
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: +VKeZEZPTwAPdgqyRw2SKj9Y2akv+DQd0rROf+t4zpU=
Subject key identifier: 4F:73:C4:23:42:C0:19:4D:75:8F:13:42:7F:F0:54:8E:13:82:3E:DD
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 0198D5161A4853AEF3D06D0798AD84FCB1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 0167
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: zrlrRkPqP+yK6x2Z+0aSkUmoYikgP2VDHYLJWpPd8hM=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1a:48:53:ae:f3:d0:6d:07:98:ad:84:fc:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=4f73c42342c0194d758f13427ff0548e13823edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:48:cf:5a:7b:f8:08:18:d9:34:8c:0a:55:
62:1d:e0:fa:d5:c9:7f:ea:f4:3d:63:61:9b:f1:12:
da:46:df:90:3e:97:95:dd:36:b0:10:79:19:c4:85:
2a:58:ed:ee:31:ab:2b:5f:8f:d7:46:b6:0a:6d:f4:
d7:d4:eb:f6:83:97:c6:36:47:ec:a0:df:64:91:fb:
9d:b1:51:61:b9:ed:f9:75:ac:42:b7:48:f6:23:e8:
0f:b6:91:de:4a:16:37:94:0a:ee:1a:5a:75:aa:15:
28:25:59:7f:f6:2f:79:ac:2b:58:a5:02:f5:38:4d:
3d:39:de:68:a6:d3:7b:02:e1:02:0e:19:23:dc:e5:
e8:f2:58:61:4e:77:54:55:93:95:c4:5c:45:64:74:
95:e0:ff:98:47:ad:92:6f:a8:43:03:5f:33:bb:76:
d6:08:5a:e5:ec:92:20:ed:a1:00:3c:49:ba:8e:35:
e0:a3:44:91:08:ea:c7:ab:b8:5e:e3:c6:63:5b:36:
de:57:de:6c:ae:40:c7:e5:1a:b1:77:ac:7e:a7:21:
17:bf:c0:ce:0c:02:52:5c:24:ce:3c:08:a6:56:fc:
6d:bf:89:e4:fb:ad:18:13:7e:1e:bb:7f:aa:ea:21:
d7:c5:5b:c0:58:46:73:1d:13:6d:54:20:8e:f5:64:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:C4:23:42:C0:19:4D:75:8F:13:42:7F:F0:54:8E:13:82:3E:DD
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a5:45:9f:e8:a7:63:dc:59:21:bc:79:b2:96:0a:a5:6a:36:
93:e5:e2:c9:65:61:7c:02:36:ab:9b:34:51:ac:7f:80:bf:ec:
65:0c:ab:e9:ca:64:58:36:54:2b:c8:f6:09:45:23:a2:ba:5a:
a9:5e:a8:8c:84:de:75:81:2e:58:5d:f0:35:fc:cf:08:0b:d4:
5b:21:05:84:8e:c4:d6:2f:27:04:2e:f6:f9:11:60:b7:d3:88:
b0:f0:df:32:7c:11:37:85:ca:81:b4:64:06:40:b6:52:81:20:
23:ff:ad:eb:1b:cc:2e:bb:3b:c1:af:17:b2:bf:58:57:8f:2f:
b5:ba:1d:42:a6:e8:e0:f0:99:77:2a:6f:6b:47:84:3e:a4:db:
ea:e4:c1:c6:e3:44:00:af:8f:7b:28:2e:c9:48:7b:bc:ab:f1:
da:6e:25:56:ed:dd:da:2a:72:0b:8d:49:40:6d:44:88:54:10:
c4:10:cd:b8:51:2e:d8:2e:8f:d7:23:2f:5d:a8:72:55:d2:3a:
1d:25:a4:7a:b1:1d:eb:3f:68:a7:c2:86:b2:74:3b:fc:8a:28:
c5:6e:9a:a7:54:ba:82:53:82:3e:c1:ba:92:76:0d:fd:bd:63:
e7:9b:ab:96:8e:0b:fb:92:6b:c4:d3:93:d8:90:2f:51:c6:81:
aa:07:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:27 2025 by rpki-client