Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: 2xrXJCdVHS7zcsuUJU+4hzV+SSphsLfw9Bjk6sqNdh8=
Subject key identifier: 01:E4:E0:DA:D7:63:2E:82:1B:D5:6D:E4:F7:E3:F2:20:D9:EE:4A:A4
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 01965FBBF62281D8380F0FDAA560D7838DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 0533
Signing time: Tue 22 Apr 2025 23:01:15 +0000
Manifest this update: Tue 22 Apr 2025 23:01:15 +0000
Manifest next update: Wed 23 Apr 2025 23:01:15 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: FeIY3/dCl+8NRHKP0bpwiU5ywZBIjT/c4YaiKpQSct0=)
2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:f6:22:81:d8:38:0f:0f:da:a5:60:d7:83:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Apr 22 23:01:15 2025 GMT
Not After : Apr 23 23:01:15 2025 GMT
Subject: CN=01e4e0dad7632e821bd56de4f7e3f220d9ee4aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:f2:cc:bf:c9:39:14:56:f3:67:7e:70:e9:
31:c4:35:9c:83:01:5d:48:d1:83:3c:f0:7d:54:8a:
08:5d:a8:66:2e:1e:a5:04:c5:52:9a:37:fd:1e:0b:
14:61:47:f1:de:f8:39:29:0a:80:51:a9:c5:13:9e:
f8:f7:34:4c:30:d7:fa:bb:03:8c:7b:cf:3a:bb:5e:
99:94:7e:85:8f:02:16:e8:7c:a7:bc:41:0e:05:a6:
a4:8d:c6:0e:aa:1b:d7:79:dd:ff:17:c8:72:82:7e:
3b:0a:6a:5f:88:4a:7d:27:f5:8d:36:40:a7:9d:e3:
6d:4e:d4:a3:76:f7:6a:2f:80:aa:88:2e:c6:0c:dd:
44:9f:b7:4e:70:49:0c:57:b0:2d:73:ab:c6:c6:2f:
d4:ae:ce:61:b8:12:5f:e7:14:fd:17:fd:74:0b:3a:
b9:1e:c0:b3:72:bd:b1:d5:ec:cd:93:65:53:46:6f:
0b:bc:a8:52:c4:ae:d1:d2:dd:7d:43:bd:96:46:91:
a1:d2:a3:1c:1d:99:92:f0:ff:7f:00:fb:ee:46:69:
86:22:7f:51:18:ad:22:d9:1e:a2:b1:4e:77:0f:16:
93:7b:a1:ef:7a:3e:5a:ba:ba:69:98:22:5a:95:ae:
e1:f9:99:81:1a:7f:fe:02:94:b7:1e:28:2c:b0:3e:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:E0:DA:D7:63:2E:82:1B:D5:6D:E4:F7:E3:F2:20:D9:EE:4A:A4
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7a:56:08:f1:74:2a:18:76:58:4c:0a:d8:a5:46:cd:ca:a6:
bc:66:45:cc:f7:9e:bc:93:38:01:9e:d6:2f:6a:5d:91:90:93:
ff:95:77:eb:6b:cd:29:30:8e:d1:a3:7a:81:b4:e1:02:57:36:
48:1f:09:ea:3d:7d:36:94:eb:e8:44:5c:98:32:51:4c:be:ce:
0e:7b:96:3e:a8:18:b1:d8:51:16:5a:ef:d0:78:fe:19:08:48:
af:c0:6e:01:0b:e3:60:26:13:f9:4b:24:e8:9a:3d:3b:e7:77:
5f:26:eb:f7:8f:13:e7:66:65:76:4e:3e:58:96:16:f2:8e:84:
63:37:48:82:77:d1:02:75:fe:ed:80:b6:8f:ea:f2:38:3c:c0:
a2:bc:db:ec:a2:f0:3d:8e:2a:0d:97:4e:c8:88:2b:63:b7:ac:
3d:80:5f:3c:6e:5d:bf:0c:64:43:5e:8f:a3:5e:b5:f6:03:fd:
bb:4b:fc:43:34:9b:de:8a:8d:8d:fb:08:7c:3f:71:b9:de:62:
cf:a0:d7:ee:f5:b3:11:00:65:9c:7b:47:fb:5c:45:eb:ab:d1:
55:7e:65:41:95:d2:46:51:b0:81:97:f7:0a:3a:45:2e:36:d3:
07:ef:a5:7e:da:3b:ca:60:a6:71:f1:13:ed:71:ff:d5:1c:8f:
df:0a:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:21 2025 by rpki-client