Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: 3pUaHpVBjgWDi0x30+QwRQlgQ21C6VCyHg7/TSel4lw=
Subject key identifier: 05:EF:EE:9D:77:2A:76:4B:47:84:F4:78:3B:E9:B4:34:D2:6B:78:1D
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 01977DC307AC777507743585582C6AD55928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 1595
Signing time: Tue 17 Jun 2025 12:00:22 +0000
Manifest this update: Tue 17 Jun 2025 12:00:22 +0000
Manifest next update: Wed 18 Jun 2025 12:00:22 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: cmuuLnPXM8j7LvMjeSLuip3NzM7MKPf2iQxTfUze0iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:07:ac:77:75:07:74:35:85:58:2c:6a:d5:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Jun 17 12:00:22 2025 GMT
Not After : Jun 18 12:00:22 2025 GMT
Subject: CN=05efee9d772a764b4784f4783be9b434d26b781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:f1:99:18:42:e2:5a:86:2e:d4:02:51:4f:
c0:5f:ce:d1:bc:0b:03:2f:46:f2:9a:38:3d:9d:b6:
1e:f9:78:6f:35:83:52:84:b1:a8:cf:2c:8f:22:1a:
e5:99:ac:e7:ef:78:04:08:f5:bf:e7:d0:c5:21:e5:
52:1e:50:cb:fc:0c:f0:d7:03:05:f7:28:4f:ad:a7:
67:c3:c4:a8:5b:94:e6:ff:a7:bc:d3:a0:d8:e4:00:
00:52:0b:e1:f8:4e:07:b8:3b:ff:6d:d0:fb:70:da:
15:2c:be:3e:3e:d0:53:80:bd:a1:d2:f8:5b:17:5b:
a1:13:45:34:e6:24:a3:1c:77:10:4c:29:ba:86:4a:
c0:88:57:05:98:40:a1:0d:88:66:4c:e7:e0:0b:18:
7f:82:ac:3e:a5:cc:ab:ae:bd:76:32:8a:27:9b:27:
b6:c0:14:70:bd:a6:5a:ab:d4:2d:88:de:07:6c:90:
9d:0a:38:06:86:9e:2f:66:84:44:08:69:51:74:a1:
b2:2c:7a:6f:20:c4:51:8b:40:50:59:ea:15:49:e0:
34:23:3e:b9:91:a0:18:79:6e:24:da:91:4c:01:93:
b2:a4:1f:6d:86:2d:51:3d:85:f5:9c:f9:8d:53:0e:
ab:c1:22:39:55:9a:dd:c0:79:2d:b6:82:00:25:53:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:EE:9D:77:2A:76:4B:47:84:F4:78:3B:E9:B4:34:D2:6B:78:1D
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b5:e5:6f:93:4e:24:90:fd:b1:e3:1f:57:f9:45:7b:35:2f:
e8:ff:71:6d:2f:aa:78:e8:c5:12:af:8d:ce:d7:7f:76:9a:c0:
8b:3a:9b:27:c3:ca:1a:22:67:2f:06:87:17:41:97:b8:3b:45:
bb:1c:36:28:2d:ee:3a:ca:71:e2:3b:ac:f1:1f:1b:44:ed:2f:
ab:53:d8:d6:fa:73:36:dd:74:c7:23:d6:92:89:e8:c7:4a:17:
12:22:a4:cf:0c:00:95:a4:5b:9a:66:8d:29:86:80:bb:c1:45:
a0:01:db:d7:8b:c0:f9:45:32:c1:51:97:14:fc:40:d5:49:06:
1e:ea:32:0a:9e:b1:a7:8a:89:4d:66:27:88:b6:7e:9a:17:3a:
71:8c:e4:5b:c9:21:e2:c4:7a:a9:55:66:d5:c1:d0:2a:a4:95:
83:b3:61:fa:ea:16:3c:74:71:b9:35:bd:45:b3:91:d4:e9:6d:
54:8d:ef:0f:f0:1c:2b:70:e4:20:36:15:8e:05:b9:db:ae:d4:
6d:e1:26:3b:43:2f:e3:c6:71:52:35:c1:06:73:a9:14:1b:2b:
a0:15:1f:af:7b:f9:52:05:c7:af:31:07:ea:b6:b4:a4:8a:38:
4c:37:62:e4:80:ea:a9:58:23:8f:ae:87:0c:13:4b:b8:76:21:
37:a5:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:15:30 2025 by rpki-client