Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: qsQkm1gcRauTDPbr7Z0AuTzLSEClNBA6kAs/ngW5uyk=
Subject key identifier: DF:8F:EC:2C:13:67:C4:6E:B6:79:22:50:A0:37:F2:2F:EB:9C:81:56
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019873E318C98D95A867B0D800555099CCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0461
Signing time: Mon 04 Aug 2025 07:01:59 +0000
Manifest this update: Mon 04 Aug 2025 07:01:59 +0000
Manifest next update: Tue 05 Aug 2025 07:01:59 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: OOLLba6DM93oJDyhlI5E7tKXpL05qifJIu+zzai3i7I=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:18:c9:8d:95:a8:67:b0:d8:00:55:50:99:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Aug 4 07:01:59 2025 GMT
Not After : Aug 5 07:01:59 2025 GMT
Subject: CN=df8fec2c1367c46eb6792250a037f22feb9c8156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:22:4c:7e:f5:d0:d5:5a:ce:5b:7d:7a:83:
40:5b:a6:30:f9:09:8b:b0:3d:ba:36:b4:05:91:83:
ca:a1:31:1d:88:b7:23:5c:cf:12:e0:88:56:e0:36:
75:57:c3:1e:13:0d:96:4a:1b:19:4d:98:af:75:bb:
20:c2:7b:4c:c2:86:b9:dc:5a:8a:17:76:a8:de:cb:
fa:c2:68:7f:72:2b:ee:2d:24:a1:fc:02:55:b1:5f:
f7:a6:aa:04:6f:84:4c:02:8b:0d:29:de:0d:a9:2c:
9e:6a:7d:fd:19:9a:c9:1e:cc:85:87:91:d6:54:63:
6e:48:3b:43:be:ec:80:91:6e:86:b2:7a:07:58:ac:
3e:97:6f:9c:50:23:54:7f:af:49:19:01:ef:f6:d1:
91:c4:23:2d:ec:a8:32:c7:21:b3:ec:bc:3f:be:50:
8b:93:8a:07:cb:58:e9:2e:e8:64:c2:08:5d:2f:14:
8c:f4:f5:ae:0e:1a:7e:4c:f8:ae:eb:64:9f:f9:1b:
77:9e:3c:0d:73:4f:25:70:7e:e9:64:28:32:3e:0a:
39:27:43:fe:99:02:01:05:89:6b:40:ee:16:a0:8f:
53:23:ea:4e:66:e3:b1:d0:2d:64:24:83:27:6f:ef:
cc:38:f0:77:62:f2:20:4c:6d:98:38:94:dc:9b:1b:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:EC:2C:13:67:C4:6E:B6:79:22:50:A0:37:F2:2F:EB:9C:81:56
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:67:c2:63:53:51:d8:74:24:22:5e:1e:9b:0c:26:66:15:a7:
cc:b7:cb:44:e0:0d:f4:2d:f1:52:30:e3:bb:16:5f:6e:55:6d:
16:0e:c5:d1:99:de:b8:e6:b0:ec:c3:84:48:54:f4:2c:a8:16:
47:39:c4:e7:5d:ee:8a:fd:8a:bf:f8:36:b0:56:89:42:e7:94:
3f:6c:d2:56:c9:0d:bd:39:1e:c4:d4:aa:71:45:af:ee:6d:0c:
d8:a7:cf:21:80:a0:fe:f5:78:b0:3e:b2:81:09:d3:12:fd:60:
b3:57:2b:5d:11:cf:d8:5b:98:a1:0a:ad:d6:b2:c8:da:44:ee:
ca:e9:e0:66:b1:ee:f8:3c:75:4d:ce:b8:d0:80:b2:b1:f5:81:
0e:68:db:cf:c7:12:a5:06:9f:8b:9a:ed:1f:18:55:5e:c9:3c:
a8:46:5e:29:27:d6:02:56:7e:ae:55:48:11:df:af:96:77:5e:
2e:68:a1:47:10:6b:9f:f7:5a:b1:f5:f5:19:ba:be:71:cd:20:
42:b2:17:03:23:b3:da:a3:23:dd:cb:86:a6:75:e0:14:13:de:
cf:3f:8e:fa:c7:41:c6:2b:67:6d:c5:6f:99:3d:60:40:1a:87:
f2:e3:1a:3a:df:36:52:32:52:c1:e9:d0:14:bb:db:ea:7d:a8:
81:ee:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:16 2025 by rpki-client