Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: FgFWdiORDF9FDWbHXE+oyRM4cfGmF+2PeziqlfWqmkM=
Subject key identifier: 94:D2:20:57:02:23:7D:E6:BA:87:95:39:02:74:D3:17:D0:C8:F3:24
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019779AF558AE35AE6FB391E13885D6C018B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0D96
Signing time: Mon 16 Jun 2025 17:00:23 +0000
Manifest this update: Mon 16 Jun 2025 17:00:23 +0000
Manifest next update: Tue 17 Jun 2025 17:00:23 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: UtnssoENVk8i8G5Vdi1TXzRi9QUx9TQbtlj4HjfKpo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:55:8a:e3:5a:e6:fb:39:1e:13:88:5d:6c:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Jun 16 17:00:23 2025 GMT
Not After : Jun 17 17:00:23 2025 GMT
Subject: CN=94d2205702237de6ba8795390274d317d0c8f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:a1:53:aa:01:04:f7:61:1b:f8:0a:0f:60:
68:96:4c:a1:53:79:87:f2:79:ed:31:d5:6e:2b:87:
da:94:9c:b4:47:04:cc:fc:04:4e:73:c2:0b:5c:0f:
ca:0b:21:45:bd:89:a2:ab:d2:ad:b1:25:a1:c1:8f:
c5:5f:8d:d4:bf:05:f2:5a:26:4d:1c:9b:c1:72:2e:
39:a7:b0:71:e8:27:2e:8c:fa:80:c5:2c:30:f2:cf:
cc:4f:4f:0b:d5:94:47:3d:a7:a6:e1:82:3a:cd:12:
de:8d:8e:c2:6f:19:5c:33:01:66:7b:bc:49:54:63:
22:11:99:f9:e9:cd:d9:8b:b8:d2:2b:10:14:e0:cf:
6c:82:d7:25:b3:e8:de:24:31:91:c0:dc:25:9b:0a:
7b:8c:32:96:fa:ae:15:ec:5d:b3:72:bc:e5:7a:b5:
f6:ab:17:d9:d4:4a:64:9d:37:d1:91:b3:fb:65:bd:
a5:cd:17:2f:b8:00:99:16:9e:c4:e8:9a:9a:59:f7:
94:ed:6d:25:25:cd:0f:1f:f0:9b:55:e5:af:4e:0b:
0e:d6:7d:03:72:fe:6c:2e:9b:f7:7f:41:f2:cd:13:
62:05:e1:cc:50:b9:83:b8:39:18:2c:5e:e8:ae:24:
b0:49:7b:de:d8:3b:50:e0:6c:1c:df:06:0d:59:d8:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:20:57:02:23:7D:E6:BA:87:95:39:02:74:D3:17:D0:C8:F3:24
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:77:46:45:86:cf:ce:24:37:26:0b:9f:46:80:f1:fd:cd:e7:
3c:a1:c0:a5:59:59:9e:6a:0c:ac:6b:4f:ca:a3:31:e8:13:a0:
03:a6:5c:d2:12:4e:47:3e:e8:46:f3:af:fe:39:a4:eb:09:51:
95:c7:cc:cf:e5:3e:47:05:e5:48:fb:8f:e8:d8:bd:a3:03:cb:
de:02:80:3e:86:ff:7d:a1:55:55:9b:39:22:57:ce:fd:02:3d:
27:06:29:87:7b:09:72:b4:72:96:54:86:08:0d:f8:98:d5:b9:
02:03:22:a3:fd:17:6f:9f:44:1a:a1:54:3a:38:18:7d:99:86:
3c:51:33:c1:8b:51:bf:e0:f6:3e:93:0e:c6:e7:b5:60:1a:eb:
11:ae:60:69:1f:87:2a:6f:4f:d5:51:f5:ff:94:5a:06:cb:d3:
98:46:73:08:14:ae:63:db:dc:17:7b:06:c2:cd:5e:e6:f1:e4:
6d:3f:e2:d2:a4:4e:a0:45:49:66:6a:83:e4:83:f7:f6:90:d2:
b6:02:2f:6b:8f:38:ca:86:42:01:49:f4:36:e8:d0:6a:2e:fd:
b1:4e:23:e5:95:5c:cc:01:1c:23:18:e9:65:0e:f2:30:43:8c:
2a:ac:be:36:3e:d0:8a:32:69:72:c8:42:25:29:6b:b7:fc:79:
88:08:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:59:24 2025 by rpki-client