Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: aORW+pylgofZ9RN/gj1lMUXGf4oBlOXo81iPNs1Ku5U=
Subject key identifier: 68:AF:93:37:80:36:CB:9D:42:0F:11:AB:C8:BC:40:FC:AF:3E:A8:C3
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01988BEABD3E8D42C97272DC87AB5108176C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0811
Signing time: Fri 08 Aug 2025 23:01:13 +0000
Manifest this update: Fri 08 Aug 2025 23:01:13 +0000
Manifest next update: Sat 09 Aug 2025 23:01:13 +0000
Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: 9BF/PO6krOvN14c6tXvFZLTaCjvaZXq+GMU3eKEAz4c=)
3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:bd:3e:8d:42:c9:72:72:dc:87:ab:51:08:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Aug 8 23:01:13 2025 GMT
Not After : Aug 9 23:01:13 2025 GMT
Subject: CN=68af93378036cb9d420f11abc8bc40fcaf3ea8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:a3:38:db:66:9c:ba:c3:2c:76:9a:e5:77:
95:18:73:79:65:fe:74:a3:b1:e9:fb:8e:99:ab:d2:
81:1e:34:ab:dd:cd:69:dd:68:53:72:ef:85:dd:3e:
7e:22:83:ac:93:52:82:bd:c9:b1:d6:8f:be:cb:4d:
33:8c:c7:c0:41:4c:65:3a:51:12:cb:40:84:94:d8:
09:39:65:91:9c:e4:52:d0:a5:be:a9:b3:97:c5:97:
12:09:94:c9:98:53:e2:4a:f0:c9:8f:4b:94:4a:e6:
a1:c4:81:d5:03:19:18:9d:6e:be:4e:c0:f8:a9:4b:
03:d4:78:3c:88:2d:00:a2:da:2d:3c:16:29:9d:9e:
14:73:4f:dc:2d:fe:8a:4c:a7:e3:70:1a:e7:45:bd:
81:c2:51:52:0f:8f:e1:52:f2:30:bf:74:87:f4:56:
10:9e:6d:29:d8:3b:22:7d:ec:e7:94:dd:e6:1d:41:
e1:3e:bc:c3:b9:f1:f2:3a:e1:cc:3e:0a:74:7d:02:
83:ad:97:c0:d5:4c:11:d6:0d:39:a2:0a:1f:d4:dd:
72:02:30:12:a6:ec:fe:41:41:bf:c2:bd:28:03:74:
21:26:03:62:97:7d:99:9c:31:ef:13:90:38:c8:d6:
f8:dd:12:54:96:99:6c:4f:10:87:92:1b:51:ed:86:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:93:37:80:36:CB:9D:42:0F:11:AB:C8:BC:40:FC:AF:3E:A8:C3
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:7f:6a:4d:17:06:c1:52:ec:c8:11:84:93:76:06:ab:01:
09:1b:6d:eb:b6:89:64:59:ce:69:5e:4c:b2:e9:86:6d:a7:32:
ac:af:c1:d2:73:36:56:6e:36:9f:61:82:41:33:87:9f:d6:1f:
21:fe:3b:45:38:da:97:8f:39:2f:a8:a2:23:f0:6b:c4:a0:8a:
14:eb:b6:cd:d4:dc:4f:be:f4:c6:a4:ea:79:9e:28:2a:ff:1b:
af:3b:59:43:de:69:e3:57:84:2c:5f:b3:e8:a7:29:00:7b:c1:
82:ff:46:92:dd:18:02:95:e3:68:b5:5c:01:99:5c:9d:fa:30:
b8:57:fd:77:3d:24:bc:07:e4:7e:47:df:87:5a:aa:51:8d:d3:
d4:66:b9:60:54:be:13:56:0c:5b:c4:00:f9:21:91:42:25:36:
a9:d4:2d:99:19:0f:7e:70:f7:3c:69:f5:c2:92:86:04:59:81:
78:50:29:a7:18:c2:c5:e5:be:3a:c6:5e:4f:7f:b8:ed:64:13:
11:7d:d0:91:e7:3f:0f:3d:74:29:1b:b7:de:92:c5:1c:5c:c9:
80:5c:7f:b3:5c:2c:9f:ab:86:40:1b:9f:7e:84:7f:80:b4:c4:
b3:2b:1f:77:55:96:9c:06:8c:1d:24:85:25:d8:d6:f8:52:c4:
4d:6c:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:21 2025 by rpki-client