Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: d0cpGnlpwwnfgWQQHOs8WCMneUrlcUap+D2DYsnx2rE=
Subject key identifier: 4A:4C:7F:36:AC:1A:11:2A:C3:E8:CB:2D:E6:87:34:DA:FE:5E:6D:17
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 019A730129858B6018ED1880D98A97B0D9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: Xoy7pbLfcvV8syqmgdWi/GVEHCOTJCLoeJP2yQMIBfE=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:29:85:8b:60:18:ed:18:80:d9:8a:97:b0:d9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=4a4c7f36ac1a112ac3e8cb2de68734dafe5e6d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:69:ec:8d:f4:50:ba:06:f3:6c:c0:c4:53:
d2:e4:aa:10:39:8c:67:02:b1:d3:93:93:b7:71:80:
79:f6:9f:af:f5:3a:10:37:0d:b1:cd:08:24:7a:a1:
13:d3:17:dd:9b:76:1f:07:98:c0:39:76:7b:b5:02:
8c:af:9a:71:62:eb:40:b5:db:1c:1e:d5:c8:8f:53:
9d:2c:e7:7c:1d:25:61:17:b4:d0:7c:04:46:2d:41:
5b:2b:8c:54:95:ca:fd:a9:8b:16:38:a5:a5:29:b5:
3c:59:41:e7:81:55:e2:b4:53:6e:0a:a0:86:a5:0d:
48:1b:ef:f3:b1:50:2c:d2:68:53:62:48:6f:b1:3b:
44:3c:02:42:a2:05:9a:75:43:fa:85:ac:54:31:93:
fb:d8:40:93:e5:f7:97:e7:26:1d:e2:fa:28:9a:1f:
b3:d9:66:66:a7:48:6e:8b:48:f0:25:18:4f:3b:f1:
6d:96:a7:24:c9:1d:e0:46:a9:fa:7e:37:bb:c6:67:
d7:e6:84:cf:6c:55:a1:8e:b2:70:c7:3b:16:60:f9:
1d:d6:46:61:d3:fb:e9:85:6a:b1:d8:c4:91:71:50:
a3:ad:b5:76:36:96:56:53:21:c5:3c:66:c7:6b:d1:
ad:9d:84:86:cb:50:5f:e0:e7:a9:7d:c1:f5:a9:c3:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4C:7F:36:AC:1A:11:2A:C3:E8:CB:2D:E6:87:34:DA:FE:5E:6D:17
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:92:a3:fe:0e:5e:4b:fc:80:1c:ed:cf:d7:71:32:29:2c:
5e:be:79:b4:72:c0:09:50:1e:41:99:b1:88:08:34:37:6b:8b:
eb:19:8d:18:06:e5:ce:43:60:f8:ce:d1:23:15:a7:b7:53:45:
3e:c7:88:12:76:86:66:84:01:40:9d:f9:5d:57:30:90:77:01:
be:1b:5c:f9:15:41:13:48:64:84:3a:61:1d:35:69:5e:3a:db:
76:a7:9b:73:0d:16:4e:f3:06:87:e9:42:b6:eb:90:a7:9f:b8:
71:50:c7:99:ab:f0:61:59:58:a8:a3:09:78:7e:40:dd:b0:7b:
a5:a3:30:81:d3:98:1e:c5:24:4d:ac:cf:c7:b4:a2:ed:b4:3f:
c6:f3:53:fc:c3:e3:6a:a4:af:7a:52:19:9e:a6:d2:2b:12:7b:
96:b4:f7:57:4c:6e:08:2b:3b:60:aa:37:ad:69:31:49:38:9f:
f5:e6:8b:1f:21:e7:b1:d4:e5:cf:36:11:6d:7f:d3:53:f6:36:
1f:8f:d3:13:9d:48:d7:25:e2:64:be:f6:40:a6:f6:20:19:08:
85:7d:4b:41:ac:07:89:c3:27:11:82:ff:3f:8f:2f:35:96:2e:
8b:cc:cc:01:7a:30:05:2e:15:7f:9a:13:0c:01:d9:b5:66:8e:
6e:fa:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:57 2025 by rpki-client