Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: e2oMb6RoeWR8y5KF80u+s7Z/tbKtzLenY/QghO38rc4=
Subject key identifier: 44:D1:49:BD:A2:3A:42:83:80:B8:62:CD:CD:25:A4:40:46:74:54:73
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 0198D4E0C2A11E1BD5392E204B791DBA07DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: B4
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: pGGz56kPLnVrVIz8pHqFm1gL1ana7JZ1e4zZq5wiAzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c2:a1:1e:1b:d5:39:2e:20:4b:79:1d:ba:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=44d149bda23a428380b862cdcd25a44046745473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:38:55:37:42:7e:2c:66:28:32:06:4b:98:
4e:6e:50:aa:1e:0e:33:65:ba:65:05:82:91:79:ae:
3f:f6:ab:c5:b0:ad:31:95:b5:59:d0:da:73:98:d3:
da:f6:c6:01:a6:45:56:13:d3:1a:f2:ec:aa:65:c0:
c9:6a:13:5b:6c:a2:f4:e7:07:8f:82:13:4d:90:d9:
bd:7a:cf:1f:76:8b:8d:bd:02:e2:0c:79:40:54:b2:
e5:b9:3a:9a:82:ca:8f:da:79:fb:c4:77:11:c1:0a:
93:94:ce:99:3e:d2:a5:3d:55:14:b9:9e:3d:4c:a9:
e4:8b:6e:99:02:43:73:60:e8:da:f8:ea:c2:e8:2c:
ad:9c:0f:a2:1e:e6:40:63:5f:b3:13:f6:ae:45:6f:
73:d6:db:57:df:37:4f:48:67:b1:c5:fa:28:92:43:
1e:68:11:be:58:a7:37:b1:ba:2b:58:04:92:1d:45:
7c:52:1f:74:52:9c:84:67:46:17:99:24:cb:25:62:
2f:7b:38:c8:e3:6d:3c:cf:1b:8e:7a:25:7b:05:5c:
00:c2:41:99:a1:e8:c4:28:57:78:4f:c1:45:ba:88:
08:dd:8f:ad:e2:47:42:66:5f:3d:09:df:77:71:07:
85:ac:f6:9f:f1:49:eb:bb:45:62:c6:77:b1:dc:0e:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:49:BD:A2:3A:42:83:80:B8:62:CD:CD:25:A4:40:46:74:54:73
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1b:eb:6a:84:d3:fa:45:2f:2e:d4:e3:ce:af:bc:6d:ec:ae:
af:e8:79:b0:f3:91:dc:98:f3:f0:17:61:3a:f4:0d:54:3b:13:
89:2b:7c:14:f7:fc:76:b3:a5:46:36:13:0f:48:74:71:26:7e:
97:80:16:24:36:15:49:d4:eb:20:08:36:b3:33:fb:02:f6:ee:
19:af:9d:ad:49:97:a8:d8:18:64:63:72:b6:5d:6c:3a:56:f2:
9e:62:1e:d7:0a:c3:51:5a:6a:2e:29:e4:d4:e6:ba:bb:0a:37:
d9:ba:96:37:bb:40:31:7f:ba:9e:47:86:0f:c7:62:54:83:ed:
0c:ce:71:0b:89:10:74:90:9b:1f:3f:3e:74:68:ef:2c:49:fb:
84:75:87:2f:a1:98:67:a4:e2:fe:01:b5:06:a9:a8:6b:a0:c2:
91:ec:36:13:4c:e7:63:0d:e2:b1:bb:15:4a:28:ce:4a:88:70:
73:75:e3:99:81:cb:61:2a:2a:40:f6:de:e6:96:43:67:06:69:
be:ee:da:07:ff:c0:71:e1:e7:ef:7e:e2:dc:7c:5c:af:75:23:
66:a6:81:9a:59:24:cb:4a:f3:50:97:dc:40:35:f9:5e:77:9c:
92:cf:c8:82:d0:c4:6f:5d:50:d7:99:40:e6:a9:a1:cd:6e:5c:
c9:a7:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:15 2025 by rpki-client