Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: rBn8i7Wr9tMm0Bcsms37BTxn2be/1KDcDM6eImY20/k=
Subject key identifier: F9:E3:20:1E:82:BF:0E:18:03:E2:3A:0A:D7:B7:7A:15:59:DB:C7:BF
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 0198D4E0CEDCCF6D0BC7843AEDDA8D922BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 0679
Signing time: Sat 23 Aug 2025 03:02:39 +0000
Manifest this update: Sat 23 Aug 2025 03:02:39 +0000
Manifest next update: Sun 24 Aug 2025 03:02:39 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: c47QhMRo7jdbrHaFkHp/CJ7Gcf4EsFRrH/DS03m0V00=)
2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ce:dc:cf:6d:0b:c7:84:3a:ed:da:8d:92:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Aug 23 03:02:39 2025 GMT
Not After : Aug 24 03:02:39 2025 GMT
Subject: CN=f9e3201e82bf0e1803e23a0ad7b77a1559dbc7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:d8:1e:60:79:b1:e6:8b:3b:29:4c:88:51:
18:63:f4:c7:34:c3:02:f3:54:30:25:8b:b6:1a:c1:
a9:3a:95:32:ea:50:3f:bd:47:5a:3e:fd:ba:e6:a0:
a2:9c:2a:7a:f3:7c:3d:8e:0c:31:c6:bf:60:e7:bd:
33:38:80:07:53:64:2c:15:3c:bf:12:5b:07:9a:91:
e1:37:f2:92:67:4f:95:18:d5:ef:50:4e:cb:bd:5c:
83:dd:d4:f0:68:b0:af:7f:01:58:0b:d6:63:d2:0d:
32:bd:2c:48:5f:1c:c4:59:b4:77:4a:54:b9:11:cc:
e6:b8:dd:26:a5:f8:72:d1:df:79:59:76:95:aa:77:
21:9a:44:5e:ef:2c:32:4a:5f:63:11:06:c1:b3:3e:
73:cf:e3:50:b8:65:ad:b0:fa:8a:b9:91:04:75:b2:
2f:42:3d:29:83:ff:c3:da:f5:2d:b1:23:ef:fe:3c:
31:51:14:63:8c:39:88:ee:12:a1:71:99:12:8b:87:
6a:87:ba:c6:cd:7b:85:a3:da:2f:86:7a:72:c6:ec:
ab:7b:2d:3d:d5:27:77:64:5d:a5:ff:5f:7f:d7:6e:
9f:45:df:2f:f0:5c:23:2d:cd:2c:f8:09:bb:fd:b6:
6b:4d:58:a8:ea:8e:4a:3e:6d:c5:fe:0d:94:47:0b:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:20:1E:82:BF:0E:18:03:E2:3A:0A:D7:B7:7A:15:59:DB:C7:BF
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f8:73:98:f8:99:86:70:a3:61:51:43:6d:ba:8e:0f:d8:b6:
4f:a1:dc:90:d8:b4:ae:48:69:99:6f:0f:9c:bb:47:95:50:88:
37:86:c8:41:4f:86:88:a5:a9:58:92:95:6b:a3:6f:a5:79:86:
5d:a9:d8:31:77:2a:18:c0:d1:72:00:2d:b1:99:d3:9d:bb:62:
c1:c2:aa:d2:cc:dd:68:2f:fa:6c:a3:8d:92:d2:31:7d:43:b8:
ab:cf:67:55:56:b5:07:d6:66:61:2e:1a:5f:33:74:e0:77:76:
5f:d7:cd:1b:de:0b:18:d9:be:b0:d8:0b:70:71:04:4f:bf:a5:
13:4f:10:ef:7e:13:c7:ec:49:8e:58:45:c0:57:b7:48:67:03:
be:d2:08:6f:b7:19:d7:60:f4:fa:df:eb:79:e9:e7:fa:15:7c:
a4:0f:4c:88:ca:82:ef:3a:94:1d:e5:f4:d3:0e:52:5c:78:9d:
2a:86:e7:80:5e:76:22:14:7a:79:81:c5:2a:db:0d:63:6c:75:
79:60:42:93:23:2b:86:7d:78:72:41:59:d9:e9:97:2b:a0:2e:
d3:09:2e:79:30:91:ad:f2:2a:89:de:ca:1f:2a:5d:0f:af:7f:
d9:12:b9:df:ad:0d:6f:38:21:da:a6:96:02:c4:07:04:e7:9f:
16:33:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:49 2025 by rpki-client