Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: sLzZiptpTU5brhSEZakTmy0rJ+5WM/NKmf6hwQrCSmo=
Subject key identifier: 5C:20:82:9B:1C:2F:8B:52:36:90:35:61:49:83:15:34:D9:EA:E7:E2
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019A7225EDBF328982FAB35F9BC6A4786826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 074F
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: 9yke+PCT07DyxFqlGqs1L9clsE1RjWjdGUZ3l9JaBoU=)
2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ed:bf:32:89:82:fa:b3:5f:9b:c6:a4:78:68:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=5c20829b1c2f8b523690356149831534d9eae7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:c9:fc:ed:85:e8:21:41:df:54:9d:64:31:
f0:e1:2b:76:1e:c6:68:35:15:22:45:55:ee:64:99:
b1:e0:42:55:50:8b:7a:69:a1:8e:b2:47:c7:d9:c5:
af:76:8c:14:ac:06:99:57:bf:c4:55:c1:34:05:28:
3c:5d:70:84:ee:e8:ce:30:e0:f2:f7:e2:32:d2:76:
b7:b1:51:8d:fa:96:bb:36:30:f4:c9:f9:37:18:58:
12:1e:92:31:fa:af:25:e7:bc:3d:10:3f:07:cb:6e:
bc:3b:e6:8a:82:de:f2:c3:11:d1:84:a6:f8:b9:c0:
f2:e0:27:a2:3d:49:28:75:17:08:da:89:8a:ee:0c:
a0:43:79:61:6e:9c:ec:8f:26:16:4d:5e:4a:09:cd:
ca:a3:56:6a:50:a1:83:95:f9:43:f1:83:e7:7c:f8:
e3:de:52:a6:46:0d:d0:09:b2:8c:fa:3f:e0:7f:61:
bb:1b:a1:1e:ed:7e:0e:dd:de:1f:73:85:df:5a:16:
44:dc:25:7d:12:52:37:f0:72:3d:8d:cc:57:b4:43:
24:94:6a:4e:d9:75:15:8e:b0:8f:69:1f:78:04:16:
e5:65:69:b9:7b:6a:02:19:6d:0b:24:74:f2:63:95:
83:77:c1:64:be:3f:68:55:c7:bd:74:a4:b7:ca:07:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:82:9B:1C:2F:8B:52:36:90:35:61:49:83:15:34:D9:EA:E7:E2
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:e1:c9:8f:ab:c3:ff:c3:9b:b9:7e:4c:01:b6:74:9c:6b:
45:10:44:4a:70:a5:52:46:ef:31:50:4c:49:37:b7:cc:89:0c:
82:ef:71:55:7a:4e:76:73:55:3e:4b:ff:f9:f6:eb:8e:ed:d2:
38:63:f3:ed:29:d8:cc:0f:d7:06:54:f4:8f:14:d3:86:94:da:
c6:c6:3d:91:e2:7a:70:dc:4d:80:eb:fb:6c:c9:d3:d6:c4:fb:
d0:b3:90:72:dc:01:19:5b:c0:1f:7e:1f:1d:70:9c:26:2a:a0:
34:e7:51:50:84:79:7c:e3:72:22:3d:82:0c:4f:cd:e9:c4:26:
35:cf:13:3f:5e:07:60:0b:d0:be:4c:02:c3:ff:0e:83:37:00:
3d:f1:fe:d8:35:1b:a6:56:b2:29:36:f2:b7:6e:ec:f7:b4:3c:
84:f6:db:29:05:fa:66:8a:60:f2:64:4a:25:de:75:6e:94:cd:
ae:20:00:ae:db:db:0a:49:24:62:04:02:41:cc:5e:23:8a:2e:
4e:c2:82:37:03:00:42:57:4a:d6:5d:a2:5d:2f:22:92:d5:9e:
8f:a0:c3:ff:34:00:af:45:2a:b0:3f:69:94:24:66:4b:c5:d1:
e4:d4:3b:c1:09:9e:f9:4b:c5:7e:1c:d2:44:a0:7a:8e:dd:2e:
fd:cf:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client