Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: bu7Ek11e/obqp+Nzz9cb3EfB8+Hh31QB2CiCUERvvys=
Subject key identifier: 00:DA:32:40:52:91:CC:9C:A0:14:7A:ED:1A:0C:FD:F3:3B:4E:94:21
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01987D8A75BAC3E40A255B8AFE1878CD361F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:01:22 +0000
Manifest this update: Wed 06 Aug 2025 04:01:22 +0000
Manifest next update: Thu 07 Aug 2025 04:01:22 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: s6lxI2ZgVxeAoiERrj0Pj3ksmXQm9b41gmmY/19P3ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:75:ba:c3:e4:0a:25:5b:8a:fe:18:78:cd:36:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Aug 6 04:01:22 2025 GMT
Not After : Aug 7 04:01:22 2025 GMT
Subject: CN=00da32405291cc9ca0147aed1a0cfdf33b4e9421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:96:28:e0:5f:df:5c:09:60:18:a0:b3:26:
4c:fc:c5:20:cf:57:3b:55:08:92:67:5e:f8:b7:72:
ac:a2:38:c0:c1:a9:a5:b0:cc:0a:75:48:e5:ac:78:
a3:fc:6e:82:34:ba:6b:f9:29:d4:fe:d9:0b:77:53:
84:d9:94:df:73:3c:60:ae:8b:70:1a:a0:2a:79:3d:
19:ec:d3:8e:73:56:27:1d:f9:e1:ae:da:4e:db:30:
7d:5b:a1:a6:00:3b:64:23:e3:a5:10:af:e2:9a:f0:
34:5a:83:77:ab:5f:a5:a9:9a:e1:08:68:c6:2e:20:
03:25:36:90:98:48:10:1f:f0:af:f5:80:11:df:7d:
0e:9b:b0:45:f3:5c:5d:b1:19:6c:1d:7b:88:1c:23:
ef:11:4b:49:73:84:97:b9:e8:2a:9f:b2:7b:28:36:
4b:58:3f:a0:d4:39:da:6d:e5:7c:01:8b:fc:98:ff:
17:9c:be:ea:de:34:ba:e3:33:86:2e:5b:fc:6b:0f:
0b:5d:e1:d4:50:94:d2:16:37:c3:87:d8:05:32:f0:
fb:5e:8b:8b:c1:37:56:9a:84:b9:90:5c:fb:00:fe:
42:05:15:44:5a:b8:7b:f0:6d:cd:73:2e:07:88:ea:
3d:02:40:7f:21:ce:04:73:ac:2b:9d:90:65:8a:a2:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:32:40:52:91:CC:9C:A0:14:7A:ED:1A:0C:FD:F3:3B:4E:94:21
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:e0:19:66:01:96:7e:dc:37:29:21:40:a4:f7:67:59:87:
9f:ee:0c:f2:c4:f9:58:85:fa:bf:1f:49:78:54:0b:35:2e:19:
b1:05:d4:04:4c:b5:7b:da:02:21:c8:3f:62:ed:a1:00:f4:7a:
2e:2d:e7:92:30:df:ef:cc:15:74:c8:e2:d8:fb:cd:b2:f8:d8:
3e:9e:5c:72:9b:8c:f2:47:4f:b6:34:ff:33:ce:1e:0c:5e:8c:
8c:ad:24:9d:69:e6:dc:5e:d6:9b:2a:32:9f:14:04:5b:8a:38:
3b:89:75:df:76:70:de:dc:a0:19:47:49:d4:57:f9:76:44:9f:
9f:3a:e1:d4:4a:c4:6e:ca:f5:37:c9:3e:7c:45:a1:35:19:9d:
e2:e6:28:21:01:65:07:bb:6f:19:10:d0:29:91:6c:67:59:68:
2f:64:2f:70:ad:ab:4d:33:a8:5c:6f:28:a5:9d:af:99:00:84:
a4:fa:e0:3d:15:08:72:89:02:42:bf:26:f6:d7:dc:db:4a:0f:
d8:b9:5e:83:3b:7c:d2:bd:16:0e:0c:72:dd:7d:21:b0:5e:6f:
e1:c0:4b:38:ff:ce:c5:d9:8a:31:23:78:65:f9:fa:94:aa:9a:
5c:ef:0a:62:df:df:4c:d8:e5:df:ea:48:b2:88:07:85:45:42:
59:58:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:21 2025 by rpki-client