Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: N91AkeBh5ZbSM2e81F3ykKRKnVJKe1ZdXrmtCz6SUvc=
Subject key identifier: 5F:A1:C9:01:71:90:CE:7E:CF:E7:6F:5F:CC:04:07:DD:BF:1B:91:A3
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 01977007730879F1443516434C5569558FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 05C0
Signing time: Sat 14 Jun 2025 20:00:25 +0000
Manifest this update: Sat 14 Jun 2025 20:00:25 +0000
Manifest next update: Sun 15 Jun 2025 20:00:25 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: 1qYp3wu1i8ttiuKivnAqb3iRedFojZ44KuwHZLjXS2E=)
2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:73:08:79:f1:44:35:16:43:4c:55:69:55:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Jun 14 20:00:25 2025 GMT
Not After : Jun 15 20:00:25 2025 GMT
Subject: CN=5fa1c9017190ce7ecfe76f5fcc0407ddbf1b91a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:19:e5:3f:41:6e:13:c7:8f:f3:c3:25:30:
25:d6:da:ea:bd:fc:95:25:1e:62:f9:01:3d:f4:2b:
8b:c7:7c:fe:48:24:86:19:80:13:d5:db:c1:bf:ff:
88:4a:0c:39:29:e4:99:f0:ef:7b:2b:6b:a2:9d:d0:
7c:d1:84:18:90:53:74:4b:50:da:1d:9f:3e:7a:2d:
f2:3e:f8:ea:89:c7:b3:05:43:0f:7b:8e:02:a6:59:
fe:da:56:13:f3:24:6e:07:a7:33:02:af:b9:f9:52:
c3:cd:c4:4a:13:0b:38:ac:7b:4b:92:43:3b:56:c2:
21:65:57:3e:50:f5:65:bd:2a:c9:e4:f4:5c:fd:80:
04:e1:f3:a5:3d:69:d4:bc:66:85:b8:e5:7c:26:e3:
7e:34:9b:f4:c7:89:04:1b:ef:1c:39:c3:44:bb:37:
9a:e7:93:10:93:70:e6:6f:ea:bf:77:b4:27:be:45:
b1:c8:50:cb:79:b2:16:80:48:29:42:52:9d:43:e0:
73:9d:72:61:ec:09:4e:06:d4:8e:ab:5e:fc:7c:5b:
67:fd:52:6d:57:b5:c9:19:53:77:53:38:48:7d:be:
21:73:8e:d0:c2:32:dd:1f:9e:54:83:43:7f:ec:5d:
c4:41:a1:3d:81:ca:77:a6:23:fd:15:da:c3:c1:73:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:C9:01:71:90:CE:7E:CF:E7:6F:5F:CC:04:07:DD:BF:1B:91:A3
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:83:9f:4e:8b:54:60:d7:c0:6a:18:6f:4f:75:46:58:0a:
4b:7a:4b:0d:90:49:9b:3f:bc:52:1d:29:f3:3c:2f:7c:d2:ba:
30:c3:7e:33:e8:e2:10:bd:82:7b:61:82:af:af:1d:54:60:f9:
e7:85:8b:ab:ce:fe:81:0a:c0:6d:8e:34:ba:72:3c:3d:86:e3:
14:59:68:c1:bb:44:4e:0e:9c:6a:d7:60:5a:f7:ff:67:11:d0:
e5:25:c3:83:d4:2f:d1:d4:a3:62:dd:2d:18:fa:fd:12:56:19:
8d:48:76:47:c7:77:fe:0d:98:03:28:53:f2:15:d9:fe:02:56:
07:7e:03:59:4e:07:76:ea:cc:21:75:24:f5:87:2a:0b:6f:d4:
7a:35:bc:fd:ba:e9:d5:9b:57:81:4c:09:47:da:d8:57:b0:1f:
8b:fd:9b:b9:87:24:9e:1a:e8:25:16:d9:8a:bf:3d:67:71:e1:
60:11:1a:44:f4:82:fb:e5:a4:02:27:d3:71:00:ee:c5:3e:8a:
89:a5:e2:45:ff:f3:b0:9c:7c:48:75:d9:32:ab:d1:12:02:86:
57:20:dd:00:31:6c:a4:5e:e2:40:6c:18:70:52:8a:cc:cf:1a:
45:b0:00:ac:b6:b9:c0:53:94:58:62:de:f6:4b:11:7a:6b:cd:
cc:03:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:45:06 2025 by rpki-client