Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: fZPmXVQRa3RUxHmd48EQjoBMMlHhxrFTCvZuCSWLgrI=
Subject key identifier: EB:92:1F:05:47:3D:22:45:A9:13:51:15:70:33:F4:ED:63:DF:70:8E
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 0197C9F15B21B66D4DDC5806254E84B26223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 0FB9
Signing time: Wed 02 Jul 2025 07:02:07 +0000
Manifest this update: Wed 02 Jul 2025 07:02:07 +0000
Manifest next update: Thu 03 Jul 2025 07:02:07 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: RrVW6DStETLKHt6bj7uAwkZlXE5x4T/jk+RscjN54+0=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:5b:21:b6:6d:4d:dc:58:06:25:4e:84:b2:62:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Jul 2 07:02:07 2025 GMT
Not After : Jul 3 07:02:07 2025 GMT
Subject: CN=eb921f05473d2245a91351157033f4ed63df708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:6f:1c:53:9b:3a:54:42:3a:85:16:69:70:
a9:fd:af:f6:79:28:1c:3b:f5:2e:94:07:a2:df:34:
5e:85:ff:8b:a5:14:9b:d9:77:da:5c:1f:70:cb:ea:
15:5b:48:b6:ad:ff:52:84:43:2c:80:8f:91:c9:23:
97:a6:76:0a:c9:83:90:e3:1c:af:3d:c9:74:21:c2:
f0:e9:19:1b:09:69:b9:59:6a:31:70:a3:ee:d0:ad:
46:e5:44:8e:db:34:e3:32:cc:62:d0:4b:ec:74:0d:
6e:23:c6:47:29:93:d4:b6:b2:cc:ac:da:98:5f:a9:
03:c8:7d:70:b4:dc:43:81:88:6d:c5:80:6e:fd:6b:
57:49:15:9b:f5:30:04:07:2e:bb:4a:57:5f:c1:06:
ed:20:73:3a:2b:47:e3:8e:41:a2:66:53:a1:06:4f:
57:2c:af:4c:d7:05:ba:d9:be:26:3d:4f:dd:6a:e1:
22:8b:df:28:00:0e:db:8e:28:32:4d:ec:b2:70:ca:
b8:7a:0b:54:0d:38:29:99:77:5b:d9:88:0d:03:b6:
22:30:ec:74:e4:0c:ac:11:49:45:2d:1e:5b:8a:65:
74:25:8e:ac:f7:ca:3e:22:14:b4:3d:d4:cc:43:84:
cf:14:2f:74:ce:eb:9d:46:46:7c:c4:e4:fb:1b:ca:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:1F:05:47:3D:22:45:A9:13:51:15:70:33:F4:ED:63:DF:70:8E
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e5:6e:a3:8d:a0:f1:e3:d1:3b:2b:2d:eb:41:05:f4:db:84:
f0:c7:ad:0d:2f:83:ce:a6:7c:01:24:ad:e3:cd:19:b0:44:2f:
13:99:88:a8:77:a7:3a:cb:94:14:37:06:e0:7c:a0:d1:7c:8c:
63:f7:71:c9:f3:86:22:6f:40:be:13:21:1d:44:3c:b2:98:e7:
9f:bb:5f:14:8d:70:0b:3e:cf:7d:8d:05:d5:21:09:4d:5d:c5:
17:07:24:54:2a:50:ed:4c:58:d2:a5:04:0f:c1:80:32:72:7c:
a8:84:29:09:be:f9:bd:4d:ab:b2:33:d4:fe:c6:aa:7a:d8:0b:
5c:d0:be:30:64:2d:7f:f8:79:b8:e7:90:43:f7:aa:f6:82:e0:
e8:90:d8:f0:2c:2a:88:75:f3:c6:d5:a5:38:73:b8:9a:3c:82:
5a:15:85:6e:2e:13:6f:3d:0f:86:06:04:c1:24:f5:98:82:0a:
b5:c0:7f:d0:12:65:f5:4b:86:d4:c5:f2:82:6d:37:dc:f2:91:
80:45:fb:b7:3c:6e:d1:d3:1a:4c:34:ac:5b:ee:54:87:00:00:
98:03:f5:79:eb:5a:38:a8:c1:47:ac:12:e6:c5:80:cd:f9:cf:
1c:fa:a7:9b:41:3f:21:e8:a5:cb:e3:5b:c7:f3:d3:08:21:b9:
c0:6d:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:47:46 2025 by rpki-client