Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: Lbn+NbB4a3fpQIp4ILKebu68idmg6iyNGWOA+d7h7LI=
Subject key identifier: 00:04:49:17:42:91:24:59:F9:E2:EC:A3:A1:85:E0:06:4F:1E:F1:82
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 0197876B31C973F2E6FE39C30A683361BF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 1471
Signing time: Thu 19 Jun 2025 09:00:38 +0000
Manifest this update: Thu 19 Jun 2025 09:00:38 +0000
Manifest next update: Fri 20 Jun 2025 09:00:38 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: Sy08P1MY36DMD7Z88cFWx4EL2mP0Uf5LOoWC5eQ+MXY=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:6b:31:c9:73:f2:e6:fe:39:c3:0a:68:33:61:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Jun 19 09:00:38 2025 GMT
Not After : Jun 20 09:00:38 2025 GMT
Subject: CN=0004491742912459f9e2eca3a185e0064f1ef182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:4f:c7:e3:b8:c5:3b:67:a0:bb:6f:c5:25:
af:71:16:39:4f:56:7a:eb:15:49:a0:4a:98:e0:f0:
3a:82:dd:fa:c9:37:48:4f:56:71:55:24:e1:f2:fa:
65:07:17:c2:4d:e5:22:e8:d1:22:a7:59:60:46:9a:
4a:ad:47:8a:4a:4a:b0:51:c3:59:d1:de:4c:b9:4b:
ee:16:ad:74:5c:76:70:17:ff:3f:5a:e4:39:0c:c8:
c0:d8:b0:33:df:ac:a5:a2:59:25:f5:b3:e7:21:c4:
f4:56:cb:f9:b5:f4:09:93:7d:8f:9f:3f:50:3c:1e:
00:b6:fc:20:29:ef:cf:e9:db:19:8b:b1:03:cb:a2:
50:ea:58:5f:94:03:ee:ff:bf:af:fb:71:36:56:ec:
b1:51:07:e9:ce:29:a3:79:90:c3:d9:83:6a:46:d6:
1d:af:e2:7b:8e:a7:92:22:8c:1c:0a:ff:40:f8:43:
b3:c7:8c:f2:eb:5f:be:45:1e:29:47:6b:bb:36:fc:
18:d8:21:89:23:73:ac:c0:bb:6c:84:dd:0a:f7:a3:
45:65:bd:c2:3b:4e:73:fe:18:c5:33:a6:59:79:8e:
e6:55:44:d8:a0:d1:2a:e1:98:cf:6d:54:f9:9b:21:
58:7d:1c:15:bf:7b:0a:1a:ab:53:21:9c:c4:f1:ff:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:49:17:42:91:24:59:F9:E2:EC:A3:A1:85:E0:06:4F:1E:F1:82
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:12:51:4d:ef:10:2d:9b:69:f1:94:3a:16:83:f1:23:13:
20:99:f5:8b:1a:6b:66:a6:d7:1f:41:05:e1:8a:b8:68:ae:7b:
69:f1:bf:4d:b7:3e:0a:96:f9:02:62:f1:19:2d:ff:87:78:50:
4d:de:3c:13:83:8c:b2:20:9b:99:0f:ea:69:89:bf:71:2d:f2:
69:54:87:9c:0e:99:99:80:3c:72:50:2e:a6:ab:cf:81:df:b0:
62:02:e3:69:66:a4:f9:6f:8e:00:db:c6:75:9f:58:f3:60:3b:
f7:d9:93:be:84:24:ce:2a:ae:d6:e3:3b:85:a0:4b:28:9c:35:
18:f9:cb:f4:1b:61:26:6c:a3:ef:60:70:27:8d:43:34:59:c8:
1d:00:e4:73:c0:2e:b3:63:3f:8f:0a:26:9d:b4:1f:c9:d9:be:
da:08:2c:0c:b3:d7:03:61:49:d6:43:86:e2:ee:3b:07:3c:f2:
1c:33:38:b2:6a:54:7d:25:db:f7:23:d6:c3:3f:d6:53:c5:37:
df:1e:4a:85:dd:c6:65:77:24:ea:0d:7a:a8:e2:5f:97:d5:26:
8b:04:cf:6e:44:b7:fb:1e:b9:6d:1e:69:d5:f2:00:85:de:78:
92:e9:d5:9c:6d:2d:4b:71:12:c9:72:8e:6e:96:c5:1d:12:77:
69:f6:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:03:28 2025 by rpki-client