Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: bij5A8URu27RoMSnZTmvWqrK/HDZHMyDo1zJ2QdMt40=
Subject key identifier: 8C:5B:DB:B7:38:06:11:00:69:9B:7D:AE:95:E0:B7:B7:BA:8A:64:08
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 01974AE8E99A1CE074DFAC6112B24118125C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0CCE
Signing time: Sat 07 Jun 2025 15:01:07 +0000
Manifest this update: Sat 07 Jun 2025 15:01:07 +0000
Manifest next update: Sun 08 Jun 2025 15:01:07 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: tqImO8JxC2n+g/0f8J4OvNBACDgpHCCT6y8zkjZxW0Q=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e9:9a:1c:e0:74:df:ac:61:12:b2:41:18:12:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Jun 7 15:01:07 2025 GMT
Not After : Jun 8 15:01:07 2025 GMT
Subject: CN=8c5bdbb738061100699b7dae95e0b7b7ba8a6408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e5:27:ec:df:e3:5f:81:90:39:3a:7f:ad:c0:
75:af:bd:9c:32:e8:b3:d2:81:ac:f6:87:ab:55:f8:
16:a5:d4:d8:aa:a3:56:77:f7:c4:7e:87:ff:4b:33:
10:48:e1:ad:06:e0:cc:ee:a1:82:3f:67:a6:1e:7c:
23:c4:a5:02:7b:d4:e3:89:5f:a2:80:b1:e9:19:c5:
9e:9a:59:87:90:6c:22:bd:4e:25:bd:78:62:a1:27:
45:97:2a:e8:4e:69:6b:9d:ab:4c:7a:1c:33:b7:39:
e3:d9:02:08:8f:fa:f6:bd:b4:16:18:46:9c:4e:c5:
86:66:bd:c1:a0:88:70:35:33:de:f8:cc:86:51:c2:
9a:ac:56:fb:68:a1:7f:25:10:9b:8a:67:06:f5:7c:
82:aa:4c:8c:95:f0:76:bd:40:55:d9:0c:b9:d7:91:
d9:f2:c8:ff:e1:19:17:80:b2:d7:5f:40:5c:83:be:
62:4a:9a:74:a5:ac:62:26:2d:1b:7e:c6:02:2c:73:
5d:ad:9c:81:72:5b:af:b2:51:d6:cb:81:b9:12:f4:
e0:50:36:56:2b:58:cb:c5:a8:94:0c:4e:c4:bc:72:
c6:2f:7d:52:dd:86:4b:18:de:ed:c1:18:7c:a7:e3:
61:28:60:cc:a9:5d:7c:5d:94:eb:f8:d3:a0:b8:41:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:DB:B7:38:06:11:00:69:9B:7D:AE:95:E0:B7:B7:BA:8A:64:08
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2f:5f:9b:85:43:90:d4:e3:bf:c8:83:2c:16:31:c7:31:6e:
7f:58:0c:12:7f:9d:49:67:bc:5a:fc:4d:a1:bd:67:38:2d:5e:
91:dc:f4:d2:7c:76:f1:f7:85:74:19:7f:72:18:56:5f:16:bb:
43:27:95:75:d2:03:34:a6:06:4b:70:e7:37:50:2c:dc:e4:5f:
68:c9:b1:79:ac:06:7c:59:d8:1f:e8:71:a3:47:a5:df:0d:cc:
04:72:31:54:20:8d:e9:9d:50:62:79:2f:ac:84:ec:2e:c3:13:
b7:b3:78:d3:89:03:6a:62:48:ba:82:24:ea:ff:47:d5:77:88:
9a:a0:e4:01:ca:64:65:c3:3b:14:05:fb:8b:ad:19:03:39:b8:
74:e2:79:82:3c:ba:8b:3a:c1:10:c5:48:08:48:86:7f:61:7f:
61:5d:73:6a:af:26:af:3b:ea:b7:90:13:09:6e:c8:53:8e:3d:
a0:ff:89:f2:4b:4c:51:28:bd:41:0c:8f:0f:4b:22:3d:92:86:
a8:1e:d1:ce:35:d4:e8:d1:61:43:11:0f:fa:a4:11:5b:3d:d7:
9c:fc:5b:4a:92:35:3c:3e:fd:fb:6c:9c:94:41:10:12:04:35:
4a:1d:32:8d:5f:11:35:3c:f0:04:f0:ff:10:c7:c0:5f:f2:1a:
34:11:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:30 2025 by rpki-client