Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: JEt0EtDNeM5ZOQh8Jl/ZNPRFsJgS+cEfDHo05fv5+Ms=
Subject key identifier: E1:2B:C8:A5:FB:12:DA:E2:C5:7C:81:FB:D2:6E:88:6E:3A:4A:88:40
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 0199221EA2A16A246D7D73F0E6C484E5CC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 06A1
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: qLiIBiljWsCkqOiLiaXO06MAZUU/9314ZR9EV6cNi14=)
2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a2:a1:6a:24:6d:7d:73:f0:e6:c4:84:e5:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=e12bc8a5fb12dae2c57c81fbd26e886e3a4a8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:04:32:f6:71:15:d9:e6:25:c9:43:f0:c6:
4d:a5:ed:62:ff:fa:e2:d5:e4:3a:76:e2:02:ff:50:
33:00:5e:7a:94:af:fc:9a:98:81:4c:31:26:61:c1:
89:d7:62:0a:1d:aa:89:55:23:79:3a:0e:cf:e0:42:
1a:d2:d2:c0:64:20:aa:66:fe:1c:00:fc:4e:f1:c3:
5e:5c:25:fe:e6:8d:de:94:9a:c2:e1:df:dd:9e:71:
27:24:ab:0a:b5:48:54:d6:e4:b8:bf:34:d5:12:f2:
37:5d:44:01:23:6c:84:f9:f2:1d:7e:b1:ea:7a:9d:
37:0d:f5:a4:7a:11:ca:3f:3f:e8:6e:7c:22:ca:fe:
ad:12:ad:9a:fc:44:7b:f5:12:d1:aa:cd:5e:36:4d:
d5:01:8a:32:b7:26:11:98:fe:17:66:c1:a2:05:b1:
a4:54:77:5a:74:50:3a:32:6d:55:b4:04:db:09:27:
7c:e5:aa:ad:f7:ab:71:ff:a4:1c:90:f1:7b:80:4f:
16:53:4c:64:ff:1b:df:6b:3d:9e:b4:92:bb:f3:e5:
00:5a:a3:a4:5b:2e:98:c4:29:8b:3b:20:51:d3:2b:
0a:14:6e:3c:74:fc:63:3c:44:42:7c:61:16:fa:83:
d3:29:84:b9:a2:e4:2c:ae:da:67:7e:43:55:a1:3f:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:C8:A5:FB:12:DA:E2:C5:7C:81:FB:D2:6E:88:6E:3A:4A:88:40
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:09:2f:24:77:d8:bb:0a:95:b4:96:fe:a8:bc:28:c1:03:
32:26:d5:52:ba:e0:ad:05:d8:4e:32:82:3c:c4:27:87:97:6e:
14:7c:7a:3c:48:e9:e5:3f:c1:47:6b:19:2b:97:eb:34:a9:29:
75:9f:49:2d:a5:e6:a8:6a:0f:e4:ad:11:41:46:64:64:6a:23:
78:78:3f:85:25:70:2f:87:36:1a:65:50:f8:a0:1e:31:ca:d2:
9f:b0:de:5e:bc:42:a7:2b:8f:6b:c8:45:38:f4:6b:e8:23:6e:
99:8c:cc:15:28:0c:a5:c0:08:d5:56:24:32:33:59:1d:da:12:
97:93:35:00:10:15:2c:5c:c2:e8:c8:fd:4e:bf:72:b5:57:6a:
00:7f:cc:5b:e9:84:50:e6:6e:e6:51:b6:f4:0b:28:00:96:24:
0e:3a:a8:2b:2c:9d:d1:2d:e6:38:6f:14:91:60:69:cf:4c:c3:
86:26:9e:13:24:bc:b3:2f:9e:c0:7b:c7:70:5c:b0:38:e6:fb:
99:f5:62:4c:75:81:61:cc:19:ab:f8:ac:d4:c3:12:c8:04:e8:
23:28:a9:86:ed:f5:be:0d:d5:62:83:49:a5:91:ff:0f:8a:d5:
a0:f8:24:a6:d6:52:ca:92:21:80:13:e7:75:b2:d2:aa:f2:9c:
39:bb:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client