Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: Hio1QG5ffbrjxAaMuhcI48FltJa5JHg+/o2avoDEA7M=
Subject key identifier: B2:8C:A4:69:E8:DA:95:19:C1:6B:35:03:73:73:E9:B9:1D:D0:C5:18
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 01991C53EF263DBA99259E822FF711B32EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0DBF
Signing time: Sat 06 Sep 2025 00:01:26 +0000
Manifest this update: Sat 06 Sep 2025 00:01:26 +0000
Manifest next update: Sun 07 Sep 2025 00:01:26 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: sdo7WDcwupOFxI8JOCvmUBaiUF8Qxgg6zZpFor7+R1A=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:53:ef:26:3d:ba:99:25:9e:82:2f:f7:11:b3:2e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Sep 6 00:01:26 2025 GMT
Not After : Sep 7 00:01:26 2025 GMT
Subject: CN=b28ca469e8da9519c16b35037373e9b91dd0c518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:6e:84:1f:86:fe:91:8e:da:98:fc:0c:82:
c0:d9:8e:b7:10:77:01:d5:1f:49:e1:74:e5:43:fb:
8e:fc:ad:d5:3f:03:ce:11:bf:67:ce:40:83:48:b5:
73:e5:14:89:6d:63:0b:eb:ba:9e:ec:17:10:82:1d:
3c:ba:93:fe:4f:21:83:2d:8e:b7:58:f7:11:16:a0:
d0:50:df:e4:74:d4:e4:ff:c1:78:cb:a3:61:b4:7e:
cc:8e:de:70:27:3d:e5:55:ef:56:0b:bf:54:82:a6:
09:73:26:15:fd:f8:73:f7:cf:38:c0:78:a8:bf:87:
e0:65:f5:c5:9d:e1:9f:e1:fa:07:ca:d2:15:86:b4:
7a:e9:de:2c:d9:b3:f8:10:b6:e1:b7:1e:57:4b:fe:
03:6e:d8:3a:b2:31:16:61:59:40:04:1f:8b:9d:41:
d4:ad:55:08:9c:91:ef:42:1b:35:35:18:b1:e8:db:
94:1c:af:d5:48:83:57:2b:f4:25:7a:c8:b1:1a:18:
d5:f7:ac:48:d4:31:44:5b:fd:80:d6:a8:1f:1f:7d:
88:93:75:8b:80:b4:2c:b3:b5:dd:e7:26:69:7c:27:
5d:c5:14:09:07:b4:96:3c:e7:b5:e7:e1:7a:db:4f:
bc:48:93:90:8c:d3:35:59:0a:03:30:9e:eb:2d:58:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8C:A4:69:E8:DA:95:19:C1:6B:35:03:73:73:E9:B9:1D:D0:C5:18
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:8d:39:eb:00:69:73:83:cc:2d:d2:d9:61:45:40:9b:d8:
06:d9:a9:05:2f:66:44:62:4f:c3:ed:db:29:4d:bd:1e:9c:50:
7c:4b:37:b5:2c:9d:90:52:fc:c0:00:56:2b:17:55:91:f4:15:
a1:13:61:38:e9:5e:3a:86:8c:7f:93:59:89:62:a2:ab:c0:bb:
24:52:12:86:cf:7a:3b:ef:82:ff:bd:2e:f4:18:a3:97:93:55:
63:f3:12:c2:31:ee:48:1e:4b:0e:1e:73:95:5b:02:a1:b9:64:
1d:3b:e1:af:66:d7:af:f6:3c:74:53:f5:c7:d0:9a:c6:f9:fb:
97:80:c6:f7:70:86:1e:6e:14:66:50:8b:b1:db:65:2d:1f:4d:
46:1a:4b:a7:f1:f2:d6:0f:e6:ae:7c:c2:d8:b9:3c:a7:bf:ec:
99:bc:9b:aa:cc:3e:26:a1:5a:58:c1:98:29:0d:ec:43:cb:46:
66:95:37:dd:44:18:b1:34:bf:f8:57:65:e7:7c:cc:8d:68:6f:
db:f2:ac:33:5a:d1:48:fc:9f:78:7e:8d:61:65:18:38:ea:98:
6d:57:51:df:3b:ee:4f:91:1a:e5:a8:32:3c:bd:dc:38:70:88:
43:5e:32:bd:be:65:88:b5:b3:65:7b:9d:cd:a3:dc:ed:f2:bf:
51:13:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:50:46 2025 by rpki-client