Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: 8TiwyKr9u1mZkolF7vSVtvL/NoUIzc/O6nt1ydJK6M4=
Subject key identifier: 09:AA:B5:90:42:32:7E:FC:F1:A6:E9:82:DC:7C:24:EF:9A:81:65:43
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 019889C53A1B0C281304A47F15075D8AC5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 022B
Signing time: Fri 08 Aug 2025 13:01:00 +0000
Manifest this update: Fri 08 Aug 2025 13:01:00 +0000
Manifest next update: Sat 09 Aug 2025 13:01:00 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: dQVsjtSAZbX/UVrBTtNJtvitXRt0VQnOuCe9FLUNrns=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:3a:1b:0c:28:13:04:a4:7f:15:07:5d:8a:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Aug 8 13:01:00 2025 GMT
Not After : Aug 9 13:01:00 2025 GMT
Subject: CN=09aab59042327efcf1a6e982dc7c24ef9a816543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:fc:37:7b:b2:6e:7c:5e:96:44:1b:00:29:
7b:6b:6f:f1:ce:99:62:3c:89:5d:97:e7:36:c9:1a:
59:22:d9:a6:f1:12:a9:2d:42:38:eb:f6:fb:9c:34:
c1:8e:77:68:8d:6b:c7:66:57:9a:17:68:be:41:e1:
d6:8b:c1:f8:40:17:5b:3a:8a:97:c5:a8:15:2b:dc:
8f:e3:2a:b2:c9:ae:f5:ae:47:e0:15:70:d0:16:f5:
fb:0b:e6:7d:b0:d7:57:1a:15:a4:f0:e4:00:d2:08:
a7:d2:4e:67:eb:11:1a:de:77:7b:e9:6a:da:a8:cc:
d1:fe:4b:e2:38:0b:f1:84:47:56:7c:9f:61:fe:8e:
c1:00:bc:45:20:9f:f6:44:3c:e7:67:6d:51:68:9e:
22:28:ec:b4:0f:fe:f5:7f:73:1f:05:08:fe:46:26:
c9:34:17:e9:51:1a:78:23:d8:09:c5:7c:a0:4b:de:
90:4e:d8:eb:ba:06:8f:56:db:8b:c4:d3:de:2e:44:
83:33:e6:53:8c:67:36:85:7b:3f:b1:c5:ea:8e:f9:
84:0f:ec:bd:1b:41:8b:d8:12:2e:f2:3d:6a:86:d6:
a9:06:b2:a6:c1:14:0b:7b:9d:3c:78:b8:f3:68:c4:
9b:e9:5e:6b:eb:51:2e:1c:71:19:54:c0:e1:e3:d7:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:B5:90:42:32:7E:FC:F1:A6:E9:82:DC:7C:24:EF:9A:81:65:43
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:8c:b1:49:2f:f0:dc:10:07:85:73:20:e4:c7:f9:e0:9b:
f5:e4:64:64:41:3e:2d:22:34:4e:66:3d:5f:a3:40:26:09:d4:
8f:92:a4:f0:f7:2c:fc:49:7a:51:e9:92:6d:d0:09:ee:d2:9d:
d2:1f:a1:e3:ab:d6:54:e2:08:e8:77:97:83:ba:3b:55:9c:64:
bf:9e:5c:89:06:60:7c:49:2e:9b:fa:05:1a:f7:83:84:08:a4:
14:bf:09:3d:97:12:6c:40:16:04:60:20:0f:5f:f3:7f:57:90:
fc:94:84:bf:7d:af:04:2c:c7:33:37:3d:bc:47:a6:39:ce:ec:
f9:a3:f2:75:a4:4c:1d:85:66:0f:ba:57:9b:88:09:97:42:48:
e7:3e:56:88:01:7f:de:b3:76:b9:c1:ff:6f:97:8c:0a:8b:de:
25:c2:f3:0f:1a:c5:44:72:d1:7f:7a:84:9e:9d:cc:7c:7d:81:
59:0b:69:1f:15:23:fa:58:90:96:70:78:e6:0a:6e:9c:32:42:
47:82:cc:11:3a:57:44:2c:e2:ba:f4:e3:04:5d:a7:a7:17:d1:
20:c4:9c:50:69:b6:70:e7:25:4c:b6:28:61:d2:a6:ca:80:51:
38:17:2f:4a:7f:55:9b:ac:e3:70:8e:61:78:15:e7:ce:0e:b8:
6e:3a:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:53 2025 by rpki-client