Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: oGa1CyeZw3Z0kcCWfwyBIdpEw8eTc9HEEvk/Pdw6oQ0=
Subject key identifier: 2C:C6:69:D5:6B:E1:08:8E:DB:60:1B:20:EB:50:9D:29:F2:44:AA:5E
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 01976884F5716163678B4B0153D71A0AB803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 09:00:33 +0000
Manifest this update: Fri 13 Jun 2025 09:00:33 +0000
Manifest next update: Sat 14 Jun 2025 09:00:33 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: +W3ue2PgMLfeKw30aVUNEACwRr/+fAoH+vTI0Z5JwqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f5:71:61:63:67:8b:4b:01:53:d7:1a:0a:b8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Jun 13 09:00:33 2025 GMT
Not After : Jun 14 09:00:33 2025 GMT
Subject: CN=2cc669d56be1088edb601b20eb509d29f244aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:b0:50:31:cc:e1:ad:cb:fa:c4:55:92:5c:
df:85:cf:ae:e4:84:0e:1e:42:5d:6c:6a:68:b4:d3:
84:96:0b:76:18:74:fa:d0:57:ac:70:42:c2:af:85:
54:aa:4c:38:67:df:3f:02:1c:70:8f:8a:e8:3d:9e:
32:59:01:c9:7f:40:83:02:ee:ab:b8:ab:e7:bb:b8:
8a:f6:c1:50:b0:72:7b:52:c7:3c:45:0d:9a:32:22:
11:fe:b9:43:62:f0:d7:6a:76:f2:c0:43:81:0a:22:
7b:2a:4d:18:5d:49:27:a1:2c:d9:91:b0:54:f3:b4:
96:19:90:e5:b2:a3:3b:f3:9d:c4:bb:f2:b4:53:32:
15:d2:93:5f:5f:72:67:0b:43:3e:1e:a7:80:a2:c6:
b2:ce:80:92:7c:ac:7c:03:92:7a:6b:92:f9:57:ec:
ff:43:f7:28:20:7a:9f:56:81:88:2f:38:55:aa:2a:
b8:f1:44:e9:e8:ff:2a:a7:fd:05:aa:78:40:7f:3d:
30:89:ef:96:89:bb:eb:7e:89:b1:3f:24:b5:4b:c9:
31:5f:bd:bb:74:79:a5:c9:f2:be:a6:fc:36:87:c0:
fa:a9:2f:5e:a2:22:16:47:b4:6e:d3:a8:ef:da:d1:
41:40:a0:ce:0a:a0:af:8d:73:e7:9e:c4:3c:74:b2:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:69:D5:6B:E1:08:8E:DB:60:1B:20:EB:50:9D:29:F2:44:AA:5E
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:22:66:f0:42:0d:5e:c6:90:11:76:b9:54:1b:9f:7b:46:71:
0b:47:e9:7e:65:77:03:74:a1:b9:9c:cd:ac:5b:d6:5f:55:4c:
1e:b3:cb:fc:2c:45:73:80:4a:7f:68:1e:43:3d:19:db:e5:bc:
ef:75:cc:34:fb:34:29:7d:bd:36:8d:1c:b1:75:fb:68:1c:c4:
3c:ae:a3:3d:45:fd:6f:ba:5a:1e:50:b8:d1:6d:a0:72:fb:00:
e8:5b:c2:96:37:20:81:46:53:10:16:7f:9c:6f:2f:76:ca:b6:
4b:a6:cd:aa:6b:69:6d:55:47:f5:a1:ee:5a:91:eb:db:5f:d2:
42:91:a0:81:4f:1b:bd:6a:79:d0:d7:30:24:da:94:58:b0:98:
ab:2e:d7:e4:e0:86:6e:c4:56:47:33:ec:3b:8f:b4:c4:78:60:
5c:d0:83:67:7c:e4:f0:3e:de:52:4e:82:49:51:27:e6:8a:c5:
e9:1f:85:88:13:f3:f4:37:19:38:c8:b6:58:e9:66:5d:3d:41:
a3:6a:07:70:c3:bc:6c:e9:aa:00:94:75:72:0e:91:02:e2:9b:
2d:16:f1:54:cf:2b:95:57:f2:e8:15:67:4d:d9:47:d0:07:b6:
39:2c:b5:5d:3a:20:2d:97:bc:5e:f0:e7:48:fa:bd:02:a8:50:
f1:37:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:44 2025 by rpki-client