Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: uZ4zNUCDbhc42e4ZZf3puKuKDza8GUlvSj2x+TmCz7M=
Subject key identifier: EC:08:17:15:32:9C:07:28:A1:48:C8:D3:DF:6E:9C:E7:6B:F3:B4:F0
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019895250E03EB01A4E4B65AFC58B6122369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 0658
Signing time: Sun 10 Aug 2025 18:01:30 +0000
Manifest this update: Sun 10 Aug 2025 18:01:30 +0000
Manifest next update: Mon 11 Aug 2025 18:01:30 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: 5qJ2jMscFcfIrA1X8p2N611O7zxMW+lN43fSurgBmjQ=)
2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:0e:03:eb:01:a4:e4:b6:5a:fc:58:b6:12:23:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Aug 10 18:01:30 2025 GMT
Not After : Aug 11 18:01:30 2025 GMT
Subject: CN=ec081715329c0728a148c8d3df6e9ce76bf3b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:5f:2d:e5:ae:7f:2d:e3:51:6f:2c:ec:27:
b4:cd:21:30:06:2d:42:f9:cd:96:d2:01:7d:aa:eb:
2b:e7:27:a7:5c:01:48:f4:fd:17:ef:ff:15:14:13:
8f:20:ce:78:df:95:26:c3:a3:17:6e:c8:14:31:98:
8b:02:63:48:50:05:53:31:61:05:5e:47:c7:b6:05:
ce:1b:7f:c6:fa:0f:e7:fe:94:60:f8:c0:3c:8c:b2:
59:59:d7:e5:64:2a:3d:90:2c:33:a8:ef:ee:06:1e:
8a:31:1e:8c:41:ba:0f:2a:4c:e9:40:80:47:76:b8:
2e:d5:00:da:ad:c1:68:25:70:cd:6b:95:16:27:ca:
a3:6e:e4:41:22:33:f2:1f:4e:e2:e8:9f:26:83:e3:
12:fd:e5:56:a4:d4:8a:20:e0:07:b2:4e:64:99:80:
74:ad:f8:f7:de:7d:dd:4d:79:39:8f:75:87:a9:d8:
dd:9b:63:99:13:a3:0f:5f:32:d8:d5:08:83:9e:49:
ed:12:7b:c4:e4:6a:92:f4:cc:92:fe:bb:6d:b9:50:
1a:3d:f7:00:b4:1c:ca:33:81:ae:69:f0:2c:1c:52:
77:75:60:5f:f8:bf:33:d9:89:07:bf:bd:33:2f:9a:
20:05:ce:b7:49:07:0c:8a:3d:1d:bb:a4:28:86:cd:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:17:15:32:9C:07:28:A1:48:C8:D3:DF:6E:9C:E7:6B:F3:B4:F0
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:5c:3b:6c:91:c0:65:db:3b:df:39:9b:da:12:18:8a:ee:
e6:b5:f2:7d:8e:0a:85:20:0f:04:7d:17:3a:25:9b:e7:09:2d:
7d:75:46:a2:58:e0:ea:19:ef:9e:ba:75:d1:41:c6:14:ba:17:
af:66:f2:dd:50:09:d8:da:e0:37:32:69:a2:34:51:b9:d5:fd:
1f:df:21:ff:66:de:8b:d7:09:84:44:9e:a4:9a:31:c6:b9:79:
81:86:c6:73:b7:9f:15:56:29:8a:25:08:61:a2:85:88:6e:93:
6b:44:9d:60:1b:71:f1:cf:3f:9a:f6:31:75:e3:3c:a5:3d:6d:
3a:82:52:9e:31:a8:f2:e4:d5:ca:2d:79:17:c4:3e:78:3a:74:
37:21:bd:a0:7d:3f:7b:cc:f0:1f:5b:4a:e0:ce:9e:cf:3e:ee:
5a:09:dd:c2:46:cc:28:8a:a4:42:32:91:a8:9e:e7:32:7f:66:
47:2d:f9:9b:52:08:e7:f3:eb:8e:6a:b7:ae:12:e1:9a:86:f4:
46:8f:29:82:fa:7e:3b:b9:95:a9:09:1a:f3:cd:e2:69:e5:b0:
d3:22:e2:e2:5d:3f:59:3d:79:bb:64:89:fb:61:9d:6d:fe:53:
38:f9:a5:44:98:19:11:e1:d3:b6:b1:f1:f4:2a:ff:b9:38:94:
41:a1:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:03 2025 by rpki-client