Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: pkKxBLpe+jS6cad07Xqas+vql8Acgg1qP9RJgemgess=
Subject key identifier: 87:6A:A2:02:8B:BD:18:DE:77:7F:A3:79:64:94:C9:F6:DA:7E:40:19
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 01976A3C4B16BD32305E060FE4026424C030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 05BD
Signing time: Fri 13 Jun 2025 17:00:25 +0000
Manifest this update: Fri 13 Jun 2025 17:00:25 +0000
Manifest next update: Sat 14 Jun 2025 17:00:25 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: 3GrS9e6TGNuaF43WczWJR32DXGP5NRt3ap3DfrOUmEI=)
2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:4b:16:bd:32:30:5e:06:0f:e4:02:64:24:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Jun 13 17:00:25 2025 GMT
Not After : Jun 14 17:00:25 2025 GMT
Subject: CN=876aa2028bbd18de777fa3796494c9f6da7e4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:71:f0:d3:e0:c9:f1:78:5b:77:9f:bd:46:
36:7d:a4:57:d5:7b:93:3c:1a:ba:f3:5e:2c:5d:78:
10:06:ea:d1:98:21:2f:26:33:b3:aa:8a:62:9b:2f:
1a:a9:65:31:e2:1a:6c:c4:9e:96:97:ab:46:c5:8c:
02:73:d4:f3:9c:96:c4:58:b0:c1:a4:e4:6b:83:ea:
65:5f:40:0d:1a:df:da:07:15:c7:ca:c5:22:f0:26:
4d:d9:45:ca:44:49:43:0c:09:29:df:7d:0f:fb:65:
5f:30:4e:05:a8:40:70:cb:28:69:29:6b:ea:62:8f:
5e:00:18:2b:42:ab:bd:eb:c3:9e:06:46:78:62:42:
e4:de:4c:94:05:dc:a2:da:bf:f5:81:65:cf:c2:12:
cd:e2:01:f0:2d:80:12:1b:32:c1:e8:8f:e7:38:29:
58:54:f3:41:5b:0f:9b:8f:08:cb:75:6f:80:0c:5c:
61:e0:e8:5b:61:83:6c:4c:7a:e9:c7:33:a7:e7:ab:
81:99:6d:21:b4:91:4f:5d:56:2a:59:35:dd:94:22:
93:2a:3f:73:ab:3d:66:0e:5f:2e:d5:42:73:fd:f6:
00:a7:09:87:3b:d9:da:ed:c6:c2:3d:aa:09:42:98:
cf:9b:0c:8b:33:d9:2d:93:f7:0a:a5:0c:9b:4e:de:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6A:A2:02:8B:BD:18:DE:77:7F:A3:79:64:94:C9:F6:DA:7E:40:19
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:5f:de:d7:f7:5e:8c:1a:61:c8:fe:2c:b8:ae:ff:cc:08:
63:24:88:c4:96:8a:c7:bc:9a:e5:e9:01:8e:c1:ee:ab:1d:a2:
48:fe:b1:d2:bd:eb:ed:73:8b:4b:53:7f:51:4f:10:13:57:89:
4c:ca:14:74:cc:fa:0b:92:75:10:e0:84:55:e7:ba:f8:ba:93:
4f:0e:3c:b3:de:b1:c3:3a:93:5f:f8:dc:1a:7f:3e:a8:39:84:
68:c0:84:be:fe:f6:c7:0a:d1:be:ba:18:33:e1:4c:8c:e1:1a:
a2:22:63:5c:04:9c:c2:15:94:5d:80:6a:df:f1:c8:bb:f2:a8:
80:2e:37:dc:f5:1a:7b:13:18:93:04:59:4e:65:61:67:87:0f:
8f:42:a9:4f:af:52:69:5d:9c:49:6d:4b:c2:f6:6a:ec:d0:be:
d9:32:b8:05:72:e5:b1:b8:91:ac:69:f1:37:09:c0:4a:86:4c:
0a:4e:90:ad:d9:f1:5b:7f:e8:6c:a0:cc:38:b9:2e:a1:46:fc:
fb:3b:95:68:fc:b1:09:bc:57:46:d7:4f:15:31:3a:90:32:e0:
e2:94:77:4c:8b:90:2f:4c:2f:76:b5:46:d0:bc:b9:18:28:4a:
90:9d:27:1e:e9:51:87:59:80:dc:7a:42:8a:00:d3:e3:2c:22:
25:e6:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:10:24 2025 by rpki-client