Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: WcPkC1cLcyls+Vw2bdmFV8tgyVRjqJj27ZSaVJc57Us=
Subject key identifier: C1:6D:80:42:51:89:82:33:35:D4:0B:3A:22:1B:BF:19:80:69:1D:DF
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0197B70F3A3199A413C2D556BDF9E1C1D195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0D06
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: x/7saZPbFWRpX5I527d1QLixLAN7dmjfsUPbhJDaZFY=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3a:31:99:a4:13:c2:d5:56:bd:f9:e1:c1:d1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=c16d80425189823335d40b3a221bbf1980691ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:ea:40:02:a0:23:48:23:07:60:45:29:15:
66:2b:1d:c6:43:04:0c:7c:54:76:ed:2f:ba:d5:d8:
a8:25:38:d6:94:d0:fb:c7:6a:5d:92:3c:b5:8f:90:
73:f8:54:f6:d9:c1:bb:ea:86:20:b6:16:2c:50:96:
b3:54:75:84:65:a4:6e:49:5e:14:35:fd:9d:6f:bf:
f9:6e:ac:65:d0:37:7a:db:ee:fc:3a:b6:e6:d5:07:
bf:69:70:30:6a:ba:81:4c:22:eb:a0:1b:af:02:04:
f6:8f:d4:ba:fb:aa:7d:4f:7c:1e:91:02:c3:9a:7e:
b9:4a:11:33:ca:c0:23:03:1a:a7:c7:16:87:fb:8f:
f8:3c:f2:47:04:bf:ef:be:8c:b4:45:ea:85:9d:b9:
97:50:ad:f9:bc:9c:6a:e8:c5:f3:53:38:d2:f1:d8:
30:f4:0d:31:dd:8a:2a:cc:a4:28:8c:f4:54:60:51:
61:17:13:ae:d3:00:74:d1:ca:1a:71:de:33:15:03:
dc:71:3f:dd:eb:0b:be:63:89:0f:df:70:c3:fb:66:
9d:27:4c:de:cd:92:22:e9:12:20:bf:8b:b5:9d:35:
fa:35:b0:9b:11:ca:f5:fe:05:5e:2d:63:1b:d8:bb:
ec:7e:1c:de:33:13:46:1a:ad:ef:e4:38:08:bf:7a:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:80:42:51:89:82:33:35:D4:0B:3A:22:1B:BF:19:80:69:1D:DF
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:43:c7:37:38:5c:72:44:33:db:30:78:2e:f5:30:d5:56:
4b:bd:3a:3b:5b:a3:89:b6:f7:c6:c6:ff:3c:61:fb:cb:c9:64:
a0:cc:91:7c:8d:29:e4:c4:ac:a2:5f:cc:e2:eb:45:cf:3a:45:
00:33:9a:84:91:cb:c2:ae:1b:22:65:7a:95:7b:1e:57:25:a7:
9a:51:97:5d:82:b8:1d:18:9b:da:d1:77:99:21:39:b9:84:00:
06:23:90:7a:63:c2:34:14:9b:c0:b9:6e:e2:a0:a0:a5:29:3b:
4a:9a:db:04:86:ef:50:f7:53:1a:e3:e5:d3:85:8d:2e:3b:6b:
1f:3f:6f:d0:4d:db:03:bd:0f:53:1d:d2:f7:87:cc:1d:fb:0f:
61:cf:19:7c:e8:54:9b:ed:37:75:33:a2:82:13:4e:ca:87:a3:
9b:1c:34:ca:fd:76:47:74:7f:a8:3d:7f:d2:f1:58:bc:cb:10:
12:35:55:5f:5b:88:41:4c:77:ae:9b:43:fb:50:7f:b2:4b:93:
15:22:be:17:15:9d:fd:48:f0:0e:ba:cf:40:c4:50:2f:9c:40:
4b:79:c9:57:f8:5b:ff:55:4b:aa:6a:26:5b:ee:56:71:17:84:
91:24:bc:d7:7c:3e:f7:32:a3:4e:e4:45:89:64:fe:86:7e:ff:
f5:10:94:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzoxmaQTwtVWvfnhwdGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh
NDlkNGIwHhcNMjUwNjI4MTUwMTU3WhcNMjUwNjI5MTUwMTU3WjAzMTEwLwYDVQQD
EyhjMTZkODA0MjUxODk4MjMzMzVkNDBiM2EyMjFiYmYxOTgwNjkxZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWzqQAKgI0gjB2BFKRVmKx3GQwQM
fFR27S+61dioJTjWlND7x2pdkjy1j5Bz+FT22cG76oYgthYsUJazVHWEZaRuSV4U
Nf2db7/5bqxl0Dd62+78Orbm1Qe/aXAwarqBTCLroBuvAgT2j9S6+6p9T3wekQLD
mn65ShEzysAjAxqnxxaH+4/4PPJHBL/vvoy0ReqFnbmXUK35vJxq6MXzUzjS8dgw
9A0x3YoqzKQojPRUYFFhFxOu0wB00coacd4zFQPccT/d6wu+Y4kP33DD+2adJ0ze
zZIi6RIgv4u1nTX6NbCbEcr1/gVeLWMb2LvsfhzeMxNGGq3v5DgIv3pFOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFtgEJRiYIzNdQLOiIbvxmAaR3fMB8GA1UdIwQY
MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt
ZGNhMDQyNzBiOWQ1LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1
LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN1Dxzc4
XHJEM9sweC71MNVWS706O1ujibb3xsb/PGH7y8lkoMyRfI0p5MSsol/M4utFzzpF
ADOahJHLwq4bImV6lXseVyWnmlGXXYK4HRib2tF3mSE5uYQABiOQemPCNBSbwLlu
4qCgpSk7SprbBIbvUPdTGuPl04WNLjtrHz9v0E3bA70PUx3S94fMHfsPYc8ZfOhU
m+03dTOighNOyoejmxw0yv12R3R/qD1/0vFYvMsQEjVVX1uIQUx3rptD+1B/skuT
FSK+FxWd/UjwDrrPQMRQL5xAS3nJV/hb/1VLqmomW+5WcReEkSS813w+9zKjTuRF
iWT+hn7/9RCUog==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:02 2025 by rpki-client