Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: ZL+doWM1dEsiB+UqyBoh1oY623+0F2/rOsBJAa1iszM=
Subject key identifier: 53:47:77:F8:5F:1D:3C:91:47:80:04:56:15:73:A1:74:75:AB:E9:08
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 0197B6A23DA675C1323437E8D8BA2BA45ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: qnbrpf4Y2RkhvMZOwU3zg03gX2zCeNbCzGAM9MAY2W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3d:a6:75:c1:32:34:37:e8:d8:ba:2b:a4:5e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=534777f85f1d3c91478004561573a17475abe908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:8b:d1:24:ca:47:7f:1e:89:d9:76:95:1f:
41:37:d1:f8:eb:39:3a:7d:f6:86:60:cf:ab:75:fc:
f3:15:29:94:14:d2:dc:42:59:26:49:d1:43:0e:9c:
aa:6c:38:7a:a2:2b:04:73:fd:f1:9e:1a:2e:e2:98:
37:51:7b:54:67:de:84:a2:de:13:fd:0f:ee:d2:42:
cc:8a:e6:8c:f7:9d:87:d2:e3:f7:57:af:ab:77:9a:
28:64:dd:32:4b:ca:c5:41:ba:16:d2:73:6b:d0:ee:
55:6f:ff:48:79:b2:e0:91:db:76:44:f5:b9:84:4f:
bd:a4:6e:74:06:8d:02:a8:94:15:9c:08:b1:bc:c7:
83:41:24:d5:23:c5:8b:b2:d5:96:88:b4:db:bc:28:
12:2a:81:ba:32:df:6b:d3:8d:d5:19:06:99:e4:f8:
7e:07:63:b1:ed:7c:a7:28:1f:20:1f:6f:db:99:3d:
3f:82:aa:44:fa:f2:a6:91:0e:02:ec:a7:2a:9d:48:
38:3a:b7:27:85:b0:f1:dd:46:3f:3d:80:10:63:58:
6f:79:8f:c0:5d:22:88:58:9b:4a:fd:8b:fe:6a:28:
42:1a:1e:85:d4:21:2b:5f:ca:fb:e4:bd:2f:51:76:
80:db:32:e4:bb:89:fe:99:83:0f:d0:b5:2b:17:ca:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:77:F8:5F:1D:3C:91:47:80:04:56:15:73:A1:74:75:AB:E9:08
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:96:89:82:24:71:68:52:10:28:e4:cc:e1:18:5c:b8:e0:
80:28:46:0a:60:a9:48:a8:84:c8:00:36:28:d1:41:12:ab:75:
af:a9:3a:04:66:c7:14:a0:d2:c1:44:5f:5c:80:2b:20:3e:03:
c3:80:31:ac:4b:d4:e1:70:f6:94:3a:2f:42:dc:b8:0c:36:ff:
a2:6d:a1:2f:c0:2f:73:bf:0e:8e:ee:73:df:3d:51:43:13:ef:
59:c5:09:70:e1:5a:b1:5f:00:f2:69:f1:6d:35:05:30:e9:00:
c9:a6:46:ef:ba:16:f1:19:a1:27:b4:9d:d2:21:2d:a1:46:b9:
5b:37:78:e3:cf:e6:48:3c:4e:c7:18:29:9c:16:03:cf:ef:46:
df:f4:b6:d1:6c:56:d8:0d:b0:bc:dd:b8:fb:66:a2:33:8c:08:
be:ce:59:1d:15:fa:8b:8c:07:a2:e4:43:a5:76:51:a3:5d:0c:
3d:ee:ab:5b:28:90:f0:2d:a2:97:13:00:63:30:7d:d3:0c:3a:
06:89:91:c8:be:9c:2a:30:ca:fd:b8:ae:4a:0d:6c:4e:fb:7c:
61:86:60:62:21:bf:25:ae:da:d6:a3:53:b7:d4:dd:fd:91:2f:
2d:80:6c:cc:cd:ca:ab:8b:ae:44:6d:a1:af:6b:5a:50:6e:57:
01:80:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:30 2025 by rpki-client