Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
File: Illqyngn2jIPE1xhMpnjWi4iJUM.mft (raw, json)
Hash identifier: qSNHXSKSp02t81d3ZaGfy3PnuJ89zUtTIHSPkDRDyqI=
Subject key identifier: E5:B6:9E:89:7A:6E:EC:F9:AC:A8:C9:1D:B5:C9:44:6D:F2:36:47:0F
Authority key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Certificate issuer: /CN=22596aca7827da320f135c613299e35a2e222543
Certificate serial: 0196DCD4838DDB1BD9556F745D8A1D491355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
Manifest number: 092D
Signing time: Sat 17 May 2025 06:00:36 +0000
Manifest this update: Sat 17 May 2025 06:00:36 +0000
Manifest next update: Sun 18 May 2025 06:00:36 +0000
Files and hashes: 1: Illqyngn2jIPE1xhMpnjWi4iJUM.crl (hash: GQHOSxW0KSp8P0QanuCmlH3Yrk0I3co6xbuJgi1+d2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:83:8d:db:1b:d9:55:6f:74:5d:8a:1d:49:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22596aca7827da320f135c613299e35a2e222543
Validity
Not Before: May 17 06:00:36 2025 GMT
Not After : May 18 06:00:36 2025 GMT
Subject: CN=e5b69e897a6eecf9aca8c91db5c9446df236470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ec:af:b6:c7:19:c7:90:fe:90:7d:3f:7c:64:
9e:8a:a8:6f:a8:52:ef:48:a3:bb:38:ce:b9:b9:41:
aa:4a:a6:3c:1c:7e:a8:c7:8a:c0:8f:fa:60:2d:a0:
88:18:dd:d2:f7:e2:84:e7:e5:75:44:90:82:78:f3:
f6:32:29:84:40:65:5e:47:c4:87:0e:5e:8f:55:95:
b8:c9:ba:ac:95:83:e8:e0:4a:80:60:4f:5f:da:7d:
88:c3:52:db:08:db:01:dc:aa:29:b1:3d:d9:fb:cc:
e9:76:41:65:90:bf:e7:ee:c5:a3:45:7a:74:c6:14:
17:8c:3e:d1:1b:b1:f9:b2:22:de:99:12:84:7b:89:
f1:67:bf:98:9f:89:8e:2a:41:86:1e:1b:73:b4:aa:
0f:0d:12:56:76:11:7a:d3:ec:a2:d1:83:2e:aa:6b:
9c:3c:58:3a:c7:f1:03:24:3a:74:87:fc:56:14:4d:
f8:b5:68:82:41:da:61:6a:b4:8e:97:1a:70:45:be:
b1:73:a5:3b:7e:b8:2f:8b:f6:59:15:80:53:1b:3d:
26:b0:bb:48:a0:5a:fe:6e:e6:bb:04:a8:a3:03:7e:
b3:e3:89:cc:f0:66:89:6a:02:55:4a:86:df:f5:da:
87:6d:a3:33:dd:fa:97:b6:1f:9c:ff:85:f9:26:b2:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:9E:89:7A:6E:EC:F9:AC:A8:C9:1D:B5:C9:44:6D:F2:36:47:0F
X509v3 Authority Key Identifier:
keyid:22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:c2:55:2e:cc:46:3a:b9:fb:9f:e5:b3:87:8a:5f:b2:93:
0a:b9:20:3e:43:ea:21:94:d6:34:2d:14:f3:68:5f:7c:d7:0b:
92:35:65:65:24:de:8e:1c:8a:70:4a:bb:91:db:6a:75:ed:75:
42:b1:07:dc:97:46:4b:bd:d6:97:5f:07:7f:06:00:a9:a6:2e:
40:9e:95:cf:30:f7:db:3b:ef:ab:62:4b:b1:04:00:87:5e:19:
6a:e2:c4:ae:84:f6:f4:76:3b:c5:fe:b4:3a:08:b8:fd:56:55:
ff:5f:0e:84:33:af:16:b5:49:22:c6:38:16:82:86:8b:82:b8:
ab:3c:0c:4b:5a:14:f1:3b:93:7a:f3:82:67:86:6b:bd:29:e2:
e8:56:98:e5:bc:fe:7b:2f:a1:ea:7d:4c:64:19:3b:fb:0b:96:
52:c5:35:1b:9f:ab:2d:d7:a7:62:22:ed:fd:11:ea:9d:d6:e2:
9a:c7:6d:2f:fd:1c:66:9d:4e:af:c5:f0:a2:bd:48:6c:aa:04:
df:c4:18:74:50:23:df:76:c2:f9:40:53:a2:26:9d:5b:90:1d:
2c:65:2e:29:ab:89:f9:8d:54:d3:b2:d7:6b:ff:d6:1e:70:a8:
26:05:da:58:cb:68:79:33:92:76:89:c9:72:c6:c7:ab:47:7c:
3b:65:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:49:35 2025 by rpki-client