:bf:25:ac:b7:85:d8:f8:
77:7f:b0:d8:39:78:0c:b8:a6:68:1e:ce:07:7f:37:7b:b7:ce:
bb:a3:f6:b0:84:38:a3:57:0c:64:2b:7f:84:27:8f:68:35:eb:
35:4e:c9:c5:6b:0e:3c:d8:25:59:17:a1:21:1d:a3:62:24:24:
33:c1:9f:46:a3:b4:cf:c6:f7:8a:ae:4e:2b:ad:79:f1:49:31:
a6:2f:af:bb:66:64:11:e5:28:d1:20:b2:bb:bb:ac:6e:01:68:
8e:bc:9e:e3:32:f6:6f:ac:8c:e5:72:e4:8d:3e:e9:5f:2f:8f:
cf:ef:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:18 2025 by rpki-client