Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: DRNzyJjAteauTwteTK6fFpgvzNpN143pIJ/8dd0844E=
Subject key identifier: 58:59:36:9A:98:B6:63:40:25:76:C0:57:91:07:C0:85:F6:D2:BA:B6
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 01968E14762F6975413804F11C91C57A95E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 0D1C
Signing time: Thu 01 May 2025 23:00:27 +0000
Manifest this update: Thu 01 May 2025 23:00:27 +0000
Manifest next update: Fri 02 May 2025 23:00:27 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: Q4zTyeB6FjhRe9gpLBQ5yb57jHZ7pL85AeVN33Tvd1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:76:2f:69:75:41:38:04:f1:1c:91:c5:7a:95:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: May 1 23:00:27 2025 GMT
Not After : May 2 23:00:27 2025 GMT
Subject: CN=5859369a98b663402576c0579107c085f6d2bab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:2f:c5:17:30:56:ed:2a:a2:3a:c5:9b:fe:
cd:6c:55:cf:ed:b4:d0:55:cd:29:98:07:5e:12:57:
86:d9:7c:5a:52:60:00:ef:b3:4e:2e:06:da:ff:65:
3e:a1:54:33:45:d5:f4:60:e8:ea:65:9c:6b:d4:82:
11:49:97:d7:00:19:ab:d6:54:3d:7a:98:fe:6a:b7:
e2:e5:59:d5:f6:42:dd:69:4b:3f:f8:5f:1a:1e:40:
9f:0b:ae:55:83:dd:c4:56:67:f3:d3:8e:c7:29:93:
77:b2:93:19:0e:07:9e:98:05:72:e7:a9:e3:25:05:
dc:12:93:d3:d8:c3:29:94:7d:89:f3:f6:46:3e:74:
20:c4:43:57:30:48:48:54:64:be:36:97:71:d3:15:
de:55:cf:52:23:40:c7:b2:3e:b6:65:7a:ad:84:e4:
b9:7f:1b:88:dc:19:f9:18:14:e1:55:3f:4a:2a:e8:
b7:a3:a5:6d:3c:b6:6d:b5:86:f8:4d:22:df:8b:75:
27:dc:4c:cc:31:ba:e0:d4:4c:c3:b4:5d:92:45:0a:
a7:b8:bb:56:2f:ed:95:27:0d:9b:3d:27:17:15:3d:
8c:8b:b8:ed:61:fe:32:eb:b3:c7:6a:94:25:9c:15:
cf:30:1e:ad:05:5f:e3:3f:49:a6:7f:8f:5f:6e:74:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:36:9A:98:B6:63:40:25:76:C0:57:91:07:C0:85:F6:D2:BA:B6
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e3:4e:a8:55:74:b5:06:06:ba:56:a2:f6:d2:3e:56:52:85:
bb:9f:69:78:41:a9:99:9a:5d:ab:cf:e0:07:c9:c7:9b:dd:ae:
7c:c2:42:fc:32:8a:ba:cb:7e:8f:92:18:8c:cd:16:fa:85:78:
ab:f6:8b:fc:96:c6:fb:67:e7:b5:51:9d:40:60:5b:32:63:79:
41:32:2e:26:67:dd:a9:aa:ac:94:d7:83:cf:47:27:61:b3:f3:
bf:52:2a:1d:2a:8b:31:eb:3f:6d:a4:c4:86:00:cc:ad:79:f9:
fb:7f:b9:bd:af:75:bd:ab:20:c0:2b:be:a5:5d:0b:33:93:36:
62:1e:e7:12:c3:50:f2:59:9d:8b:36:a2:2d:0f:87:70:d6:2d:
87:d6:39:36:f4:0e:ab:93:92:e6:7b:a8:4c:37:4c:06:86:97:
83:fc:0c:cc:2c:86:37:90:ea:c8:ff:e2:1a:51:25:c6:2f:64:
20:7e:2c:5d:e2:60:3c:89:3f:ab:d4:e8:63:46:c7:68:8e:ce:
a8:2f:a0:90:0e:07:a0:ec:3b:52:cf:34:35:63:d9:fc:0a:2c:
3b:0e:cf:3b:28:3d:e5:96:e0:1d:0b:35:11:1e:80:15:3e:75:
fb:36:31:30:9f:12:7b:c5:2e:92:58:00:13:53:77:e9:37:60:
7d:81:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:53:43 2025 by rpki-client