Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: kji/WERQklrF8P8zARxMoIx3FjyfDBxWTQVrqvCMkFQ=
Subject key identifier: A1:C6:28:81:48:78:9E:58:E1:5C:60:C7:8C:73:AF:67:5A:57:0A:9D
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 0197711B15AE5712DAD15D29CB1190C78623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 03DB
Signing time: Sun 15 Jun 2025 01:01:29 +0000
Manifest this update: Sun 15 Jun 2025 01:01:29 +0000
Manifest next update: Mon 16 Jun 2025 01:01:29 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: 4IvkeFkavGTNI8f14DyHVlN8xYhUkVLS1DMhoCNTkUQ=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:15:ae:57:12:da:d1:5d:29:cb:11:90:c7:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jun 15 01:01:29 2025 GMT
Not After : Jun 16 01:01:29 2025 GMT
Subject: CN=a1c6288148789e58e15c60c78c73af675a570a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:7c:91:b2:ef:19:3d:67:27:80:95:96:18:
93:54:03:0a:6c:d5:fc:d0:6d:67:93:93:ca:d7:36:
25:91:36:32:42:63:88:93:b9:0b:23:1e:b9:9d:65:
dc:e9:ba:50:4b:9c:e1:d1:3e:c6:69:ee:2e:a7:bb:
ad:79:f1:ff:9a:56:1b:61:0e:75:f6:32:e5:19:3a:
d8:57:df:95:03:c5:f8:4c:94:1d:4f:61:75:e7:08:
34:54:ff:36:14:f9:f8:04:95:f9:39:a2:12:06:9e:
18:90:70:44:e2:b4:d9:37:ab:f5:d3:d9:39:c9:7f:
fd:5d:1d:ec:a1:be:ec:79:ed:34:b8:43:38:0e:d6:
7d:a6:7f:61:ae:8d:7d:1c:96:a1:99:62:2c:c4:b7:
73:44:65:05:8b:8b:24:51:ba:64:d6:6f:49:d4:01:
9b:19:49:6e:93:c9:13:9d:7b:3c:63:9e:13:7d:c2:
a6:cc:25:83:f6:74:42:cf:29:ef:50:3a:c9:85:f2:
b7:0b:dd:4b:45:d0:c8:10:b1:65:50:58:1c:e7:45:
de:da:d1:77:d9:6d:f2:7e:e1:89:c2:ab:d6:2b:a5:
26:94:e2:9f:b1:67:ed:40:bf:fb:35:d1:f6:a4:7e:
d0:4e:9b:c2:2f:bc:08:75:a0:de:91:47:ed:3f:90:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:28:81:48:78:9E:58:E1:5C:60:C7:8C:73:AF:67:5A:57:0A:9D
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ec:7c:ef:eb:6a:7c:5e:25:5b:52:20:0c:29:3a:78:73:54:
ce:72:78:90:df:81:db:e0:78:19:92:5d:9f:02:be:77:67:fa:
89:e3:e2:18:57:33:3c:cf:ff:74:a0:b5:51:ec:94:d2:94:61:
0a:19:32:fc:a8:4a:5e:ce:50:28:de:34:9c:b8:57:5f:a2:5b:
b5:d6:e4:a3:45:c3:af:3f:ff:6e:66:fa:32:ee:fa:c5:b0:1d:
a1:f0:6d:f7:92:35:e1:24:3e:1e:b9:d2:6b:14:e3:22:8b:dd:
f2:2e:85:0f:ab:dc:ec:7c:a8:5e:a2:8a:b4:07:0a:44:11:80:
8a:d4:94:32:95:0d:83:0e:7c:8c:4b:ee:5e:df:a3:50:8e:55:
5e:91:78:a0:04:20:6e:74:84:d6:87:f4:3b:b6:05:71:81:8e:
b4:36:b7:7b:7b:a0:4b:4a:2c:a0:6b:c5:3c:ad:e2:75:db:f0:
e3:c4:6c:38:59:34:63:d1:47:94:4d:fd:e5:80:bd:67:99:99:
40:e4:5f:a3:ce:c3:c4:90:05:ab:f2:46:68:65:64:d0:b2:02:
af:79:7b:9f:e8:f0:f5:5f:4d:cd:ca:e8:ef:0b:fd:be:11:f3:
aa:1b:76:4d:66:e9:75:3b:8f:64:5c:ad:51:09:23:d9:32:b9:
b3:41:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:34 2025 by rpki-client