Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: Km3ouQLOfctZTpenKmVqcegDRk2Ine2Abi1VJplytzo=
Subject key identifier: FF:42:73:31:57:C8:88:FB:3C:1A:01:03:A3:40:B6:95:E1:B9:BD:DF
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 0197B77BF4B2B6D0E5BB6C0F33C572C2CFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0DB6
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: UFCo7cgkzMs940ID5nP6ftlVGThkLUF4SUAoJ3GAnp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f4:b2:b6:d0:e5:bb:6c:0f:33:c5:72:c2:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=ff42733157c888fb3c1a0103a340b695e1b9bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:95:4c:4c:08:8e:97:1c:c0:96:8f:de:20:
b1:35:40:2f:0e:a5:97:0b:31:a6:56:fd:40:0b:5b:
92:24:e2:44:da:24:8a:82:5c:1c:f7:1b:03:31:62:
cf:0b:2f:e2:da:40:5b:53:33:38:13:d8:9b:7e:b7:
83:03:f3:5a:c2:1c:9b:56:23:51:39:68:3d:e3:13:
fa:8c:4e:54:b3:f1:8f:b6:f5:e6:89:bf:d0:fd:a3:
d8:e3:c1:11:68:4b:59:32:c4:3f:71:95:80:78:ee:
60:c2:e1:88:da:9f:da:f0:5c:dc:19:c2:c5:69:c2:
fa:11:34:1c:8e:01:a2:d2:96:eb:78:0f:c6:45:3f:
3e:8c:91:03:20:66:98:54:a1:97:5b:6f:00:dd:7a:
75:80:1c:d6:6b:5b:0f:67:f8:78:c1:eb:10:cc:f6:
bf:d7:ea:86:cd:20:02:73:7c:9c:56:d6:48:b6:88:
91:e4:24:b1:be:2d:71:e6:cd:0b:cf:16:a2:8c:91:
0a:81:ac:37:3f:81:6f:e2:fd:7d:17:b9:ef:ed:b3:
2f:f6:f0:61:8f:96:7c:4e:ed:a8:80:f8:01:fa:fa:
a2:0a:9f:78:b5:98:25:64:3e:00:68:29:fa:2b:77:
55:5a:f1:42:e6:85:11:67:1f:f4:1d:26:4d:8c:8e:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:73:31:57:C8:88:FB:3C:1A:01:03:A3:40:B6:95:E1:B9:BD:DF
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:77:76:7c:58:c6:a1:01:a8:fa:48:d1:ea:59:1d:3b:dd:
9c:7c:f4:c4:80:2e:a2:a2:fb:ef:0f:b4:a5:a0:40:7b:6e:75:
4d:91:41:ca:cb:d1:8b:44:6a:7a:90:19:c8:1a:0e:8f:22:26:
87:b5:e6:36:66:57:5e:6d:c4:0b:a6:c7:29:df:fa:42:ba:b8:
5d:e3:5e:c1:41:5b:0a:a2:89:ab:ed:72:23:5b:f2:47:d2:6a:
dd:cd:e9:e8:84:34:e6:b3:94:65:dc:21:81:00:b1:18:bb:ab:
53:c0:4e:5a:8d:67:94:81:41:81:bf:40:6c:04:b5:3f:dd:7d:
ff:dd:10:00:41:b6:bb:1b:b4:f3:cf:1b:a8:5a:97:f2:e0:11:
6e:59:be:4c:d5:73:fa:c7:4c:60:b7:ea:c0:2a:14:12:d0:39:
4a:5e:0d:c3:a4:52:a4:ec:70:98:3a:97:e2:b7:8a:e2:c2:d6:
5d:2e:56:87:7b:02:4b:21:73:2d:3e:a2:5a:98:4a:d2:d0:9c:
26:05:f4:8c:f2:38:18:e5:f3:d1:9f:b2:b5:46:5c:0f:6d:ba:
7e:91:ba:5b:7a:ba:9e:60:82:4e:fd:23:e1:39:de:1c:88:75:
e9:b8:d2:0c:d0:7d:9c:19:29:b2:93:2d:7b:b0:a3:7a:4f:dc:
04:95:77:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/SyttDlu2wPM8Vyws++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWQ0NWE0YzE3M2FhZWIyMzZjYmVhMDlkMmU4YWZjODA0
NTE2OTUwHhcNMjUwNjI4MTcwMDQzWhcNMjUwNjI5MTcwMDQzWjAzMTEwLwYDVQQD
EyhmZjQyNzMzMTU3Yzg4OGZiM2MxYTAxMDNhMzQwYjY5NWUxYjliZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZKVTEwIjpccwJaP3iCxNUAvDqWX
CzGmVv1AC1uSJOJE2iSKglwc9xsDMWLPCy/i2kBbUzM4E9ibfreDA/NawhybViNR
OWg94xP6jE5Us/GPtvXmib/Q/aPY48ERaEtZMsQ/cZWAeO5gwuGI2p/a8FzcGcLF
acL6ETQcjgGi0pbreA/GRT8+jJEDIGaYVKGXW28A3Xp1gBzWa1sPZ/h4wesQzPa/
1+qGzSACc3ycVtZItoiR5CSxvi1x5s0LzxaijJEKgaw3P4Fv4v19F7nv7bMv9vBh
j5Z8Tu2ogPgB+vqiCp94tZglZD4AaCn6K3dVWvFC5oURZx/0HSZNjI5G0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9CczFXyIj7PBoBA6NAtpXhub3fMB8GA1UdIwQY
MBaAFIpdRaTBc6rrI2y+oJ0uivyARRaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYt
ZTA2YjIwNGFjNDk0LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYtZTA2YjIwNGFjNDk0
LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2p3dnxY
xqEBqPpI0epZHTvdnHz0xIAuoqL77w+0paBAe251TZFBysvRi0RqepAZyBoOjyIm
h7XmNmZXXm3EC6bHKd/6Qrq4XeNewUFbCqKJq+1yI1vyR9Jq3c3p6IQ05rOUZdwh
gQCxGLurU8BOWo1nlIFBgb9AbAS1P919/90QAEG2uxu0888bqFqX8uARblm+TNVz
+sdMYLfqwCoUEtA5Sl4Nw6RSpOxwmDqX4reK4sLWXS5Wh3sCSyFzLT6iWphK0tCc
JgX0jPI4GOXz0Z+ytUZcD226fpG6W3q6nmCCTv0j4TneHIh16bjSDNB9nBkpspMt
e7Cjek/cBJV3EQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:56 2025 by rpki-client