Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: CbhUIC4z5EaIjh3861KUuNwD1mleacvq9GzYHb4L5Lk=
Subject key identifier: DD:87:B1:DB:40:49:B3:21:81:4B:35:F0:57:F5:23:D4:26:CC:97:61
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 019790A5186C91EFBB4B21AE8ED29CEC4848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: BF
Signing time: Sat 21 Jun 2025 04:00:28 +0000
Manifest this update: Sat 21 Jun 2025 04:00:28 +0000
Manifest next update: Sun 22 Jun 2025 04:00:28 +0000
Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: 8DEhJz+nUJ00GYXccIwHDGDNofy7rWI9KMBisCRySIk=)
2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:a5:18:6c:91:ef:bb:4b:21:ae:8e:d2:9c:ec:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Jun 21 04:00:28 2025 GMT
Not After : Jun 22 04:00:28 2025 GMT
Subject: CN=dd87b1db4049b321814b35f057f523d426cc9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:db:7b:65:d2:24:02:4d:2d:55:44:42:af:
79:5e:5f:38:eb:ce:a9:de:db:97:37:43:74:0d:57:
c7:35:38:59:a1:5b:bd:b0:3b:f5:67:f5:ca:b0:81:
e4:62:ee:7c:19:4c:9e:ab:56:20:97:df:c5:98:17:
15:1b:9a:db:ba:8b:9d:59:31:71:62:eb:ca:fd:de:
fd:35:6b:39:70:9f:a6:2c:b1:68:92:b1:c9:a3:23:
14:9a:18:be:27:a8:8d:2e:88:ca:a4:c2:97:61:35:
02:07:93:4d:a7:41:3b:dc:5c:6a:5e:aa:bc:f2:23:
7f:f7:2e:21:1e:14:e8:79:1d:07:f0:0c:95:61:8f:
07:b3:4a:5c:92:56:5b:76:91:6c:1a:c9:1a:c8:cb:
eb:8d:1d:ac:f2:ae:82:0a:85:e1:53:8f:40:46:02:
77:7b:17:04:e3:14:74:fc:49:f9:4e:d3:64:57:4c:
e3:b5:da:9d:c6:de:67:80:f4:a8:26:b8:3e:e1:2a:
96:72:27:c1:37:9f:fb:5c:23:e1:0c:9d:1e:4d:3c:
29:54:eb:d6:37:d9:e7:af:83:65:0a:05:49:03:83:
4a:d6:7d:62:90:cd:c5:b7:38:4f:c2:4b:bd:17:59:
b5:72:67:6d:1c:e9:37:ac:86:46:e5:21:88:f0:6b:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:B1:DB:40:49:B3:21:81:4B:35:F0:57:F5:23:D4:26:CC:97:61
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:31:f9:b8:32:91:a9:02:4f:0a:ef:33:50:09:8c:7c:54:
a0:41:5f:1c:d6:26:cf:78:3c:ef:bd:e4:61:fd:60:31:1c:7d:
4d:b8:3b:2a:48:23:80:8c:10:51:ec:9c:5e:99:2a:32:01:8a:
d4:9d:54:3a:69:50:e5:e2:9c:84:dd:79:4e:85:b5:4a:bd:05:
4c:bb:85:94:f9:77:05:cc:ad:ff:e8:61:57:65:f6:c2:44:20:
db:c7:fe:78:d5:6a:aa:8a:c5:26:f6:09:57:d9:f8:8d:7b:4f:
66:8d:9c:02:2e:3a:3a:82:b0:4a:1a:b6:9a:ce:45:25:20:45:
78:fa:ec:e9:e3:74:29:f1:97:89:b2:df:44:84:7e:53:6f:38:
2a:eb:10:0f:a1:f4:c8:fe:61:e3:1f:5b:ec:a8:3d:6f:70:9e:
f9:e6:0f:20:a2:7c:2a:35:94:35:0c:b7:ed:6b:61:81:91:65:
2e:c3:81:96:e0:78:25:b3:15:c4:28:22:58:a3:7e:16:14:0b:
a6:bc:79:a5:0f:b8:98:02:18:fb:50:dd:36:5d:1a:2d:3f:45:
eb:2f:64:5c:ca:2b:78:41:af:dd:86:c0:65:4a:20:b3:7a:c5:
43:46:3e:9b:c5:b1:75:80:2f:8c:88:69:8d:6b:f0:58:fb:21:
50:f9:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:17:17 2025 by rpki-client