Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: KkL2TJX0YT2npNvu20UysoAlzH6ajPQuuQiaCgWfvnw=
Subject key identifier: 2C:36:38:15:F9:A6:8A:3E:D5:31:AE:70:CF:24:FF:4C:D1:BD:44:F6
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01977308B84D33E42ABB1A8CB2BE978C0E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 10:00:40 +0000
Manifest this update: Sun 15 Jun 2025 10:00:40 +0000
Manifest next update: Mon 16 Jun 2025 10:00:40 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: JSRWBy7C7QhWeo4ck5Eyr9vX3hwpfVHqz+hlQSVRrvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:b8:4d:33:e4:2a:bb:1a:8c:b2:be:97:8c:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jun 15 10:00:40 2025 GMT
Not After : Jun 16 10:00:40 2025 GMT
Subject: CN=2c363815f9a68a3ed531ae70cf24ff4cd1bd44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:47:a3:92:91:77:2d:2e:53:03:3d:85:ea:
a3:9d:11:b3:1b:f6:b9:e1:f2:19:08:78:a5:26:3b:
be:a3:ac:f3:13:04:5e:ab:53:7f:22:da:52:0f:20:
11:87:21:0d:f8:86:34:be:02:ea:79:ee:f3:5a:10:
72:8b:ee:8f:c8:35:45:44:d5:92:2d:7f:93:9d:64:
d4:fa:6f:eb:88:0e:96:51:0b:9f:d4:a9:44:17:f6:
3e:4e:76:92:dc:6e:0d:d4:6d:68:de:b0:b4:41:97:
8d:7b:e8:ca:c0:ca:91:c6:80:16:75:c4:7e:01:2b:
1d:73:39:65:5d:9d:8e:f4:b4:5d:5c:88:eb:ed:dd:
75:cf:da:5c:eb:27:e9:f3:d0:79:a5:65:e0:49:cf:
b8:89:89:ed:7f:2f:cc:8d:42:16:f0:6b:60:f2:f1:
63:f5:51:8f:4f:86:1f:fb:8e:79:66:ac:7b:9d:6a:
dd:24:ed:df:ea:c5:48:a8:4b:44:6e:b5:02:35:ad:
4b:80:9a:d5:2c:60:ed:38:51:89:32:38:36:36:d2:
84:3a:16:14:d1:47:58:4b:cf:35:c2:8f:62:3d:1e:
67:50:93:e7:7c:76:ce:4e:e4:35:4e:6f:89:bd:e5:
1c:68:92:cb:ae:f7:c2:e9:a0:80:b1:0d:03:54:74:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:38:15:F9:A6:8A:3E:D5:31:AE:70:CF:24:FF:4C:D1:BD:44:F6
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:a0:e6:70:2d:69:7a:19:5f:70:43:ad:47:e6:70:bf:24:
37:1c:cd:91:59:76:b3:16:54:00:93:18:30:bb:34:57:ad:23:
22:c0:3f:0d:52:3c:65:14:06:ce:09:b0:98:13:5a:fa:c7:af:
9c:db:ea:24:31:95:c1:5c:d2:03:62:82:b9:fd:05:56:30:d1:
15:ce:3f:aa:a5:85:2b:e3:32:44:b6:63:26:7d:c8:5f:09:17:
7c:31:ad:c6:12:34:ac:c7:65:97:ce:88:27:e1:ea:ef:c9:b5:
0b:88:85:c7:4f:3c:d6:6b:70:8a:a5:6a:1c:35:14:6c:47:be:
8d:06:4e:88:f2:cd:08:6a:27:4a:62:ca:c3:e3:4b:0b:d7:10:
0e:f4:78:7b:c5:8a:56:4b:11:33:3d:18:36:1a:81:e6:70:0e:
33:5d:b0:b7:9c:90:14:5a:2a:0b:d1:e6:7e:a4:47:1c:9d:fb:
4e:b4:e8:2e:5c:43:20:69:71:e3:77:7f:e7:78:01:47:40:d7:
7a:87:b5:02:f2:73:d5:6a:33:85:6c:5a:52:3b:3d:47:dd:27:
fa:59:e6:ca:54:87:38:8f:65:9c:66:40:cd:c0:58:2a:ce:2c:
dd:76:bd:09:00:de:c2:d1:f4:d2:24:74:32:f1:d3:49:14:31:
ea:22:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:19 2025 by rpki-client