Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: 64d/fnozun8XszRhDrPu0GSya8fiYYfiXGTgLRvcvF8=
Subject key identifier: 1B:26:52:30:B3:94:C7:88:11:97:1A:25:5A:2E:18:31:B7:7B:AA:EE
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 0197B70E9BB437FED712D54E279844AABD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 20
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: kGH7kiuVqQG66f68PVL+Eaawiys/VEvXgvBP/TVXpSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:b4:37:fe:d7:12:d5:4e:27:98:44:aa:bd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=1b265230b394c78811971a255a2e1831b77baaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:dd:b5:88:7d:36:ac:8b:d9:66:af:8b:1c:
aa:70:f3:52:97:3a:e2:87:0d:4f:9e:72:3c:40:67:
9c:a1:96:39:d7:91:d1:72:91:74:06:62:42:9f:8e:
02:24:01:ee:46:23:ee:c6:69:9f:df:57:40:e6:4b:
ce:43:0d:bd:42:f0:b5:f9:58:a4:73:36:73:98:b5:
2c:e1:bd:bb:04:3d:13:17:5a:90:34:76:16:42:40:
2a:2d:b1:be:40:f5:27:79:db:f0:51:42:65:d1:7c:
71:5d:fa:2a:34:0d:22:6a:aa:3c:fa:4c:c3:9f:4a:
18:fd:46:f8:09:32:89:2e:b1:f8:d0:6b:97:59:50:
52:fd:ab:47:70:c6:b4:f5:d5:58:4b:5b:16:71:50:
6f:c6:f8:db:34:70:6a:e7:22:3b:bc:43:e8:7d:89:
a1:a0:da:ef:16:33:ff:4f:d4:8b:50:2c:48:3b:47:
19:72:eb:df:68:20:f6:d5:c9:dc:36:e2:d7:3c:34:
d3:01:82:eb:e1:1b:45:56:fe:65:f2:6d:b4:98:8b:
4a:2d:27:35:52:d1:26:bc:f3:f0:e3:d5:6a:64:67:
8a:73:66:38:b4:fb:5e:7b:52:4a:e5:9c:29:a4:8a:
63:b4:5a:9e:10:c0:1d:02:52:18:e7:0b:9e:04:e0:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:52:30:B3:94:C7:88:11:97:1A:25:5A:2E:18:31:B7:7B:AA:EE
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:72:27:4c:be:f4:d8:97:b7:29:45:07:d7:5d:e5:43:e3:86:
d1:0e:50:62:70:f3:87:5b:18:28:b0:8e:29:da:1e:8b:ab:6e:
43:b0:25:3c:72:69:a7:9a:47:47:e4:47:cf:03:46:97:78:7e:
0a:1e:ac:15:88:a2:00:99:06:83:82:bb:bb:14:2f:71:6a:f1:
85:7f:c7:67:ec:88:20:b3:df:9b:6d:cb:c4:ab:18:6b:e2:24:
1f:71:5a:10:87:bf:28:3c:40:27:bb:2c:28:9c:b2:dd:24:0e:
3e:f4:85:65:ed:d3:60:f7:84:02:0d:b3:fe:e8:4d:e3:9e:be:
d1:a9:4a:e7:62:4d:ce:aa:73:94:f2:25:9d:1d:55:d2:81:9b:
84:ac:db:19:c2:81:61:5f:c9:a0:0c:4f:e3:7c:d6:03:74:55:
af:59:0b:2a:04:fc:0c:79:d1:43:68:cd:49:e9:41:77:06:de:
7c:ed:6e:51:27:3b:76:68:38:f3:48:94:b0:e2:4a:9a:53:72:
26:26:0d:95:45:31:f0:da:37:13:40:ba:c4:e6:c0:b7:3a:bb:
d8:4a:9b:8b:5a:70:fa:5c:fa:47:da:21:7c:73:cc:c9:86:d8:
8b:c9:61:8b:cb:ef:5a:60:c8:a9:17:10:d8:62:2e:ef:5a:45:
95:5f:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:05 2025 by rpki-client