Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: Q1mRFxMRXrsweMBlC1Bh92A6+uMqi5LHHmjHGzfHr+A=
Subject key identifier: 04:D1:79:98:0E:5C:20:B0:50:C0:07:49:0C:B4:52:5A:98:B8:A5:C1
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0196A0F6A10DCD97179894EAA26031013785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0C76
Signing time: Mon 05 May 2025 15:00:39 +0000
Manifest this update: Mon 05 May 2025 15:00:39 +0000
Manifest next update: Tue 06 May 2025 15:00:39 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: XdH6ns14PP3Q6fCxLCR4xk7y9FnScaQ1varj75qLQA8=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:a1:0d:cd:97:17:98:94:ea:a2:60:31:01:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: May 5 15:00:39 2025 GMT
Not After : May 6 15:00:39 2025 GMT
Subject: CN=04d179980e5c20b050c007490cb4525a98b8a5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:7e:59:6d:b3:98:12:8d:98:a4:19:9b:60:
6c:7f:b5:75:52:6f:63:07:b2:87:30:a0:70:7e:69:
62:25:1f:b8:a0:fa:2f:83:38:9d:6c:da:4f:23:54:
19:f6:62:4f:22:15:ed:74:fc:37:5c:de:f7:cf:82:
ec:26:69:26:25:2d:11:da:8e:8d:1c:1b:5a:66:fd:
34:5a:2e:2e:d3:69:e8:da:eb:a6:e3:9e:e7:b6:eb:
82:fa:83:bb:60:12:69:75:ae:59:c8:cd:5d:43:76:
0f:63:03:e4:48:15:20:28:bc:1d:02:9c:87:25:f3:
98:79:69:f6:51:9c:e2:02:4c:1b:91:46:24:2c:77:
19:65:46:a2:0b:76:cc:b9:a7:52:cc:e1:91:f0:5b:
79:b2:d9:8a:87:6d:aa:f0:aa:9c:07:8c:05:8e:e5:
bd:31:90:5c:9a:06:2e:76:c9:ca:33:05:5b:63:4e:
c0:af:79:e6:c0:f1:38:93:9d:0a:fc:a0:12:89:37:
cd:6c:84:e4:f3:63:72:b5:73:e6:42:d2:97:a4:7c:
51:87:3f:23:cb:92:a3:2a:7b:1b:b0:89:8e:71:aa:
3d:85:d3:60:df:6f:60:55:5d:f6:70:84:75:85:50:
78:5a:0f:7e:1a:ae:e2:7d:a8:1b:9d:d7:cf:59:4f:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:79:98:0E:5C:20:B0:50:C0:07:49:0C:B4:52:5A:98:B8:A5:C1
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:30:95:f0:a6:50:c7:2d:a1:bc:e9:76:1a:7f:d4:41:02:e5:
56:48:8c:2c:f8:94:98:fc:c8:1e:4d:73:b3:c9:d6:38:10:e6:
b4:7a:07:f0:e5:7e:15:55:46:65:06:e7:e8:ae:9a:42:fd:1d:
8e:ac:4f:be:4f:74:6c:29:8b:5d:68:86:ee:93:db:89:82:a1:
46:0a:67:fe:53:db:fc:d0:59:e3:15:1f:df:a9:91:60:db:94:
a8:14:62:8b:a2:d8:ea:70:38:57:79:07:4c:06:8e:01:ef:bc:
95:3e:af:36:a8:e3:55:eb:e8:35:db:6f:5e:cd:11:a3:db:ac:
b7:55:df:00:c3:8a:09:41:21:4d:d7:d2:88:6a:ac:77:e5:96:
5b:4f:51:b4:d0:c3:f6:b1:9e:0f:4c:16:4c:62:73:d7:e5:a7:
de:cf:00:b4:83:a4:a5:b4:74:b2:3f:e6:8c:5c:d5:af:52:44:
b3:f8:0b:f3:be:aa:e9:a1:f1:4e:b0:fa:a9:f1:8a:2f:02:d2:
06:c7:bc:24:9e:c1:a9:d2:77:2a:8f:c4:30:53:00:8e:00:7e:
56:c1:8c:f1:70:23:a5:8a:65:8c:2e:69:a6:a7:be:7e:f5:10:
66:25:fe:e1:0d:84:13:ee:a0:3b:66:9b:14:ae:1d:09:30:f7:
91:60:3a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9qENzZcXmJTqomAxATeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh
NDlkNGIwHhcNMjUwNTA1MTUwMDM5WhcNMjUwNTA2MTUwMDM5WjAzMTEwLwYDVQQD
EygwNGQxNzk5ODBlNWMyMGIwNTBjMDA3NDkwY2I0NTI1YTk4YjhhNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLV+WW2zmBKNmKQZm2Bsf7V1Um9j
B7KHMKBwfmliJR+4oPovgzidbNpPI1QZ9mJPIhXtdPw3XN73z4LsJmkmJS0R2o6N
HBtaZv00Wi4u02no2uum457ntuuC+oO7YBJpda5ZyM1dQ3YPYwPkSBUgKLwdApyH
JfOYeWn2UZziAkwbkUYkLHcZZUaiC3bMuadSzOGR8Ft5stmKh22q8KqcB4wFjuW9
MZBcmgYudsnKMwVbY07Ar3nmwPE4k50K/KASiTfNbITk82NytXPmQtKXpHxRhz8j
y5KjKnsbsImOcao9hdNg329gVV32cIR1hVB4Wg9+Gq7ifagbndfPWU9dpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATReZgOXCCwUMAHSQy0UlqYuKXBMB8GA1UdIwQY
MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt
ZGNhMDQyNzBiOWQ1LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1
LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjCV8KZQ
xy2hvOl2Gn/UQQLlVkiMLPiUmPzIHk1zs8nWOBDmtHoH8OV+FVVGZQbn6K6aQv0d
jqxPvk90bCmLXWiG7pPbiYKhRgpn/lPb/NBZ4xUf36mRYNuUqBRii6LY6nA4V3kH
TAaOAe+8lT6vNqjjVevoNdtvXs0Ro9ust1XfAMOKCUEhTdfSiGqsd+WWW09RtNDD
9rGeD0wWTGJz1+Wn3s8AtIOkpbR0sj/mjFzVr1JEs/gL876q6aHxTrD6qfGKLwLS
Bse8JJ7BqdJ3Ko/EMFMAjgB+VsGM8XAjpYpljC5ppqe+fvUQZiX+4Q2EE+6gO2ab
FK4dCTD3kWA6sA==
-----END CERTIFICATE-----
Generated at Mon May 5 17:06:43 2025 by rpki-client