Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: d2JCnddCG0eDKMxCFe75X3FdtjO3GyoBODUipqjbvz8=
Subject key identifier: AD:3B:58:5E:DD:E2:25:F2:62:BB:55:FF:13:44:10:BA:C3:6C:3B:25
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 01958BBB7D1734CD3A4F1A0B1F1AE19B9BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 19:01:14 +0000
Manifest this update: Wed 12 Mar 2025 19:01:14 +0000
Manifest next update: Thu 13 Mar 2025 19:01:14 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: g0RdZsfHNcJ4/pZmM2VAQQWhq2js85Lbn7slFhqYdgM=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:7d:17:34:cd:3a:4f:1a:0b:1f:1a:e1:9b:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Mar 12 19:01:14 2025 GMT
Not After : Mar 13 19:01:14 2025 GMT
Subject: CN=ad3b585edde225f262bb55ff134410bac36c3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:73:9a:9e:7f:42:85:07:7c:5e:25:1c:e2:
d1:24:d8:ea:4f:03:98:5a:d4:2b:d5:97:aa:9e:06:
57:5a:4c:79:58:13:f5:1b:ac:90:d4:98:15:bf:52:
9a:57:49:83:98:e9:5c:f6:75:bc:21:dc:c8:c4:e5:
39:04:41:7a:60:70:92:80:dc:2e:ab:9f:00:ee:47:
1d:d5:82:14:84:09:e6:e2:06:87:92:85:c7:78:c0:
20:f2:a2:35:a4:2e:72:1c:df:ff:23:48:e1:bb:4b:
a5:0c:a3:21:8b:47:07:24:13:9c:f9:84:d3:21:88:
f0:25:d9:d8:fc:54:e2:68:99:32:0d:3f:67:57:13:
62:10:7d:b3:04:5c:bc:78:6c:22:0b:be:ee:60:93:
74:b9:d4:75:0b:4d:d6:11:fb:d4:cc:1c:76:86:61:
50:68:44:09:a9:2b:97:f0:43:c4:52:b8:a3:0e:1d:
5b:69:28:9b:54:35:8f:34:3b:17:44:9b:cd:db:ed:
66:00:cb:5c:41:26:42:4f:a7:78:0c:c2:6d:5f:78:
5d:4e:c4:bc:d1:66:d6:a0:80:9e:9f:4e:64:30:73:
c9:17:6a:67:3c:b8:91:c6:9b:13:3a:05:4b:4a:84:
a9:d3:12:7e:59:67:26:71:d0:8a:a4:54:be:fb:01:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:58:5E:DD:E2:25:F2:62:BB:55:FF:13:44:10:BA:C3:6C:3B:25
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:02:4a:b0:96:b7:5f:b9:d0:1d:6a:34:16:1f:25:7f:c2:68:
55:5f:b9:13:5b:2e:73:d8:b2:11:82:7d:be:71:99:23:96:17:
10:32:be:da:67:53:fe:52:6a:f6:d0:53:72:11:a0:82:a2:d3:
13:65:76:30:69:23:26:7c:4b:54:07:55:7c:9b:14:6b:11:7d:
89:4c:0a:c6:a8:08:a8:23:25:6a:90:7f:95:69:ba:59:fe:59:
9f:63:e8:81:86:19:00:58:65:33:e1:4e:29:99:99:0d:3e:3d:
a6:01:80:f4:5d:4f:3f:9e:63:46:de:77:23:11:cb:12:c7:4a:
4e:4b:78:b9:fd:d1:df:9d:d5:75:97:4f:86:cb:ac:ca:7d:8d:
67:25:33:9f:1a:70:43:ee:e4:a8:12:39:3c:f2:cd:52:3f:5f:
e3:d3:53:da:5e:ee:06:f2:a1:a1:b7:ae:a7:59:75:86:52:95:
e4:46:33:5e:79:7d:08:18:cd:f7:0e:28:25:fd:c5:c7:95:c6:
21:5d:75:4c:1a:f0:6b:8b:45:48:68:70:41:9e:d5:55:96:7e:
59:fc:12:81:cf:7c:d9:46:ea:3a:b6:8d:4e:93:cf:58:ad:bd:
c9:ec:7e:6d:a2:41:2a:58:9a:06:12:ab:a2:92:a4:34:8c:fa:
a1:5f:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:44 2025 by rpki-client