Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: B2eJ0niHev+oyrXV2Er1ub6D9iq6J7BPFnVF9dnYhUY=
Subject key identifier: 0C:D0:C2:A1:E5:D5:EB:F7:30:8F:6B:42:BF:DE:C7:28:26:BD:40:FE
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019897B7E6D2101EF28E558540F09CEE181C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 14FE
Signing time: Mon 11 Aug 2025 06:01:08 +0000
Manifest this update: Mon 11 Aug 2025 06:01:08 +0000
Manifest next update: Tue 12 Aug 2025 06:01:08 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: n+Xi0CJCvTTYznj9VPYhzzPknu+jGZOzDIAb97RXx/s=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:e6:d2:10:1e:f2:8e:55:85:40:f0:9c:ee:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Aug 11 06:01:08 2025 GMT
Not After : Aug 12 06:01:08 2025 GMT
Subject: CN=0cd0c2a1e5d5ebf7308f6b42bfdec72826bd40fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:21:81:47:e9:71:15:3e:b5:29:bf:10:42:
e5:73:a8:73:9f:7a:24:4e:a1:db:e0:ed:4f:03:31:
c8:fc:55:68:cd:01:2b:17:21:13:29:1b:6e:a0:7d:
d9:44:e7:ac:19:ca:1e:09:81:78:c0:47:d6:44:6b:
b6:6f:41:7b:4f:ff:eb:39:30:d8:4f:df:00:b5:c0:
b7:34:b1:5d:d5:fb:2b:91:79:91:4d:c6:56:a8:fa:
cc:a0:3b:9e:32:5f:55:f0:8f:bb:c3:97:22:13:72:
a8:e3:a2:bc:5a:4f:99:dd:1e:5b:d4:82:a5:75:49:
31:94:50:22:d2:ad:3e:ea:86:3a:0c:ed:ad:68:fa:
01:e9:15:7a:9c:6c:cc:8e:02:7c:b5:e4:57:62:7c:
53:7f:41:95:7f:88:76:ab:f5:ba:4c:57:b1:fc:80:
aa:4a:8b:66:8a:ec:43:c7:44:a0:ea:cd:07:21:e3:
43:11:96:25:d7:21:e1:c9:4d:79:99:4b:86:8f:f9:
7f:b9:c4:46:38:15:71:fd:db:66:9f:1f:60:d1:b3:
4b:71:08:81:52:f4:81:ff:be:2e:c9:4a:3c:49:55:
d3:a3:ac:65:3d:69:dd:54:e2:1a:45:f3:c1:9a:9b:
99:84:f6:68:9c:64:25:7a:ae:5d:d2:07:a4:32:ed:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:C2:A1:E5:D5:EB:F7:30:8F:6B:42:BF:DE:C7:28:26:BD:40:FE
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:51:6f:68:0f:23:02:da:d0:74:c1:b1:c2:20:69:3c:7b:
d6:7e:41:23:c9:ea:18:0c:f7:00:11:3a:5c:4d:1d:d2:a5:c9:
92:92:4a:ec:1c:9c:d5:af:a2:60:c5:48:99:76:88:bf:4b:7b:
d7:21:00:c0:cc:6e:ac:88:f0:79:65:56:b7:99:d3:23:d7:f1:
38:83:e6:a0:52:5e:eb:74:45:f2:c8:b3:5f:0e:01:97:10:0b:
03:24:7d:a4:a0:a5:a9:3f:09:0e:f6:2e:4d:c4:37:87:1f:b8:
2e:e2:bc:59:e1:ea:67:c1:86:4f:06:f6:4d:54:ab:73:5f:82:
11:93:31:8e:7e:6b:50:b4:4c:39:b9:0b:05:8d:fa:26:34:94:
7b:ce:d0:9a:51:d8:96:cf:e6:04:04:28:cb:32:11:27:82:74:
12:44:18:bc:59:53:be:d7:df:03:cc:f7:41:ed:f8:ea:07:f7:
48:f5:39:ba:41:62:b7:b4:24:55:70:b6:f6:a1:cf:2b:eb:6e:
9c:29:9b:b5:76:6b:47:e0:dd:e4:46:ae:b7:1d:1b:a8:43:b6:
4b:fc:0e:86:7a:8f:0c:9f:ba:0f:c5:8f:c7:f6:0a:0d:15:cf:
b4:f2:b9:7f:e4:03:2e:cc:17:e8:ea:29:f9:c4:4d:0b:62:fa:
e7:a6:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:39 2025 by rpki-client