Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: LMts2Zubwv/4XBA6i14LrvkCWg0pyNziD14SHd0EDxo=
Subject key identifier: 8C:83:5D:C6:34:CF:0F:EF:25:79:0F:E3:65:10:84:11:CD:E0:DF:43
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0198D6CCF2B3FC2A16FC0AE317BA9128A190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0D9B
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: +w+hcNDCGHcyV2CLFRi9E9yhOV2UthHkYQBKC/2ffE8=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f2:b3:fc:2a:16:fc:0a:e3:17:ba:91:28:a1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=8c835dc634cf0fef25790fe365108411cde0df43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:d5:a2:3a:81:e8:bb:1b:81:cc:af:1e:f4:
13:0e:f3:5a:a4:db:75:8e:fa:cb:46:5d:2d:bf:e8:
eb:c6:fa:04:5b:23:7d:f6:cb:3a:e7:57:69:76:9c:
2d:93:04:a0:33:d4:d1:14:f8:fe:39:d6:0b:85:77:
70:28:04:1d:84:56:7c:de:38:c4:9c:50:e2:c4:02:
bd:45:36:f5:26:46:20:ce:62:71:ca:45:00:8e:fa:
b3:19:ca:4e:9e:2d:75:9a:ca:9a:96:cc:0a:bd:f4:
6c:ad:94:0a:b9:c4:c8:0c:8e:86:a9:9a:e6:3d:60:
5e:85:af:b1:e2:20:03:70:67:3f:75:d0:e2:2a:9f:
e9:e4:8d:77:88:20:05:b0:13:e7:14:1b:1f:a7:e4:
12:69:dd:25:df:bc:f0:46:2f:80:e9:de:b7:a4:a5:
21:51:e5:13:3c:dd:8b:f0:bb:97:04:32:d3:4f:96:
0e:01:f8:fe:0f:9f:2f:b8:42:a2:29:33:ca:d8:54:
36:c2:dd:5d:47:82:3b:dd:5b:1e:84:7d:7a:78:48:
11:63:b9:86:85:e1:f0:ee:03:39:63:f4:3b:fb:16:
13:ec:cf:57:9f:c7:d4:fd:b7:fa:dd:7c:cd:ab:15:
c5:7b:89:28:f3:63:d3:8c:24:0b:6e:93:af:82:94:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:5D:C6:34:CF:0F:EF:25:79:0F:E3:65:10:84:11:CD:E0:DF:43
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:6a:ce:f4:34:6a:6b:06:ac:5c:53:98:b5:e5:01:f4:78:94:
55:03:fd:75:32:7f:4f:d1:d6:62:52:6e:3d:ed:a5:0f:02:9b:
af:d2:ba:b2:18:6e:90:15:30:b3:bb:d8:25:7f:1b:fa:2b:d5:
74:b9:9b:9b:c0:f1:e4:48:02:bb:ae:2d:30:23:ef:98:32:5a:
9c:c0:e7:f5:db:7f:97:3c:55:d0:95:73:84:cc:76:c2:4e:cd:
55:1f:be:fa:8b:5a:91:d1:8c:c5:26:26:07:49:e1:54:7b:df:
5c:85:fd:b5:39:a5:4f:73:e2:51:6e:24:4b:7f:2a:1d:1a:28:
28:6a:2d:9f:0a:98:68:b9:4e:36:5f:11:67:32:4c:0c:29:86:
84:3a:3a:f7:4f:3b:a3:c1:dd:cd:08:89:5e:48:49:d3:04:8c:
cc:ba:dc:e0:80:02:e4:b8:8e:42:45:53:21:5a:53:96:fc:d4:
29:35:da:fa:68:b3:66:5d:17:f8:61:34:85:43:33:bb:cc:e4:
c2:9c:18:33:44:ab:c7:08:58:d2:8f:29:9d:93:42:18:e4:33:
e4:84:6e:ef:ac:b5:77:c2:5d:d4:98:29:3a:68:5b:81:1c:e7:
0a:4a:61:7f:bc:e0:52:49:59:49:04:31:b5:e8:09:1e:1d:48:
1b:83:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:24 2025 by rpki-client