Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: Qt9UvSTpdzOXzT2GQYubgsWy6qZ21RPJbt2diD+AvQw=
Subject key identifier: 87:0E:12:42:1F:EF:F6:11:37:E9:F4:0A:55:83:4A:DE:9E:5D:8C:09
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 0196CFBDC7F802E20E35EDDE8C90C25796B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 056D
Signing time: Wed 14 May 2025 17:00:43 +0000
Manifest this update: Wed 14 May 2025 17:00:43 +0000
Manifest next update: Thu 15 May 2025 17:00:43 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: o+4j7DgN/RxrsbxFnXS9N84+9Vf1E5F5LahhTQrE+rk=)
2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:c7:f8:02:e2:0e:35:ed:de:8c:90:c2:57:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: May 14 17:00:43 2025 GMT
Not After : May 15 17:00:43 2025 GMT
Subject: CN=870e12421feff61137e9f40a55834ade9e5d8c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:96:db:95:6a:5a:16:13:fc:96:3f:03:d1:
6b:34:67:35:fc:01:ce:fc:64:c6:25:aa:7e:d9:11:
1d:7d:c7:5e:9e:de:88:c2:76:99:74:b2:23:1f:72:
47:82:79:1a:6b:f6:1c:50:61:de:b4:2c:17:be:06:
bd:6d:a9:bb:f8:e3:55:be:0a:5a:30:f4:31:6b:d6:
ed:12:a6:28:d9:9e:7f:6e:07:64:6a:6f:e8:96:0a:
bf:98:9c:df:f4:60:a8:0e:aa:84:24:e0:06:e7:52:
de:6b:5a:89:25:b0:10:fc:78:3e:23:9f:df:2e:ca:
3f:bd:bc:3e:27:12:f3:84:de:21:55:25:c5:d5:66:
97:8d:d7:cf:02:aa:5a:17:d1:62:87:61:3d:75:d7:
44:c2:ab:b7:a4:e1:06:d2:06:4d:a1:d6:14:5f:c2:
5e:74:9e:ca:20:09:e8:8a:59:d1:75:b5:d0:0f:24:
50:36:c0:b0:b5:d9:2c:10:1a:1b:a7:cf:e9:ff:40:
a9:5b:e9:a8:43:a9:28:3b:07:dd:65:3f:d5:27:25:
0f:aa:97:60:2e:52:ce:dc:32:48:95:6d:d9:d9:38:
e4:16:6f:53:5f:bd:3f:ec:6f:6a:91:2d:93:b3:93:
d0:5f:a9:87:ae:47:e9:52:8f:34:30:46:bc:38:06:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:12:42:1F:EF:F6:11:37:E9:F4:0A:55:83:4A:DE:9E:5D:8C:09
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:8a:97:0e:fa:87:57:9b:14:8e:b8:67:52:61:db:bb:f6:
1a:e8:55:b4:9d:15:46:ae:11:3e:4d:0c:7d:ec:f5:cb:34:c7:
14:c3:e1:1b:f4:17:78:4f:e3:2b:86:0e:3c:20:47:dc:3b:8e:
e0:3d:9c:47:91:04:4b:ce:92:9b:6b:2e:b4:ec:16:f1:49:32:
86:b6:2e:35:d7:f9:d0:41:87:ad:72:71:a5:7d:94:45:d9:6a:
ac:e8:4f:00:75:d7:fd:dd:fb:70:a2:c6:8a:a2:90:04:40:94:
db:6b:ea:ab:ae:b0:52:83:f8:a8:8f:de:c3:b3:6b:e1:5f:c1:
b0:7a:bb:e0:a2:ab:81:06:a9:fd:9d:19:0e:48:d1:b7:e1:3c:
64:15:5a:dc:ff:4b:35:7b:fb:55:d9:3d:bf:13:22:3c:32:c4:
73:ef:c8:a8:b9:63:af:55:a0:e8:c1:93:66:05:cb:22:2e:4b:
a2:f6:ff:b2:21:04:dd:10:9f:db:61:8e:ae:eb:8b:f9:34:0f:
aa:44:f3:75:d0:bb:ea:ce:f8:09:76:44:5c:56:f8:ca:4d:ae:
43:c7:34:cb:46:5b:ea:23:f7:4e:68:7a:81:f6:8b:a8:a3:c8:
5d:79:7b:17:8a:ca:ca:20:ee:45:8c:73:ea:d9:cc:76:0d:04:
0c:7a:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:01:53 2025 by rpki-client