Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: Y0gVWjYYDbnP9ITpfcs6l6ulR9/qOrtrj8je4Jv7jkw=
Subject key identifier: 46:AB:69:16:69:68:2F:B5:1C:3A:6B:C9:30:11:F4:DE:CE:FC:E1:AC
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 0196C04B3D6B7597D746F58B3D8C5C31F956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0723
Signing time: Sun 11 May 2025 17:01:18 +0000
Manifest this update: Sun 11 May 2025 17:01:18 +0000
Manifest next update: Mon 12 May 2025 17:01:18 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: JRGCn8BkYEA2klxqs6zNPhq6KlW/xqVRZrXKeIY/wxQ=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:3d:6b:75:97:d7:46:f5:8b:3d:8c:5c:31:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: May 11 17:01:18 2025 GMT
Not After : May 12 17:01:18 2025 GMT
Subject: CN=46ab691669682fb51c3a6bc93011f4decefce1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:ae:be:47:41:c2:17:c8:c1:6a:32:b5:88:
54:63:9d:69:cd:b2:7b:26:ed:1a:f4:07:7f:eb:b9:
fb:f9:e1:d9:ae:ad:82:70:11:73:be:55:70:a4:b0:
cf:9c:55:2b:93:0d:c2:cc:7c:15:1d:1d:d3:b7:b5:
26:86:bf:ee:70:56:d3:db:5f:63:a8:b5:e4:ae:7e:
ab:7b:4f:86:f1:ee:fe:a7:ae:5c:94:32:13:52:f2:
16:4a:98:be:c5:0c:02:71:b4:22:b7:2a:42:c8:41:
c2:75:13:c8:c2:82:6f:21:f2:8c:20:d5:d1:66:d6:
2a:12:98:b4:4c:5b:9f:d5:5d:dd:21:9b:02:d9:14:
c2:2d:5d:7f:af:ec:e1:fa:34:38:fe:c1:31:2f:1f:
de:98:86:76:21:aa:2a:55:79:01:be:1e:3b:f0:f3:
d4:04:03:4d:03:26:db:cb:5c:9c:f9:8c:47:56:c7:
e4:c1:e8:fb:aa:bf:99:43:ba:5b:8d:97:32:2d:0f:
b1:63:b1:69:7e:ae:8f:8e:93:be:85:c9:9d:fe:62:
c9:9f:dc:e9:82:27:43:2a:4d:88:80:d2:c8:b3:18:
0b:2b:15:9e:57:17:ef:42:59:47:89:7b:95:f5:15:
b2:ae:89:ce:2b:5e:5e:53:28:42:62:fe:86:fe:4b:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:69:16:69:68:2F:B5:1C:3A:6B:C9:30:11:F4:DE:CE:FC:E1:AC
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:fb:31:78:a9:8c:ee:5a:01:6a:b6:32:f3:55:68:31:b3:
20:75:60:30:42:3f:9d:37:e2:c7:41:94:a8:09:29:54:6b:1d:
1c:ed:16:13:a5:aa:7c:df:30:2b:d9:a0:26:a6:56:76:88:72:
4f:6d:74:bb:61:e0:5d:bb:f8:93:ad:90:7d:20:a2:69:7a:e7:
20:aa:71:c1:28:9a:3c:e2:9c:81:8e:81:92:94:00:5b:f6:40:
72:d1:bd:7a:47:4f:61:ca:d0:6c:fc:b4:cb:9c:1f:43:e0:87:
83:48:f3:04:84:64:b7:bc:66:a1:b9:67:b4:bd:90:5e:39:d6:
b6:e6:10:70:94:ef:31:dc:9f:15:1b:32:55:a3:53:a4:b7:6c:
3d:b2:35:e1:0b:b2:ea:2a:90:2b:3a:4e:46:d3:58:30:30:ee:
cc:19:2b:70:74:b8:64:af:2a:f6:0d:77:2b:54:4a:03:76:f3:
1a:41:37:94:8f:41:1e:5a:ab:e1:e8:bf:40:31:e5:33:c4:8c:
93:6d:58:40:32:48:1d:90:b9:60:51:d4:e2:1a:59:05:7c:8a:
d4:1b:9e:07:6b:49:9f:7a:10:b6:21:d5:76:2d:50:f6:0a:aa:
07:d8:a7:31:cd:c8:42:28:c8:76:61:9a:e0:cf:87:4f:e8:3b:
22:52:0b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASz1rdZfXRvWLPYxcMflWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2
NjAwYTYwHhcNMjUwNTExMTcwMTE4WhcNMjUwNTEyMTcwMTE4WjAzMTEwLwYDVQQD
Eyg0NmFiNjkxNjY5NjgyZmI1MWMzYTZiYzkzMDExZjRkZWNlZmNlMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuCuvkdBwhfIwWoytYhUY51pzbJ7
Ju0a9Ad/67n7+eHZrq2CcBFzvlVwpLDPnFUrkw3CzHwVHR3Tt7Umhr/ucFbT219j
qLXkrn6re0+G8e7+p65clDITUvIWSpi+xQwCcbQitypCyEHCdRPIwoJvIfKMINXR
ZtYqEpi0TFuf1V3dIZsC2RTCLV1/r+zh+jQ4/sExLx/emIZ2IaoqVXkBvh478PPU
BANNAybby1yc+YxHVsfkwej7qr+ZQ7pbjZcyLQ+xY7Fpfq6PjpO+hcmd/mLJn9zp
gidDKk2IgNLIsxgLKxWeVxfvQllHiXuV9RWyronOK15eUyhCYv6G/ksAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaraRZpaC+1HDpryTAR9N7O/OGsMB8GA1UdIwQY
MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt
MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0
LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRL7MXip
jO5aAWq2MvNVaDGzIHVgMEI/nTfix0GUqAkpVGsdHO0WE6WqfN8wK9mgJqZWdohy
T210u2HgXbv4k62QfSCiaXrnIKpxwSiaPOKcgY6BkpQAW/ZActG9ekdPYcrQbPy0
y5wfQ+CHg0jzBIRkt7xmoblntL2QXjnWtuYQcJTvMdyfFRsyVaNTpLdsPbI14Quy
6iqQKzpORtNYMDDuzBkrcHS4ZK8q9g13K1RKA3bzGkE3lI9BHlqr4ei/QDHlM8SM
k21YQDJIHZC5YFHU4hpZBXyK1BueB2tJn3oQtiHVdi1Q9gqqB9inMc3IQijIdmGa
4M+HT+g7IlILEQ==
-----END CERTIFICATE-----
Generated at Sun May 11 19:04:06 2025 by rpki-client