Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: 67q/uEkuPX/DG32WgxcW8f/j7DlcU1VH7aUrBuCCCEc=
Subject key identifier: 57:B3:CA:34:BD:24:38:7A:52:74:55:2E:18:D9:C4:1D:CD:40:44:04
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0198744F9A849355095D378E820ED02F1075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0D68
Signing time: Mon 04 Aug 2025 09:00:30 +0000
Manifest this update: Mon 04 Aug 2025 09:00:30 +0000
Manifest next update: Tue 05 Aug 2025 09:00:30 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: dXuP6qYlzquE74kWxdR8Cnqf/64G/2X6I51cl0Ebwpk=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9a:84:93:55:09:5d:37:8e:82:0e:d0:2f:10:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Aug 4 09:00:30 2025 GMT
Not After : Aug 5 09:00:30 2025 GMT
Subject: CN=57b3ca34bd24387a5274552e18d9c41dcd404404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:29:82:91:a0:38:1c:d4:d9:17:81:7e:62:
a1:97:06:e4:ee:00:ad:c3:63:ae:d6:95:90:04:1d:
9d:30:c4:28:58:cf:fb:2e:7d:49:54:b8:7e:1e:2c:
e2:ae:d0:58:55:4a:de:2a:9c:90:de:88:ca:11:6b:
30:5f:96:db:0d:b1:80:e7:41:bb:ad:56:94:32:a8:
36:37:48:d2:a6:28:57:19:eb:ac:92:84:d7:b3:6b:
91:08:97:e8:0d:2b:27:c5:6a:c9:f4:25:03:92:e4:
d6:1e:b9:44:e9:ed:4a:94:9d:1b:4e:ff:4d:52:30:
94:c7:f2:0e:3c:98:aa:55:fa:f6:5a:20:4f:be:e0:
21:6d:7e:f5:16:50:b8:1a:a3:79:cb:48:8c:86:cd:
75:ea:55:4f:8c:7d:9c:4e:e1:e6:20:22:12:70:cd:
f2:db:ba:30:fe:6d:94:ea:97:8b:9b:6f:a9:12:94:
92:44:2a:d7:11:01:b3:2e:63:4a:f8:1c:f8:a5:31:
f3:8b:4f:a9:23:90:35:dd:95:e1:c0:83:20:2b:81:
2a:cb:d0:26:cb:d0:13:80:b5:03:28:36:e4:7b:4b:
e1:77:fd:76:7e:f1:2d:51:91:a2:73:41:aa:d6:30:
c1:2c:d0:ea:cc:fa:da:94:20:6d:0d:e3:32:dc:96:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:CA:34:BD:24:38:7A:52:74:55:2E:18:D9:C4:1D:CD:40:44:04
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9d:96:05:45:39:a0:10:c4:55:cf:c3:2f:4b:ed:df:e1:40:
50:ac:28:55:f8:82:84:c7:1e:f1:9b:90:9b:e9:7c:49:f7:ed:
49:47:68:ca:82:b9:b6:3b:05:4f:cd:0c:6e:67:9b:71:e9:ab:
19:f5:d7:33:b8:2d:55:cf:06:63:a2:6d:9a:e9:5b:e4:b2:80:
0c:58:5d:6b:c9:a0:e1:2b:14:16:89:30:cf:f0:c3:18:b7:ae:
ba:c5:48:b0:da:54:e4:1f:5a:61:6f:73:cc:98:b4:dd:96:0e:
92:70:41:b9:28:1f:48:64:ff:3b:6e:94:bb:d7:92:33:13:82:
f9:d5:a3:fd:94:73:3f:aa:22:3d:8f:f8:7e:75:4e:1f:58:fd:
32:57:7d:bd:f2:86:c2:25:e2:c7:d7:26:2a:93:b2:6a:1c:ff:
01:bd:67:d6:b9:62:2f:ba:a8:b5:59:15:b7:33:da:3b:2a:1f:
a1:1a:7f:87:3c:82:64:f4:73:05:48:cf:33:7c:f6:77:7b:9a:
f4:f1:3b:ab:02:dc:0c:55:a4:65:05:4f:91:7b:5a:ac:b7:67:
71:21:c5:db:1d:92:37:77:f5:43:3a:77:85:e0:e7:7e:b8:f8:
16:82:e8:3f:d3:3b:a9:fc:2f:df:9a:db:81:76:eb:55:0b:3a:
ac:e8:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:49:06 2025 by rpki-client