Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: utMopwyWFQz97M1eK9uRsX2GTB+GJv66QYPZ0kSt5RU=
Subject key identifier: 3E:1B:CA:81:0A:12:B2:BE:CA:25:9D:8C:17:73:44:9E:43:5E:35:67
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 01967B32AB147A030BA7E1898063F6B17A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 07:00:40 +0000
Manifest this update: Mon 28 Apr 2025 07:00:40 +0000
Manifest next update: Tue 29 Apr 2025 07:00:40 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: hQN/53S/mYuoijLOhI+CRn4bXax5o1hM4K6Vei/slF8=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:ab:14:7a:03:0b:a7:e1:89:80:63:f6:b1:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Apr 28 07:00:40 2025 GMT
Not After : Apr 29 07:00:40 2025 GMT
Subject: CN=3e1bca810a12b2beca259d8c1773449e435e3567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:fa:b3:9d:28:25:b4:1d:a5:fe:6e:74:cf:
e5:37:85:e5:8a:f7:71:87:eb:a7:2f:a4:a9:cb:31:
11:65:a9:65:f1:84:47:83:2c:3c:72:17:2e:b2:77:
45:af:ec:0a:4c:af:cb:93:c9:18:d0:6a:14:60:3e:
f4:89:06:b3:5c:db:f5:07:9f:c3:93:b8:c2:48:7a:
6b:c6:ad:da:3c:7b:b6:36:00:63:cf:6c:02:3f:d8:
30:1b:f8:89:93:97:73:9c:bb:17:9d:04:28:82:9a:
ab:a9:17:b9:82:4b:80:58:bb:c8:19:38:0f:23:35:
d2:48:0b:30:dc:fa:25:80:37:36:d0:77:c9:82:99:
e7:c5:10:cd:88:59:73:ab:40:09:1a:0a:99:2a:1e:
42:a4:41:0d:5f:17:8c:38:00:e3:db:2e:b9:48:d9:
ad:f1:29:86:15:9f:97:68:4c:af:60:62:28:b6:61:
8e:36:f7:53:4d:ff:27:f3:87:2e:44:9d:d3:a2:05:
39:4c:76:30:1b:d6:84:31:da:f2:08:1e:3d:7a:3c:
49:e1:85:1e:ce:58:02:06:d3:8b:bd:14:1f:0f:34:
40:36:2a:6f:f6:f0:e1:ba:ee:8f:f4:e4:9f:24:e6:
d4:7c:01:79:28:dc:1d:40:b6:d9:87:aa:df:2e:37:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:CA:81:0A:12:B2:BE:CA:25:9D:8C:17:73:44:9E:43:5E:35:67
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:67:79:81:62:ef:17:37:31:be:18:a9:27:76:e5:84:b9:0e:
b6:f1:a5:0d:75:48:69:ce:db:9d:ee:ff:ad:40:cb:3d:c1:6a:
79:3a:83:47:27:4b:17:5b:e7:31:63:d5:59:1d:6f:8e:16:30:
8a:70:d1:e4:6e:c4:fc:e9:70:f3:9d:83:89:9d:35:9f:ad:dd:
22:76:33:84:23:20:8a:85:b3:f4:3e:81:c5:44:18:be:58:2f:
e3:9a:52:92:d2:d8:e6:d2:10:23:0e:46:59:1c:1d:a6:3b:08:
b6:e1:44:b9:6d:f7:ae:7e:d3:a5:6a:01:b6:9c:79:61:43:d1:
3f:7b:4c:cc:e6:42:b7:41:a9:84:5c:83:3e:9d:53:3f:17:94:
3e:71:7c:77:0f:89:35:b8:ff:e4:99:98:5f:2f:a0:58:7d:06:
3d:91:17:ad:c9:95:f1:5b:61:90:7d:c8:82:0e:c9:dc:d2:3a:
40:d4:44:24:18:38:bd:02:7e:51:c8:3f:99:9e:eb:00:01:ef:
1a:4d:a8:ac:07:c5:f5:27:9f:3d:df:9a:1c:60:8c:e9:52:ab:
6a:24:d2:4d:51:cf:20:5f:3b:cd:38:72:98:21:87:3d:f1:b3:
99:6b:12:f1:9f:29:42:1e:86:6e:b6:8b:c4:ae:0f:73:ef:e7:
d8:b2:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:52 2025 by rpki-client