Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: 8+IXTzQDtuJB4+cB2D1DHmOSaqdqDkKDQz3DiLVdGWU=
Subject key identifier: CA:0E:C0:4B:4C:46:56:DF:2C:7F:1E:9F:0A:79:8D:6A:6E:49:BC:C8
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01967FB50C547D600A4AE20A2768C9820FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 04:01:33 +0000
Manifest this update: Tue 29 Apr 2025 04:01:33 +0000
Manifest next update: Wed 30 Apr 2025 04:01:33 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: PZMqkccP/1tN2KboL55MAjMAGCIA3+MEIZcWKcFgMA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b5:0c:54:7d:60:0a:4a:e2:0a:27:68:c9:82:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Apr 29 04:01:33 2025 GMT
Not After : Apr 30 04:01:33 2025 GMT
Subject: CN=ca0ec04b4c4656df2c7f1e9f0a798d6a6e49bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:a4:e3:b9:69:48:ce:b0:07:df:ac:a8:1b:
fe:0b:38:b0:d9:b9:03:76:eb:f1:48:f9:8a:47:4e:
a6:bc:93:14:ba:49:d2:3c:70:6e:7d:05:41:28:8f:
dd:58:1b:45:41:16:2f:1d:8d:18:ce:d2:2a:a1:74:
49:38:d9:5d:b8:3a:f0:dd:d6:7b:ed:68:48:eb:37:
e9:67:e9:bd:c9:f5:5c:15:80:74:2c:a1:f0:1a:59:
df:96:a5:d2:ac:54:c5:66:9f:49:4e:39:12:fb:08:
79:36:3d:f1:5d:64:31:bd:4a:67:04:0c:1f:3c:b9:
2b:4a:27:d3:c0:36:cb:ed:51:57:f2:00:ba:d9:55:
75:35:ec:71:c1:c0:82:37:f5:64:01:f9:43:ef:02:
f8:12:2f:f2:1f:7a:1a:93:5a:79:6f:16:6c:f3:a5:
1f:e1:03:f7:00:8d:5e:87:e7:7d:18:32:5c:28:db:
81:64:9e:ed:d0:ac:73:a6:4d:21:13:1a:7f:e2:ab:
00:3c:c3:b7:85:60:5e:f7:62:84:1c:2e:22:5b:6e:
cd:ce:7f:c8:54:e3:69:c6:05:f9:09:91:1f:26:77:
80:42:c7:56:fc:2b:55:db:18:da:90:19:03:c5:c0:
22:0c:6e:d3:ba:d0:61:30:87:1c:4e:99:6a:60:31:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:C0:4B:4C:46:56:DF:2C:7F:1E:9F:0A:79:8D:6A:6E:49:BC:C8
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e7:ff:0c:01:bd:89:49:7e:0b:bf:77:29:97:a1:21:4e:d6:
a1:e5:1f:b7:fa:0b:39:40:4e:b1:66:64:54:2d:28:10:d5:18:
18:2a:2f:de:0b:28:7b:1e:93:7b:45:cf:dc:25:12:e1:b5:dc:
a6:15:79:51:0a:9d:bc:22:a2:96:ea:27:f6:97:a8:94:dd:cb:
fb:9b:32:e3:58:ac:dc:59:31:29:1f:34:10:0c:f3:3d:fb:65:
74:8d:3b:5a:73:8b:35:b2:6b:1b:26:2b:38:79:06:3e:8f:97:
69:b6:61:55:1d:bb:74:17:ec:8b:3d:90:d0:a4:7a:55:4c:f4:
70:66:1f:1c:7b:bd:c0:a6:c4:cf:db:48:7a:f1:5d:fc:82:0c:
68:b9:66:64:20:a0:76:c4:0a:db:c3:23:93:ee:a5:71:ce:c2:
c0:de:92:56:f9:f7:b3:c2:2b:f3:25:b5:15:32:c4:5c:b1:ba:
c3:81:85:13:d2:da:2e:ba:1e:0a:ce:2a:2b:39:2e:23:27:fd:
b7:cf:80:41:f6:c8:f9:b1:65:0b:b6:f0:f7:9a:4b:74:be:cb:
90:ce:ee:f1:fa:50:d8:6b:97:03:11:2e:76:e1:76:b7:a8:bf:
60:a8:2f:c7:04:b3:90:9c:03:c5:fb:6f:a9:35:fb:32:f6:45:
d3:09:51:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tQxUfWAKSuIKJ2jJgg+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm
MzJmNDgwHhcNMjUwNDI5MDQwMTMzWhcNMjUwNDMwMDQwMTMzWjAzMTEwLwYDVQQD
EyhjYTBlYzA0YjRjNDY1NmRmMmM3ZjFlOWYwYTc5OGQ2YTZlNDliY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBCk47lpSM6wB9+sqBv+Cziw2bkD
duvxSPmKR06mvJMUuknSPHBufQVBKI/dWBtFQRYvHY0YztIqoXRJONlduDrw3dZ7
7WhI6zfpZ+m9yfVcFYB0LKHwGlnflqXSrFTFZp9JTjkS+wh5Nj3xXWQxvUpnBAwf
PLkrSifTwDbL7VFX8gC62VV1NexxwcCCN/VkAflD7wL4Ei/yH3oak1p5bxZs86Uf
4QP3AI1eh+d9GDJcKNuBZJ7t0Kxzpk0hExp/4qsAPMO3hWBe92KEHC4iW27Nzn/I
VONpxgX5CZEfJneAQsdW/CtV2xjakBkDxcAiDG7TutBhMIccTplqYDGi9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoOwEtMRlbfLH8enwp5jWpuSbzIMB8GA1UdIwQY
MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt
OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx
LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuf/DAG9
iUl+C793KZehIU7WoeUft/oLOUBOsWZkVC0oENUYGCov3gsoex6Te0XP3CUS4bXc
phV5UQqdvCKiluon9peolN3L+5sy41is3FkxKR80EAzzPftldI07WnOLNbJrGyYr
OHkGPo+XabZhVR27dBfsiz2Q0KR6VUz0cGYfHHu9wKbEz9tIevFd/IIMaLlmZCCg
dsQK28Mjk+6lcc7CwN6SVvn3s8Ir8yW1FTLEXLG6w4GFE9LaLroeCs4qKzkuIyf9
t8+AQfbI+bFlC7bw95pLdL7LkM7u8fpQ2GuXAxEuduF2t6i/YKgvxwSzkJwDxftv
qTX7MvZF0wlRgA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:45 2025 by rpki-client