
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: TlYAAMfexBsaEn2/HWB0d4tAv+vf5CUMjIqb15JrefM=
Subject key identifier: D9:8C:F3:7E:3E:28:8D:F7:37:EB:1C:C2:2A:2F:3B:25:F5:63:06:67
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 01988BEA642E62451CF546ABA5312617E839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 1324
Signing time: Fri 08 Aug 2025 23:00:50 +0000
Manifest this update: Fri 08 Aug 2025 23:00:50 +0000
Manifest next update: Sat 09 Aug 2025 23:00:50 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: GkTATPCXxm7L0uNGXWtvWR1zzo87DLD+ozBJb10aM3w=)
2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:64:2e:62:45:1c:f5:46:ab:a5:31:26:17:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Aug 8 23:00:50 2025 GMT
Not After : Aug 9 23:00:50 2025 GMT
Subject: CN=d98cf37e3e288df737eb1cc22a2f3b25f5630667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:0e:c9:5a:ca:35:bd:13:d3:28:ea:58:b5:
3c:2b:c9:70:90:a2:71:0f:13:9d:3d:cb:73:c2:1d:
7f:69:60:a6:7e:29:f7:89:c4:bc:c3:b0:5e:04:50:
8b:88:e1:72:be:cb:38:c0:58:f6:35:0e:75:0f:dc:
5d:a4:20:fd:d2:91:9b:ea:09:24:4d:7c:0d:3e:87:
3c:ce:4a:07:7f:3a:ab:69:b4:59:56:86:4b:8b:ea:
65:a0:47:52:ee:34:e2:38:63:7f:ee:f8:dc:6f:7c:
07:42:7c:4d:d6:13:2c:a4:6e:29:a1:f9:d2:8c:bf:
85:a7:67:22:b1:26:90:67:1d:b9:d9:b1:fa:26:1d:
31:d4:94:8f:15:af:87:9c:67:b9:ee:db:a1:7a:0f:
5a:23:6b:54:7d:dd:42:4a:dc:1c:7c:9b:3e:60:10:
68:bd:97:51:e6:a7:52:fb:ed:1b:3c:1c:0c:ce:2e:
3a:56:df:0a:4e:2d:56:85:45:4c:04:46:23:8b:30:
07:f2:16:62:e7:30:45:fd:05:37:7a:7d:78:1d:e4:
49:bb:b4:8a:86:0d:41:c4:ec:4c:b0:7f:4c:44:0c:
37:22:66:79:77:c8:b4:c7:7c:da:af:92:d9:7d:fd:
14:46:2a:da:47:fa:da:cb:10:6c:06:55:2f:cd:a0:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:F3:7E:3E:28:8D:F7:37:EB:1C:C2:2A:2F:3B:25:F5:63:06:67
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:09:4c:b3:0e:a0:f4:87:e5:d8:94:a3:0e:fa:d6:a0:9f:
5c:00:ad:dc:44:fa:88:a7:18:64:bc:e4:4f:b9:5a:a8:e6:2c:
9f:89:a4:09:d1:d2:90:1d:0e:46:d9:92:0d:98:cf:02:88:b0:
71:ae:b6:82:3f:e3:c2:e8:45:5f:3e:01:d8:57:dd:c7:66:a1:
6c:d2:a1:db:6e:c5:8a:dc:37:8d:6c:8d:12:f7:4d:67:78:6a:
da:5a:dd:9d:d5:4c:b7:47:66:6d:df:97:60:5e:c0:47:99:8d:
07:23:a0:2f:0c:68:65:77:88:80:0f:01:f7:03:18:cd:2b:f6:
5a:a8:15:a4:d1:91:45:14:7b:04:f9:08:6f:cd:10:6d:32:73:
1a:15:5f:21:2f:a1:f8:d1:74:ae:ef:fe:29:70:e9:ef:c4:d3:
aa:f5:39:f6:70:b8:18:6d:79:7b:41:14:c5:ac:50:c5:ff:a7:
fb:80:21:a1:6a:0e:6c:6a:0e:45:a7:77:1a:3b:2b:15:40:69:
79:cf:cb:05:26:1b:ad:51:96:da:f4:32:e2:bd:d7:ad:fc:a4:
ac:bd:ba:63:2a:eb:3d:04:be:57:02:50:54:98:3e:a9:a5:d6:
8c:8d:ff:fd:47:e5:18:5c:25:5d:85:07:1b:d5:6a:d0:62:33:
8f:87:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:50 2025 by rpki-client