Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: cSxqs9mcZH/PtpUpbWUpgJDp0yHk7iLFCn+bYBPhlXk=
Subject key identifier: 20:36:55:75:A7:9F:52:1A:3F:AC:3A:6F:83:7B:19:11:83:A2:A5:70
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 019636BFAA41A03C166C639B5D65E903CACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0C3F
Signing time: Tue 15 Apr 2025 00:00:52 +0000
Manifest this update: Tue 15 Apr 2025 00:00:52 +0000
Manifest next update: Wed 16 Apr 2025 00:00:52 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: kd9+PCliJkyhjFKvc/vqXXko/7QENcA3UAkpDVlVa2I=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:aa:41:a0:3c:16:6c:63:9b:5d:65:e9:03:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Apr 15 00:00:52 2025 GMT
Not After : Apr 16 00:00:52 2025 GMT
Subject: CN=20365575a79f521a3fac3a6f837b191183a2a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:b1:00:39:98:35:5f:53:19:5a:2b:39:83:
fc:b7:c3:64:aa:2c:e3:7b:81:f4:db:09:66:fc:3f:
51:7b:73:1d:19:6a:45:77:d1:d5:d9:0c:c3:5a:b4:
55:80:0a:53:64:45:53:22:0e:3c:bd:62:0d:62:48:
58:9c:65:6b:b1:37:1e:0e:ab:f6:e8:8a:00:04:63:
fd:69:b0:65:1a:8a:25:09:0e:ae:0f:d2:da:ee:ab:
54:a6:82:ea:6b:f8:d3:6e:d3:9b:c9:29:90:28:7b:
e8:58:26:8b:4c:8c:30:85:3e:e5:b6:89:7d:38:f0:
92:bd:c3:16:3a:c3:6e:4a:49:2a:a9:16:33:2a:f1:
12:1a:a6:a4:9a:16:dd:ca:7c:29:39:99:32:34:f8:
0f:64:8e:03:b2:22:2a:54:d8:59:d6:60:27:23:fd:
97:9a:b7:e8:2c:1f:ef:fb:69:89:04:fc:b1:35:ab:
c6:9a:a5:c8:78:85:32:f7:7e:d5:d2:1d:92:e7:e7:
fe:23:cb:10:d2:d9:f1:c7:40:b9:92:e9:e0:53:a2:
4f:87:51:e4:bc:1e:57:d1:74:04:57:a1:1b:42:82:
58:0f:1c:c5:21:cb:f8:8d:df:22:49:12:9a:c0:80:
66:ac:2d:b6:38:80:c9:4b:12:c8:f8:4e:d0:a6:29:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:55:75:A7:9F:52:1A:3F:AC:3A:6F:83:7B:19:11:83:A2:A5:70
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a9:14:52:dd:45:5e:d6:62:82:d2:05:58:de:68:55:38:f1:
4d:a1:11:dd:42:82:96:14:23:f4:ad:21:30:7d:28:63:f1:ad:
5a:5b:55:d5:af:f9:b5:f1:34:57:8d:53:2f:56:4b:15:42:db:
34:ad:2d:ac:2f:df:dd:4a:a1:2d:27:eb:99:92:7c:ae:14:2c:
31:99:6d:48:b9:89:e8:ea:5a:d2:bc:82:76:73:f3:14:b1:14:
00:7d:44:15:5d:0b:f7:86:fa:d4:ae:76:8a:34:5b:a8:67:d0:
48:b1:7b:25:67:da:e4:05:ec:c2:0c:90:01:87:62:96:56:60:
7f:76:f6:e7:29:42:81:da:df:d7:c0:85:5d:8f:a3:92:92:59:
61:ec:e4:51:49:3f:f6:26:44:2b:b8:59:72:2a:21:2f:1c:0f:
57:6d:90:d3:0e:3b:18:ac:09:ce:a7:9e:72:69:30:96:27:5a:
67:a5:b2:02:95:5c:3a:ad:30:ff:fa:b1:d7:e3:d7:f4:69:b5:
a2:0a:2f:d8:bd:c6:1b:ab:52:4f:6f:35:ec:d9:86:90:8c:f4:
eb:8e:2b:74:bd:6a:8a:25:b3:25:4d:20:09:00:8a:24:09:9c:
a2:81:d6:d0:de:9b:21:46:d7:cd:0f:17:71:fe:0d:8a:0d:57:
b4:0f:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:15:23 2025 by rpki-client