Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: hRVNadPOZXaUNKrEOixk+Ul/LKDG6peithzrtiduhio=
Subject key identifier: 24:3C:A1:5F:F8:26:08:5A:14:FC:45:76:19:B9:E9:65:E8:0E:B3:33
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 0198D5BBA5DA758E27C8D1C11C3B960E7414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: p30SDCCjxuBLFFSJzF5UeX2pXhkvi6QSkPc8VpxD4s4=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a5:da:75:8e:27:c8:d1:c1:1c:3b:96:0e:74:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=243ca15ff826085a14fc457619b9e965e80eb333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:53:3b:77:3e:d2:7a:78:aa:30:1c:61:ff:
e8:4d:c8:ca:32:b2:e2:ca:0d:1c:97:3c:16:2f:cb:
00:1e:07:9a:3a:6d:7d:07:01:2c:90:50:54:0f:3b:
89:bf:7c:3a:85:f0:1e:b3:31:56:74:56:bf:c2:c4:
d8:87:7a:17:f1:cf:36:ad:9f:cf:16:bc:51:ab:c8:
22:69:4f:77:5c:1f:fd:40:50:65:10:f2:cd:43:dc:
bf:2d:69:2c:8d:30:35:4e:b0:9b:3f:81:e3:58:fd:
39:de:38:8d:8a:0d:ea:ca:34:bf:ec:77:18:45:33:
4d:22:17:ce:66:7b:92:2d:c9:9c:21:84:3d:26:03:
3a:f1:42:49:47:c1:aa:a6:7c:2c:b4:0e:d5:5b:b3:
04:7c:89:71:bf:91:b9:ec:5a:ec:e8:5c:37:20:1e:
61:ab:5f:3b:7e:fb:07:ae:a5:d1:a8:ab:2e:23:5a:
e3:99:ff:f4:14:4e:41:94:70:11:c7:ce:a9:e3:23:
33:e3:5f:13:7a:b0:04:5b:41:1e:a6:90:4e:1f:cc:
77:8d:19:4e:0d:3b:03:13:3a:e0:6e:b1:5a:20:91:
82:c4:e2:7a:71:6f:97:18:dc:b1:3c:68:ef:04:95:
6c:fb:fc:2a:b6:54:0b:49:7d:67:d4:ee:fc:bc:d0:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:A1:5F:F8:26:08:5A:14:FC:45:76:19:B9:E9:65:E8:0E:B3:33
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:b5:cd:4e:5c:3e:ab:77:d2:31:c5:f2:78:9d:6a:a0:34:
5a:00:94:cd:d7:2d:c9:13:70:22:49:56:5a:3b:db:29:8c:e2:
75:0a:f5:6d:57:ba:d2:cc:75:10:91:2e:5e:13:eb:e0:d0:10:
55:6f:81:24:d9:e4:c7:07:7a:d7:f7:7a:41:23:6f:19:47:0f:
f2:21:e9:00:2e:f8:35:6e:54:36:78:69:ab:c3:d1:45:a0:d8:
94:51:d9:49:e6:8c:2d:69:ac:29:49:ee:25:74:b3:12:40:b2:
23:7a:89:b9:99:f9:a7:4b:06:87:cd:bb:53:47:bc:6f:88:7b:
1a:5c:65:5d:38:3f:e2:4f:52:bd:0c:1c:b0:7e:c6:52:63:31:
02:7a:62:7c:d0:28:39:02:7a:6a:00:73:be:ae:10:b5:db:66:
3e:eb:64:2d:47:fa:89:0a:e1:d2:a3:59:ae:9e:2d:25:b8:1e:
48:65:ed:34:6a:6d:8d:18:b5:91:18:21:91:8f:d4:ce:42:b2:
a8:c8:60:39:b7:ad:0c:5e:6b:9f:ea:84:a1:f9:27:d8:87:e9:
c1:a6:28:90:2f:b4:ad:e2:d8:0a:92:66:33:c0:e0:4e:ec:fa:
76:d9:a5:6a:3c:b2:2b:9b:ee:fc:a2:aa:ed:cd:ac:5c:18:82:
1e:7c:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:34 2025 by rpki-client