Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: PuowcCIpofsrTlul7EcYUU64LI9+Omy9R+xslhIBHX4=
Subject key identifier: 89:04:66:BF:87:E9:95:A4:5C:E7:37:86:9E:84:3C:C3:A8:6A:1A:F5
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019A4F62008A8C747F90A05F051554100576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 073D
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: CcZ9cSNzXVOVtMulzfwce9d7PtCsVLexIHQe20+fuE0=)
2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:00:8a:8c:74:7f:90:a0:5f:05:15:54:10:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=890466bf87e995a45ce737869e843cc3a86a1af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:e7:e7:ef:23:7a:f3:e1:4d:3b:29:80:11:
00:af:77:d3:9c:8b:81:c3:61:23:bc:79:51:6a:73:
da:c8:04:6a:c3:72:74:12:ec:00:09:ce:00:82:bd:
b9:d0:e0:12:47:4e:75:59:73:e1:a2:10:fe:21:72:
4e:b7:9e:56:c6:bf:b9:8c:77:22:f8:8f:32:c8:84:
04:99:50:f5:ed:2c:9f:cb:fd:1c:5d:37:23:b9:57:
c0:ff:56:26:8b:39:19:d4:20:bc:f5:fa:a2:cf:09:
ae:e2:01:9b:eb:6d:35:76:ca:65:11:9b:6f:a1:33:
a4:10:cb:31:c5:53:f9:68:5a:f9:80:84:4c:0c:f6:
0a:6e:20:76:9a:62:e9:db:38:c5:47:96:f4:7d:4a:
83:e5:89:8b:97:35:ff:3a:0f:31:02:bf:22:e4:16:
85:5b:46:c2:fe:0c:f1:58:66:8a:eb:eb:ef:2e:c9:
c1:3e:87:46:e1:01:78:29:9b:b0:33:dd:57:5c:f1:
b1:f5:26:b3:f5:31:1e:c8:27:6a:c4:41:10:df:80:
58:9f:5c:e1:1d:89:14:a0:44:9f:21:c8:63:e0:37:
7f:7e:2d:e1:0b:46:50:2e:91:50:64:f4:a0:34:a6:
96:66:d8:30:09:e8:47:fd:87:de:0c:de:d9:2c:3c:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:66:BF:87:E9:95:A4:5C:E7:37:86:9E:84:3C:C3:A8:6A:1A:F5
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:07:3d:25:f9:c7:d1:e1:19:f1:b5:8e:09:a9:56:36:1f:a1:
ce:32:e6:fa:53:12:c3:8d:05:ac:2e:4c:86:c4:ad:41:98:93:
a2:4a:67:0a:1d:56:76:c5:cb:7b:f9:0f:b4:3f:7d:69:b1:d5:
50:ce:23:4c:3d:38:79:13:e3:36:ba:00:75:aa:23:54:94:f0:
a2:6f:ec:53:76:58:97:a6:3e:b5:7a:93:36:c8:42:5a:05:b2:
38:3d:b3:c5:13:b1:6b:58:93:a0:be:d3:1f:2f:4b:98:23:dc:
e6:c1:56:1b:6e:46:b2:f9:1a:58:2f:bb:61:6f:5e:bd:79:33:
5a:c8:e6:26:dc:f2:49:76:4a:90:be:2f:93:1a:71:cb:f5:98:
e6:7e:1e:b8:e7:fa:a2:de:4e:2a:ea:80:7c:18:98:86:fe:05:
d2:be:ae:28:bc:2c:43:d1:3f:33:92:21:b7:44:db:85:8f:06:
8a:1a:19:25:d4:b3:17:23:1b:60:9a:2d:35:52:08:49:c6:21:
7b:82:1f:8d:95:ac:d1:d6:33:c6:8b:50:8b:10:d4:c0:5e:1c:
5e:58:52:08:e5:e5:b3:b0:a2:65:74:06:a2:9f:f1:f3:64:22:
07:2e:62:00:c8:2b:a9:1f:8a:e3:6e:f5:df:22:33:ff:1b:8f:
74:f6:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:14 2025 by rpki-client