Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: PwO5R8uiyEGs2F7nxwR4x1xkCJU0QyNCktcd5iH6ukk=
Subject key identifier: B6:40:35:68:8B:4E:25:20:23:4C:81:1C:44:93:07:49:3F:7D:94:9D
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 0197CCBA70D694A5A01749C8AAA91143C270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 07AE
Signing time: Wed 02 Jul 2025 20:00:59 +0000
Manifest this update: Wed 02 Jul 2025 20:00:59 +0000
Manifest next update: Thu 03 Jul 2025 20:00:59 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: zCERr2E1fSIUuv0ehtW40elqt6hSCxk8XtUinzsxRAM=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:70:d6:94:a5:a0:17:49:c8:aa:a9:11:43:c2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jul 2 20:00:59 2025 GMT
Not After : Jul 3 20:00:59 2025 GMT
Subject: CN=b64035688b4e2520234c811c449307493f7d949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:b1:96:1c:ef:a7:0f:a7:22:9d:67:b5:18:
b1:0c:1c:0b:5b:f3:95:28:05:9e:1e:cf:de:0e:e0:
a4:89:5a:ff:fb:fd:d1:48:cf:11:de:6d:78:22:59:
b7:cf:c3:a6:30:ea:26:6a:21:2e:c6:1e:5d:5f:24:
96:c6:59:9b:f0:94:45:c8:94:7d:e0:99:81:cd:e9:
4e:e4:69:71:78:31:a4:43:8b:5e:f6:df:0e:87:10:
5c:34:fa:3a:21:10:14:74:d0:0a:1e:f2:fe:8c:6b:
37:a5:d3:86:c7:e7:76:35:d8:40:e0:ea:80:6a:79:
ac:ef:fd:09:7a:1b:01:c1:c5:7e:8f:b6:1b:e0:c6:
c2:e7:f7:60:27:9d:6d:06:78:ad:98:11:cb:fb:58:
1e:b7:28:ce:0c:81:95:c6:0b:14:0d:d5:67:7b:21:
ee:92:03:19:71:7e:ef:d4:fb:89:e2:18:c2:bc:e1:
64:1e:f0:73:2d:0a:ac:37:a1:ea:ca:7e:8c:f5:58:
4b:68:d8:88:93:31:bc:28:c1:8b:76:8f:96:3f:d5:
94:6d:84:fa:e3:49:7b:0b:50:6e:62:17:52:cc:d3:
70:47:52:72:b5:98:6c:f2:64:a7:17:71:ac:8b:8f:
b4:83:0e:bd:ab:76:90:0e:3a:14:03:91:d7:eb:73:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:35:68:8B:4E:25:20:23:4C:81:1C:44:93:07:49:3F:7D:94:9D
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:98:4e:9c:d9:b7:06:dc:95:c6:4a:84:1a:68:83:c6:5b:
85:c5:49:d1:3e:ea:3f:43:94:7f:9a:bf:bc:7b:03:1c:b0:b3:
1d:d5:0c:28:7e:e9:dc:a2:61:02:df:eb:3f:f2:1c:80:d7:f8:
06:89:6a:de:0d:71:f3:3d:ae:13:12:e3:43:b1:e2:e1:ab:14:
70:c0:a0:aa:c0:bd:ae:3b:ab:a7:a2:54:35:bc:4d:97:f9:e5:
e9:46:ad:ac:4b:39:e7:97:39:66:9c:45:58:e3:0e:20:e5:8d:
16:85:00:99:19:f6:44:af:2a:1a:0b:13:47:da:5d:6d:64:ca:
bb:a9:1a:24:40:93:77:19:24:c5:c0:af:ab:e8:fa:79:b3:c1:
29:e5:ca:21:88:7c:18:12:c8:a9:bd:52:99:80:a0:1a:50:03:
40:86:20:17:e2:43:d6:b2:18:41:75:1d:7c:5b:3b:48:2d:51:
25:d6:41:ab:cc:5d:7e:5b:51:38:c5:71:ef:02:e8:13:0e:9f:
cf:24:5e:6c:1e:ea:ee:f7:60:34:2e:c6:97:f3:55:4a:b6:10:
ca:1a:8d:72:ce:cd:9d:61:95:8e:af:24:c7:0c:4f:f4:b6:b6:
95:ba:ce:90:b7:fa:e1:87:11:8e:23:78:9f:a4:02:fd:56:9e:
8c:b8:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:59 2025 by rpki-client