Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: CB/bWQbl0eL54ngmtBr39m4q/y+IEAQ4B9QJtTlcKWU=
Subject key identifier: 94:56:D7:E3:8E:72:04:41:7C:80:B7:2C:60:81:88:13:14:A4:C7:AB
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 019693A8E8A90FE6CC6920AB9AC3559CD06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 3C
Signing time: Sat 03 May 2025 01:00:42 +0000
Manifest this update: Sat 03 May 2025 01:00:42 +0000
Manifest next update: Sun 04 May 2025 01:00:42 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: OMzynqb0ADOy6zF2J1T4SV5VyzocKNeO/IcqVQskCVs=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:a8:e8:a9:0f:e6:cc:69:20:ab:9a:c3:55:9c:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: May 3 01:00:42 2025 GMT
Not After : May 4 01:00:42 2025 GMT
Subject: CN=9456d7e38e7204417c80b72c6081881314a4c7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:46:d4:b4:d5:40:1f:47:01:21:f3:7f:48:33:
ea:2d:ee:ad:4a:01:80:30:92:60:2b:10:b0:d7:41:
69:5c:2c:e3:5d:bd:f5:bf:a1:31:2d:06:9d:b8:af:
bd:3d:70:0d:64:3b:7f:f6:69:48:10:3c:8e:59:c7:
75:89:6a:86:b5:c4:7c:48:8d:3b:84:2e:5a:b1:a3:
39:94:34:71:6d:3e:7c:ae:33:56:33:75:24:c2:3d:
6f:7f:ba:66:e9:99:2d:80:29:a7:03:53:51:7f:20:
89:31:56:91:ec:4c:1f:88:a6:67:a0:8a:28:0f:da:
12:24:19:b2:b3:17:6c:b1:ef:fc:19:ca:e0:8f:ff:
9d:69:bc:73:37:60:ba:c0:65:ea:68:01:71:04:27:
0e:f2:06:be:1a:12:5c:8a:8a:e0:e1:e7:d6:1b:15:
ea:5d:35:e5:e2:98:4f:32:7c:1a:f9:1e:68:cb:ea:
f1:da:f7:eb:da:0e:ba:fb:d4:b2:fc:72:12:08:b8:
74:89:d7:ae:d2:e8:a2:43:3e:b1:39:95:e3:1d:eb:
52:fc:85:49:df:20:82:ec:b2:fb:2f:a6:97:4f:2c:
89:12:b3:20:95:9c:7d:f1:4a:2e:d5:b1:f7:58:4f:
18:c7:db:68:0e:de:e7:eb:4b:15:fa:a4:2d:7c:7a:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:D7:E3:8E:72:04:41:7C:80:B7:2C:60:81:88:13:14:A4:C7:AB
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6a:59:6c:5c:db:e5:9c:fd:6e:7f:6e:5f:b6:5b:7b:21:ea:
d0:97:e7:8c:0c:cd:00:ff:2c:55:14:cf:f8:28:73:85:2c:be:
ee:f1:01:96:ca:51:e4:06:f8:4f:e7:e0:46:1a:08:0d:82:cb:
0a:50:f9:4e:28:c1:37:25:82:1e:1b:3f:ef:1c:1b:02:38:35:
c2:fe:ad:93:5e:f1:87:02:61:51:b2:6b:e6:fa:e0:91:7a:67:
4a:35:b4:5c:ed:85:fa:57:1c:3a:46:56:14:5f:8a:4e:71:d9:
ff:50:70:2a:b5:ea:b5:57:23:57:cf:1c:1c:90:4d:cd:cb:ff:
5e:a8:e3:77:c7:2a:81:46:f0:23:45:7b:89:14:0d:bd:f3:5a:
ca:8f:0a:41:88:a8:58:56:08:5d:d0:c1:52:8b:de:15:fe:a3:
54:84:38:53:56:90:1e:b9:ef:16:02:69:8a:19:85:bd:6a:d4:
1d:5c:00:58:be:34:77:39:cf:cf:ab:42:cb:8e:35:72:af:ea:
46:bf:17:44:a2:46:c4:3a:49:2b:c2:95:3c:06:22:24:94:df:
06:80:e6:9e:46:03:ef:ae:03:3c:82:9d:38:ee:9c:95:77:80:
49:70:39:64:2b:87:05:2f:f3:63:eb:a9:20:a1:fb:0e:a1:6b:
f2:c8:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:42:43 2025 by rpki-client