Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: K+KpU7GwgUz+SuKeFYYCHxAdzx4iCMBTsmV6eliJ/fE=
Subject key identifier: 7E:11:EB:9F:C0:AC:C5:14:30:3D:6C:D2:C9:60:98:C4:EF:64:BE:D8
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01978168D488A9FFD07A64A71BAAE5284EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0787
Signing time: Wed 18 Jun 2025 05:00:20 +0000
Manifest this update: Wed 18 Jun 2025 05:00:20 +0000
Manifest next update: Thu 19 Jun 2025 05:00:20 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: TJP7rkM5w8EiD5ypC8HXIQumGOlR7SQdreNCH0XysaM=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:d4:88:a9:ff:d0:7a:64:a7:1b:aa:e5:28:4e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jun 18 05:00:20 2025 GMT
Not After : Jun 19 05:00:20 2025 GMT
Subject: CN=7e11eb9fc0acc514303d6cd2c96098c4ef64bed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:5f:0a:b1:0d:ea:d0:5d:2e:d8:55:29:11:
12:89:5b:05:de:63:da:ce:3e:c9:06:24:f4:d3:81:
3e:ae:09:d2:a9:6f:1e:10:e1:22:74:1d:ca:13:0f:
0a:9d:b9:ee:df:e3:35:87:ec:d6:17:84:20:81:fc:
ff:d5:b9:33:24:eb:04:f5:10:19:d5:3e:6b:3a:d3:
cc:43:4e:ed:40:0e:9b:af:40:7d:c9:86:3f:6f:ee:
b4:38:f1:d1:ea:15:ec:95:8d:9e:5f:8a:ef:16:c8:
be:69:c3:23:b7:9b:99:2e:f3:f9:52:e4:4d:9f:ce:
89:52:ae:de:35:fd:90:cc:a2:c4:25:83:83:0e:ed:
3d:5d:bb:6f:66:a6:4d:4d:eb:c5:08:85:9c:6b:4d:
ca:25:88:f0:d4:cf:b3:a9:51:c2:7d:12:78:54:be:
bc:da:ca:08:44:7e:b3:fb:89:c3:75:14:06:7d:52:
e7:42:44:40:b0:61:17:6c:06:5a:2e:0c:89:0f:ab:
54:66:e9:ee:0d:41:ac:d5:34:25:cb:ff:9c:25:0c:
99:28:25:dc:e2:8d:f3:de:27:ee:db:5b:53:17:14:
59:4e:a4:21:37:fd:a0:00:fb:52:d2:86:8e:32:fe:
a1:b4:ff:b3:e2:35:ab:77:06:26:47:e6:05:7e:0d:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:EB:9F:C0:AC:C5:14:30:3D:6C:D2:C9:60:98:C4:EF:64:BE:D8
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ab:db:a1:89:c2:ae:61:81:dd:b6:6b:0f:e5:4d:4f:03:ac:
80:12:d9:4f:c5:89:50:1c:32:76:f1:c1:0c:d8:01:d1:f3:e4:
99:a0:67:93:41:e8:57:5b:ab:9c:c6:04:2b:a7:7b:a7:93:f3:
a2:10:c4:c9:82:30:ce:5d:32:bb:a1:3b:ff:ab:91:fa:0c:bf:
13:3c:89:71:4b:05:ff:35:8e:5d:11:55:c8:86:4a:63:5d:50:
b5:47:16:b4:db:4d:37:68:c1:2a:92:b8:cd:a0:f8:06:82:75:
03:66:cc:08:7d:a9:fd:40:b2:ad:bc:22:c0:a3:93:dd:bb:2e:
31:33:62:38:39:62:8e:00:76:74:d6:89:39:d0:f7:d7:62:96:
5d:ba:79:19:85:c4:09:c7:53:e8:69:2b:e7:91:de:3f:c2:24:
59:a1:2c:62:6d:b3:47:88:5b:4e:6b:06:0b:bb:d3:99:f0:69:
3c:e1:56:1b:d7:77:82:10:c4:13:8a:24:d3:d9:97:87:28:37:
d9:f0:25:39:69:32:67:29:4c:e9:9e:7f:0f:ea:6c:e4:90:ae:
b2:54:e3:6f:18:4c:87:6d:66:73:32:59:1a:c7:e3:fc:e8:2f:
ce:67:e9:e9:06:5b:a7:2c:ec:30:1e:53:a6:5b:84:b7:f5:2a:
e7:8f:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:22:35 2025 by rpki-client