Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: 6o56eww9VEFjKeZQWjPg++q5kyLcCGQpXurp8WhmtGM=
Subject key identifier: E5:F1:21:31:31:8F:60:E4:0A:5C:D2:B9:1F:54:45:1D:55:A1:D0:AD
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 019846D1C0E225F03BE9B23EECC4BBFF4B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 13:00:08 +0000
Manifest this update: Sat 26 Jul 2025 13:00:08 +0000
Manifest next update: Sun 27 Jul 2025 13:00:08 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: JPJGlXiPUF4HPAq60ClajU/EIntuvYLQvBAFK2WzP6w=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:c0:e2:25:f0:3b:e9:b2:3e:ec:c4:bb:ff:4b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Jul 26 13:00:08 2025 GMT
Not After : Jul 27 13:00:08 2025 GMT
Subject: CN=e5f12131318f60e40a5cd2b91f54451d55a1d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:f8:61:bc:0c:b7:14:73:13:73:14:86:68:
f4:ae:51:45:8c:8e:ca:94:03:a1:ef:0f:11:ad:c0:
e0:fb:c9:23:d8:78:52:af:2c:a4:0a:73:c9:5d:47:
fe:fc:76:a4:0c:42:9a:02:48:3f:57:5b:ab:d8:fa:
74:2a:9c:b7:3c:2f:08:35:17:19:a5:7c:94:ee:06:
80:57:b2:98:0d:6f:bb:f2:55:45:bc:64:61:5c:e5:
c2:5b:6d:fc:e3:1d:ec:5a:92:df:72:b4:27:8b:6d:
22:2a:8e:b9:ab:1b:33:5f:79:0b:30:20:34:d2:61:
53:4d:9b:3c:b7:07:d1:a2:65:db:1d:83:c0:57:a3:
89:41:36:ce:1d:e2:7b:e8:60:43:94:2d:b4:c8:d5:
91:79:11:13:01:2d:4b:7b:35:69:9c:3f:ec:c6:44:
f2:ed:61:d0:3b:1d:ff:c6:3a:2d:e6:2a:ce:59:b7:
ae:21:e1:d8:96:cb:4e:ce:af:dd:46:81:6c:cd:fc:
e1:a2:95:69:4c:56:1a:e6:f4:63:80:c2:e2:bf:9c:
9c:be:f1:ee:c4:b9:b9:85:1c:be:d8:70:5a:3f:1f:
3f:40:33:2d:88:56:59:7e:3a:8d:37:6a:a4:0c:99:
ca:9e:9b:6b:7e:11:f8:f1:fa:7e:47:c1:29:d4:9c:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F1:21:31:31:8F:60:E4:0A:5C:D2:B9:1F:54:45:1D:55:A1:D0:AD
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:ef:a7:a4:48:e4:b5:fb:20:3b:94:e1:8c:70:df:cf:f5:
a1:c0:94:36:f5:83:ee:f6:87:12:99:80:66:f7:ae:b0:83:7f:
fc:86:82:65:d8:be:c2:30:b3:78:92:74:de:4c:30:40:29:ca:
a4:13:65:ab:58:de:49:eb:20:30:04:01:af:9d:7c:ca:b1:1e:
5f:d1:08:cd:51:33:ae:d8:2b:6f:53:db:c0:33:c9:3e:d5:f6:
20:a0:fb:a1:84:cb:20:b7:45:ad:8c:e3:dc:45:5b:fa:0d:d4:
4b:e0:93:0e:e8:de:7f:c2:6d:db:3a:ee:07:6e:9d:3f:6e:52:
1d:bd:a3:21:4d:64:51:fa:1d:25:22:54:64:31:ae:87:d7:83:
de:09:22:f4:98:bf:28:ff:09:74:47:b2:cc:29:fa:27:8e:ff:
a9:88:44:d4:e5:9d:cb:0d:22:fe:2a:2f:18:41:e6:3a:49:79:
bc:08:fb:42:e6:a4:62:ff:b7:b0:bc:0e:8a:33:26:9e:70:19:
10:4a:46:70:d6:25:99:cb:8f:93:f3:a2:15:7a:8c:b7:61:31:
61:7b:ad:6a:d1:f4:c0:e8:f2:96:89:98:8a:71:95:88:35:dc:
2e:db:70:97:97:19:5b:f6:3c:1c:9a:27:e7:5c:d2:be:6f:9f:
82:34:06:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0cDiJfA76bI+7MS7/0saMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODE4ZWYwNmVmZDZlMjJkNDcxNDA0YWI1MzhhNGI5Yzgw
N2VmZTAwHhcNMjUwNzI2MTMwMDA4WhcNMjUwNzI3MTMwMDA4WjAzMTEwLwYDVQQD
EyhlNWYxMjEzMTMxOGY2MGU0MGE1Y2QyYjkxZjU0NDUxZDU1YTFkMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6r4YbwMtxRzE3MUhmj0rlFFjI7K
lAOh7w8RrcDg+8kj2HhSryykCnPJXUf+/HakDEKaAkg/V1ur2Pp0Kpy3PC8INRcZ
pXyU7gaAV7KYDW+78lVFvGRhXOXCW2384x3sWpLfcrQni20iKo65qxszX3kLMCA0
0mFTTZs8twfRomXbHYPAV6OJQTbOHeJ76GBDlC20yNWReRETAS1LezVpnD/sxkTy
7WHQOx3/xjot5irOWbeuIeHYlstOzq/dRoFszfzhopVpTFYa5vRjgMLiv5ycvvHu
xLm5hRy+2HBaPx8/QDMtiFZZfjqNN2qkDJnKnptrfhH48fp+R8Ep1JwTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXxITExj2DkClzSuR9URR1VodCtMB8GA1UdIwQY
MBaAFESBjvBu/W4i1HFASrU4pLnIB+/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjkt
MzVhZmI1YzI0OGI2LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjktMzVhZmI1YzI0OGI2
LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7fvp6RI
5LX7IDuU4Yxw38/1ocCUNvWD7vaHEpmAZveusIN//IaCZdi+wjCzeJJ03kwwQCnK
pBNlq1jeSesgMAQBr518yrEeX9EIzVEzrtgrb1PbwDPJPtX2IKD7oYTLILdFrYzj
3EVb+g3US+CTDujef8Jt2zruB26dP25SHb2jIU1kUfodJSJUZDGuh9eD3gki9Ji/
KP8JdEeyzCn6J47/qYhE1OWdyw0i/iovGEHmOkl5vAj7QuakYv+3sLwOijMmnnAZ
EEpGcNYlmcuPk/OiFXqMt2ExYXutatH0wOjylomYinGViDXcLttwl5cZW/Y8HJon
51zSvm+fgjQG5A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:16:54 2025 by rpki-client